Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a67f80be-6c2a-331d-843e-4430cf12beae.roa
File: a67f80be-6c2a-331d-843e-4430cf12beae.roa (raw, json)
Hash identifier: K0lUsQNcfu8dXr6y0S4okfiU2F77p3NSoMMeUhZ7xtE=
Subject key identifier: 6D:56:98:12:BC:F5:37:8B:DE:91:CB:11:0D:12:93:50:93:F9:28:36
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FB09480581FC0B75CBA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a67f80be-6c2a-331d-843e-4430cf12beae.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397215
IP address blocks: 204.74.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fb:09:48:05:81:fc:0b:75:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=9c7f785c-fe45-422b-83f1-3ea9e7372b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b9:86:1e:c1:3c:89:4c:b8:64:c0:8d:ff:85:
5e:84:66:d9:8c:bb:b5:db:76:85:e0:ff:b3:92:80:
a1:86:0e:ad:fa:b2:1c:97:40:f2:df:b0:50:cc:d9:
7b:82:d7:25:08:fb:9c:b6:d3:1e:13:ea:35:0a:b1:
94:67:6c:1a:a5:d9:5b:b4:6a:27:92:1b:86:e9:f2:
f0:c7:e4:b2:7a:cc:a3:58:d1:26:0a:b4:3d:45:6b:
c6:d2:9e:0a:dc:44:bd:98:ed:e0:f7:a9:c2:d8:a7:
dd:5e:2d:63:9a:ab:91:d6:2c:b2:a6:8e:df:a0:25:
95:7b:24:da:35:92:34:34:9f:48:4e:43:bf:5b:3b:
0a:b0:18:53:13:ad:f5:5a:91:76:b3:ea:c3:83:dc:
7f:b5:dc:2a:0c:3e:9f:9f:8a:bd:0c:7b:aa:81:39:
a7:ab:46:12:7b:7f:a6:5d:50:fd:31:63:50:5d:06:
87:52:57:02:61:09:a8:83:0c:fe:4b:e1:59:aa:5c:
73:82:2b:89:91:41:43:95:0d:36:2f:51:93:81:58:
0e:c7:f5:a9:47:10:fa:84:aa:ac:20:19:cd:51:90:
ce:00:5c:0e:00:5b:5f:39:a3:d5:39:4a:8e:d7:38:
44:96:17:66:9f:ac:4f:92:2d:f2:87:1c:67:e3:cc:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:98:12:BC:F5:37:8B:DE:91:CB:11:0D:12:93:50:93:F9:28:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a67f80be-6c2a-331d-843e-4430cf12beae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:89:b2:6a:3d:24:c0:a3:3e:89:28:8e:9c:dd:9e:f2:6c:77:
af:a3:a5:73:a1:47:a7:53:7f:24:bb:2d:16:a7:93:e7:87:16:
91:9c:9f:c9:72:5d:76:ee:e7:1a:c8:eb:0a:ad:a9:c3:74:16:
37:e7:31:a2:25:01:ef:6a:85:53:94:55:26:2c:00:65:a8:a9:
91:d1:bd:3e:14:50:10:e8:64:1f:d5:98:5a:ec:bb:b9:5b:fb:
cb:a3:45:17:b8:8c:95:85:4b:9a:1d:05:a9:c3:1d:96:97:5b:
d7:04:14:0f:05:4d:d8:80:5e:26:70:6d:d4:24:a1:1d:b3:d6:
f5:43:8b:1f:7f:e8:42:92:69:39:0a:bc:a3:5d:97:24:87:a0:
b9:8c:3c:97:a7:c7:46:ff:c7:5c:c2:f8:8f:43:bd:21:be:72:
f1:d0:9e:2f:3b:5b:b8:76:ad:cb:37:3c:34:e6:0a:48:2c:52:
20:0a:7f:e5:23:38:58:a4:30:c4:6d:1e:b8:f6:fe:db:d9:9e:
d5:cc:a7:66:1b:23:c6:96:94:c6:fb:9f:27:fe:37:de:e8:18:
b8:3e:59:ba:7c:48:7f:9e:98:35:e0:0f:6f:16:58:ef:26:79:
0e:0b:1c:db:92:4c:25:6f:06:cd:91:6f:c2:c0:2a:83:9f:53:
e9:7a:98:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:19 2025 by rpki-client