Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a375a95-90b5-3017-94d5-58a09e5d59bd.roa
File: 9a375a95-90b5-3017-94d5-58a09e5d59bd.roa (raw, json)
Hash identifier: Af7rGeqabBphXhe6Wy9bZb5ADiVfv/D9jXlikeSoivI=
Subject key identifier: 7A:A8:04:2C:F3:3B:B0:89:C0:79:57:F7:B1:17:9D:04:40:A5:8B:A0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F6DD5D9ABCB687CCACC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a375a95-90b5-3017-94d5-58a09e5d59bd.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397218
IP address blocks: 204.74.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f6:dd:5d:9a:bc:b6:87:cc:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=7f3d2c53-a1f7-4b65-bafe-bc94b80b0f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:74:40:95:df:25:72:08:a5:74:89:84:8c:
23:97:83:d4:e2:83:f3:8c:6c:76:80:4e:8f:e8:13:
21:79:af:b9:7e:8f:62:1e:fb:3d:5d:bd:e2:76:05:
dd:b8:1f:f5:13:44:01:23:20:f1:8d:5f:4e:68:54:
ce:17:1f:59:54:e4:17:cf:c3:70:e4:b8:94:14:17:
21:5d:a0:b0:5f:46:16:20:4b:9b:52:62:60:1d:95:
1b:90:86:17:bf:d1:f9:78:74:a4:ba:44:ca:ad:32:
5d:61:79:20:03:8a:57:47:6d:b1:20:b1:09:8b:98:
5e:b3:0d:96:a1:6d:bd:35:32:a8:6a:e2:68:fe:f8:
cf:ef:c4:e4:de:7c:0d:9c:38:05:56:a4:b3:5d:70:
1b:8a:4f:7d:6c:e3:e8:93:d2:00:2f:5e:98:64:40:
e6:32:bb:0a:ca:da:6e:12:ae:b7:30:7e:be:ab:4c:
30:33:7f:08:e4:a4:e2:b7:89:1f:86:a3:00:2a:a4:
f3:e6:90:a2:d5:71:89:fc:f1:12:7a:99:fe:8e:b4:
68:f1:36:69:5d:bd:2d:29:6b:3b:6d:b4:13:40:26:
42:ba:42:6f:98:ec:28:c6:6a:32:d4:34:63:23:d7:
13:fc:e8:92:12:87:fc:51:50:3a:a6:cf:0f:44:7b:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:04:2C:F3:3B:B0:89:C0:79:57:F7:B1:17:9D:04:40:A5:8B:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a375a95-90b5-3017-94d5-58a09e5d59bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:39:35:95:f3:26:7c:4c:68:4e:dd:6f:cc:9e:64:4e:d9:c0:
34:c3:4e:df:3f:0e:5e:5c:1a:c4:97:45:cb:d4:d2:81:38:e8:
18:ae:99:7f:ef:9e:0a:89:b4:92:0a:b3:4f:c6:9b:4b:61:2e:
ea:74:91:27:94:3b:3f:a7:c2:65:8d:d4:2b:52:d9:d5:d5:34:
39:6c:17:c7:e7:95:a4:9a:78:22:72:88:0f:f7:0a:f2:10:37:
c1:72:fe:3f:6f:c9:96:7a:28:8e:88:3a:7e:b4:7e:4c:a0:73:
6d:58:9e:5e:8a:ec:43:9d:64:a1:09:f2:70:f4:67:ed:41:43:
7e:9d:ca:2b:80:a6:a6:48:95:93:42:96:e1:74:37:a1:73:f7:
5b:46:62:0d:2a:57:5f:13:70:27:9b:76:60:78:a6:ef:1c:b0:
d6:8d:87:ca:48:98:02:3e:b3:60:d5:e4:4b:0c:66:b4:71:71:
04:60:ae:9e:42:6b:da:39:66:e5:fa:32:01:91:11:64:bb:16:
2a:94:60:2f:e6:4a:bf:1f:fc:c3:7d:30:59:9c:90:cc:fb:f1:
cc:8d:c6:74:d8:01:52:01:ee:9a:a9:f0:7b:76:0b:c2:da:39:
78:40:41:e6:61:e7:c6:fa:cb:1f:92:28:42:81:39:df:b8:3f:
70:b6:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:05 2025 by rpki-client