Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa
File: af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa (raw, json)
Hash identifier: VqfuN0I1YdPcOEz+cuLl8MhI4WeM3T4O5f+Kq6rYnOk=
Subject key identifier: 54:C4:FD:32:45:FD:37:A2:42:38:19:7E:82:63:70:4F:FF:47:67:28
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F045D1F4AA172C68FC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397227
IP address blocks: 204.74.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f0:45:d1:f4:aa:17:2c:68:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=bc534637-c44c-4555-a6cb-ef65466445d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:9b:b2:d7:17:cf:e5:af:e3:fe:98:52:b9:
88:8e:bb:14:6e:61:33:e4:aa:7a:14:52:23:70:4a:
68:2a:83:ff:38:09:0c:3e:38:b8:41:81:80:27:56:
9a:c8:98:15:67:8f:0c:fa:6b:90:d5:17:29:d4:21:
f4:78:69:a9:8d:5c:02:92:53:f4:b3:35:e6:71:00:
69:de:68:29:44:10:e2:8b:75:44:15:e1:f5:cc:24:
ec:f7:2f:4b:ab:db:a0:ff:38:f9:d3:49:7c:fa:42:
99:e5:c5:10:16:f0:02:56:f9:c7:d8:85:ae:72:6a:
7a:c1:e7:92:2a:3c:73:95:c8:60:75:b1:52:c1:c8:
cf:44:a2:20:8c:87:8c:45:0a:20:b4:04:01:1a:d9:
09:76:cc:00:2f:5a:55:58:5a:08:db:b5:d2:12:5a:
b3:45:c2:e6:f7:36:e0:f4:3d:73:2e:80:8e:e6:91:
fc:49:c3:50:1d:5d:ff:76:31:5c:69:9e:f5:0e:54:
3d:a4:73:81:1b:85:68:85:09:a7:16:67:f3:a8:83:
6d:ff:be:60:27:48:f6:21:54:e1:de:cf:34:f8:b8:
9e:b7:ac:cf:08:14:f0:b0:26:c3:fd:37:66:f3:19:
55:eb:c1:31:2e:da:84:6d:8b:cd:eb:9e:2a:c4:10:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:FD:32:45:FD:37:A2:42:38:19:7E:82:63:70:4F:FF:47:67:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af9be5dc-d984-38e5-aaf7-3b71f2ce3255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:cc:32:ae:ed:07:55:35:cf:3a:47:af:4b:b8:02:1d:dd:67:
45:cc:db:6c:45:80:2a:8a:fa:93:db:17:06:9d:fd:70:ac:ec:
4f:bd:28:fa:d5:77:ed:2b:58:7d:2e:90:7c:c8:06:3a:9e:9f:
db:5f:4e:e5:73:5f:58:86:75:25:18:9f:b2:d8:f8:4a:e4:b5:
e1:ef:0b:05:00:5d:81:94:6b:d9:2d:73:3a:e8:11:35:d7:39:
8d:18:4d:87:f4:ec:29:54:c2:a5:41:ff:51:d2:c5:21:6a:97:
7f:03:67:3f:61:79:9c:25:9a:96:04:d4:16:f2:17:ee:ac:45:
0d:1c:a1:7e:0b:ef:d9:26:12:e6:ae:8b:12:89:4d:a8:e4:6e:
6d:9a:53:f9:d3:ec:19:e6:8e:4c:fd:37:61:25:4e:fc:03:91:
06:25:e8:99:a8:3f:f5:df:c5:f0:27:97:80:2b:81:18:47:9a:
c2:5b:03:5b:a8:a0:88:aa:d8:a6:33:11:e4:27:45:ce:41:ab:
42:6a:8a:6e:0d:5a:72:08:83:38:f0:3c:9c:ee:cb:7b:cb:d5:
c1:06:a9:cc:09:d6:d1:15:7b:35:ef:26:e5:8b:f4:03:54:3f:
d7:43:3f:cd:03:76:54:cf:c8:a1:33:a6:b3:ee:f4:36:89:d6:
1b:c0:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:44 2025 by rpki-client