Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c62421-3a91-30f3-a1ec-4345363c0b81.roa
File: a9c62421-3a91-30f3-a1ec-4345363c0b81.roa (raw, json)
Hash identifier: +/3mjaL3oerJWOb5JyvyuKcPw1r2ATg0WvHHY0JnIpE=
Subject key identifier: 20:A2:D5:9B:95:A5:87:F8:22:54:BF:4B:28:8B:8E:50:ED:1B:5E:2E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F0639C4D14B8B1516D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c62421-3a91-30f3-a1ec-4345363c0b81.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397229
IP address blocks: 204.74.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f0:63:9c:4d:14:b8:b1:51:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=ea2dea61-a9f8-4d5f-884a-e9319a66ea97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:65:e9:2a:30:5c:fe:37:b3:6c:48:ba:e4:
3d:6f:4c:3b:de:4f:f2:57:e2:04:8c:6a:f4:d7:29:
a5:9f:32:dc:53:f2:32:6d:e0:95:21:00:6f:cc:a1:
b8:3d:fa:48:75:16:7b:cc:fa:af:3d:fa:72:57:a3:
81:ac:73:18:da:35:37:18:9f:89:46:21:f7:55:bd:
2d:1d:1c:27:d0:ee:7e:dc:d7:69:ae:57:80:d4:a4:
70:71:76:25:5f:14:47:6d:0d:1f:be:fa:52:47:2b:
ff:6b:95:c9:14:37:9a:77:c4:91:3f:fc:fe:ee:e0:
4f:02:ff:02:18:36:e4:70:ab:32:87:eb:b3:05:b2:
88:6b:da:46:ea:eb:38:19:f5:bb:02:2d:7d:d7:23:
eb:0f:a5:1c:0a:db:3a:62:9f:e0:f0:b1:4f:16:4f:
ba:45:16:eb:32:5c:65:a4:97:ed:2b:b3:f2:9d:45:
e7:cb:4d:51:bd:e1:b3:3a:2e:fe:4b:34:fa:43:17:
48:a2:ff:ec:ba:7e:e6:f2:eb:b3:ce:94:75:af:87:
da:4e:6d:99:fe:da:9c:10:10:1d:bc:04:ef:81:f2:
6d:df:6d:d1:bc:85:ee:93:07:b5:ef:10:d7:d0:f4:
ca:9e:69:c9:de:1d:ee:dc:c8:47:9b:53:bb:53:77:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A2:D5:9B:95:A5:87:F8:22:54:BF:4B:28:8B:8E:50:ED:1B:5E:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c62421-3a91-30f3-a1ec-4345363c0b81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:6e:ee:ec:83:38:6d:6b:b1:5f:e4:f1:cb:d2:6b:67:76:5f:
5b:d8:35:11:0e:31:0d:1b:ce:4f:9d:cf:23:5e:f4:08:95:2a:
9d:e9:73:24:f9:0c:b7:a6:96:35:37:d1:9b:7e:f3:3c:a3:82:
31:02:f5:f1:6f:44:3c:3d:25:67:cd:e8:e5:a3:cb:9c:ab:dd:
50:a6:ce:00:7c:a6:69:2e:a8:2e:53:6c:23:16:f8:06:bc:6d:
3b:ff:4a:4c:8c:0c:bf:82:38:f3:7b:46:8e:23:db:c7:b0:bf:
26:28:f6:69:6f:c4:2f:4f:2e:19:29:73:c6:0b:71:ed:42:ed:
33:5c:14:7d:cc:76:be:e2:c7:68:3a:22:fc:52:e6:21:a3:3f:
66:8f:db:fe:96:e6:19:4b:be:a0:c8:b2:ab:dd:9f:6f:87:d5:
a1:ed:01:c3:bd:ee:7a:a8:5b:d5:f4:5f:c6:69:a4:b6:c7:e8:
0a:36:6e:73:3b:61:56:52:57:b2:eb:de:fe:3a:98:20:3c:e0:
09:f2:cc:25:f8:f6:4d:48:85:26:2f:40:ae:0b:2d:eb:fb:2e:
e8:15:ea:61:65:f6:e1:50:28:46:7d:19:da:e5:56:9c:0d:be:
62:ad:8e:72:e3:42:91:ef:36:ee:b9:8f:22:0d:09:1b:b3:60:
74:d5:ff:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPBjnE0UuLFRbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZWEyZGVhNjEtYTlmOC00ZDVmLTg4NGEtZTkzMTlhNjZlYTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqahl6SowXP43s2xIuuQ9b0w73k/yV+IEjGr0
1ymlnzLcU/IybeCVIQBvzKG4PfpIdRZ7zPqvPfpyV6OBrHMY2jU3GJ+JRiH3Vb0t
HRwn0O5+3NdprleA1KRwcXYlXxRHbQ0fvvpSRyv/a5XJFDead8SRP/z+7uBPAv8C
GDbkcKsyh+uzBbKIa9pG6us4GfW7Ai191yPrD6UcCts6Yp/g8LFPFk+6RRbrMlxl
pJftK7PynUXny01RveGzOi7+SzT6QxdIov/sun7m8uuzzpR1r4faTm2Z/tqcEBAd
vATvgfJt323RvIXukwe17xDX0PTKnmnJ3h3u3MhHm1O7U3eyHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCi1ZuVpYf4IlS/SyiLjlDtG14uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTljNjI0MjEtM2E5MS0z
MGYzLWExZWMtNDM0NTM2M2MwYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1u7uyDOG1rsV/k8cvSa2d2X1vYNREOMQ0bzk+dzyNe9AiVKp3pcyT5
DLemljU30Zt+8zyjgjEC9fFvRDw9JWfN6OWjy5yr3VCmzgB8pmkuqC5TbCMW+Aa8
bTv/SkyMDL+COPN7Ro4j28ewvyYo9mlvxC9PLhkpc8YLce1C7TNcFH3Mdr7ix2g6
IvxS5iGjP2aP2/6W5hlLvqDIsqvdn2+H1aHtAcO97nqoW9X0X8ZppLbH6Ao2bnM7
YVZSV7Lr3v46mCA84AnyzCX49k1IhSYvQK4LLev7LugV6mFl9uFQKEZ9GdrlVpwN
vmKtjnLjQpHvNu65jyINCRuzYHTV/2g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:43 2025 by rpki-client