Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7d31dab-19c8-3161-88fb-211e4c8b5f50.roa
File: b7d31dab-19c8-3161-88fb-211e4c8b5f50.roa (raw, json)
Hash identifier: XHiCSq4erKCsvR+yfK/fNgfdv3FwjVb8IzhT80Bji3Q=
Subject key identifier: 1E:72:33:B2:92:9D:16:02:35:B0:C2:26:E5:12:FD:7F:40:E2:8B:1A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848907600D00586827DAE53EA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7d31dab-19c8-3161-88fb-211e4c8b5f50.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397232
IP address blocks: 204.74.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:00:d0:05:86:82:7d:ae:53:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=f43ce63d-6fba-420c-bbf2-54bcce8690e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f8:5b:68:ed:21:45:11:26:3d:b1:a1:11:eb:
bd:3f:ca:c6:6a:f8:73:41:26:0d:2a:14:aa:16:59:
6e:61:96:8b:bc:79:94:5a:ac:3e:73:28:bf:cf:b3:
5f:f3:38:c9:a6:ab:84:b2:d9:4f:54:16:f1:7a:47:
aa:fe:3d:4c:79:16:f7:85:6c:ab:d4:af:59:eb:c5:
a3:39:3a:a2:15:87:85:a0:60:3c:b3:e9:5a:4e:2f:
cc:44:d2:41:7b:db:86:4a:fe:84:42:df:8e:b0:a5:
bf:b3:0f:4c:09:ef:b8:65:61:82:ec:ca:37:12:6c:
2f:46:ea:d8:90:b8:42:a4:ca:7c:7f:75:df:72:23:
e5:35:84:c4:e1:0a:27:4f:4a:3c:88:5f:a1:3f:81:
f9:a3:9f:3c:d2:4b:d7:da:ec:3b:d7:c1:63:73:31:
ad:35:5d:ae:3a:2c:29:17:92:92:31:1e:1b:6f:90:
86:73:8e:be:42:cf:67:3c:3e:92:44:79:6f:ca:c9:
ea:d0:ae:ed:ed:36:72:4a:49:6b:25:b4:f5:34:2e:
51:a6:24:5d:19:6e:82:e1:75:7e:14:c2:bd:dc:9c:
d6:d2:38:14:3a:25:e3:bc:b3:8a:f6:9e:08:29:82:
d6:2a:d7:4c:6f:f1:87:f3:d8:c4:86:84:75:f2:42:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:72:33:B2:92:9D:16:02:35:B0:C2:26:E5:12:FD:7F:40:E2:8B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b7d31dab-19c8-3161-88fb-211e4c8b5f50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:1e:0c:64:e1:7c:50:14:ac:38:2b:5c:3a:25:12:ac:62:e5:
78:e1:73:69:2a:d0:37:3f:51:5d:1c:9a:82:99:5e:71:03:61:
f3:d9:db:91:61:e5:13:41:cd:8f:d8:de:6d:d9:a4:b6:70:48:
43:01:bf:30:10:aa:e6:03:ed:e4:e5:c8:ea:c3:48:69:64:1e:
e1:6e:9c:eb:ad:d8:c8:a0:68:c4:fa:16:9b:2f:24:0d:a8:2a:
86:79:0d:b6:6e:65:98:c4:cf:ab:ac:fd:d1:cb:a3:3a:b1:26:
9f:b0:95:9c:53:3b:62:cb:71:b1:0d:fb:eb:97:d0:53:cc:dd:
8a:b8:00:3d:50:95:9a:75:9c:c0:a4:3b:96:97:79:57:3f:2e:
10:03:b1:8e:83:19:5a:5f:fa:a0:9f:a5:70:82:7f:c6:8c:d2:
e0:8f:ee:d2:06:8a:f0:65:04:d4:4e:97:77:36:69:f5:8f:49:
ce:2a:5d:fe:0c:67:74:f8:84:de:a4:14:94:9a:3a:8a:fb:6e:
de:cd:54:40:ca:61:58:8b:f5:62:ca:95:f4:57:41:d2:93:f0:
52:5b:70:0c:f5:a4:7e:a7:b1:ed:8f:67:89:52:de:10:dd:7d:
74:f4:d7:61:86:df:c0:d5:cf:00:99:6b:87:8d:ce:a9:3e:b2:
68:94:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:15:30 2025 by rpki-client