Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab1b3c24-6def-3cdc-815a-ed52176818f7.roa
File: ab1b3c24-6def-3cdc-815a-ed52176818f7.roa (raw, json)
Hash identifier: 4XEWDR+91e7/OP9NdOV0tRrCntSZo1SCwX9P/GbZQ9U=
Subject key identifier: E3:C0:84:46:3D:33:89:C6:59:CE:12:AF:93:10:11:F5:63:60:7C:22
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849403954310F62777D62EBD180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab1b3c24-6def-3cdc-815a-ed52176818f7.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 399158
IP address blocks: 204.74.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:54:31:0f:62:77:7d:62:eb:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=90926def-77da-443e-b360-903623b28c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:d2:ff:7f:a3:90:27:4e:62:d2:67:cf:ca:
39:e7:cf:75:2f:87:c6:06:75:21:24:17:84:a6:af:
0a:bc:b8:a3:85:7f:c1:8b:da:96:0b:8d:e7:a7:1a:
ec:7f:42:bb:b9:5b:0e:73:e2:d6:14:59:ef:d2:14:
f7:bc:8c:fd:a7:88:b6:0d:69:f9:ed:34:07:c0:07:
fc:b6:f9:0b:79:05:a5:82:b8:d8:a9:60:19:53:d5:
b7:8d:9a:10:85:0a:cc:2d:72:d8:1c:35:c9:c8:db:
ab:d8:0f:da:d0:63:70:24:82:12:65:82:36:5f:2f:
01:bf:68:35:b8:7d:a3:7c:cd:d7:59:1b:65:3c:a2:
b1:7b:cd:c1:8e:57:dc:69:6f:ac:e4:09:44:7a:e2:
3f:d0:bd:2b:6a:45:da:d9:62:79:ad:cd:7c:6a:7e:
dd:ce:f3:fe:10:b1:bd:fc:14:63:34:fe:72:1c:db:
cf:58:60:b2:41:de:a3:6c:f4:13:5e:1b:10:2d:90:
82:c3:99:75:11:c6:b8:89:99:b4:17:2b:97:06:69:
61:49:39:3a:b8:53:d2:a4:3b:c8:93:29:ad:05:b3:
54:d6:7b:54:82:0d:c1:ed:2a:c6:1a:f1:a1:42:42:
a1:ab:76:85:90:92:8c:ec:a7:93:73:a1:fb:63:77:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:84:46:3D:33:89:C6:59:CE:12:AF:93:10:11:F5:63:60:7C:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab1b3c24-6def-3cdc-815a-ed52176818f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:92:5f:ba:b3:24:5d:fd:84:f8:7f:b3:36:b2:cb:71:49:6e:
f4:95:b1:38:2b:99:e6:87:8f:e5:a3:12:95:26:0e:10:32:65:
58:48:11:b0:fb:11:a2:0e:0a:56:a7:89:5f:9b:47:d5:b3:60:
29:c3:4d:e6:e0:bd:a3:65:a7:5b:02:7b:28:cd:13:63:d5:fa:
a1:3f:c0:7e:9b:22:67:5a:ad:82:5f:d1:b7:f8:29:45:8a:2b:
50:a5:04:29:32:13:69:22:82:48:d5:e9:99:db:73:ba:3d:fe:
de:24:34:ed:9c:d6:f9:05:6b:b6:9a:f9:cb:3b:16:89:2e:19:
b3:21:b8:62:5a:54:f1:f8:bc:38:82:ef:f7:17:e6:a6:72:ab:
1a:5f:5a:0e:ad:69:12:ec:29:18:cd:35:24:a2:80:33:19:58:
b3:aa:c2:e4:d8:e9:72:e5:66:d8:af:30:39:af:d4:4c:e9:88:
7b:69:d6:7a:5b:97:c2:28:60:0c:ad:0b:5b:0e:54:34:4b:59:
01:a5:a2:62:d7:81:d5:82:2f:76:5e:d0:75:3f:3b:9b:39:ed:
7e:cc:7a:5a:bd:72:8e:f6:29:03:3b:44:25:0a:18:2c:b2:88:
6b:22:ec:74:af:0f:00:40:6e:85:e7:fb:04:7a:6c:41:20:9b:
83:a4:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:57 2025 by rpki-client