Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf25971a-9c2e-3fda-84e9-5b71a98fb091.roa
File: bf25971a-9c2e-3fda-84e9-5b71a98fb091.roa (raw, json)
Hash identifier: Jq4YvBiviYPpcgwN4u1xsshFkAFZbm36jh+SUiMoGds=
Subject key identifier: 11:A1:86:2B:F3:AC:88:03:8D:B0:01:FA:74:91:1C:3D:F9:EE:86:17
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F30574C681328CB76400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf25971a-9c2e-3fda-84e9-5b71a98fb091.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397235
IP address blocks: 204.74.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f3:05:74:c6:81:32:8c:b7:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=75bfcae3-5c1a-4710-8f24-80bd2363df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:33:ff:a5:6f:79:9c:22:0f:15:69:a5:40:
99:e2:48:45:2a:ff:03:d7:a0:2e:f8:fe:d8:2b:5d:
b1:3e:8a:55:72:6d:c2:22:76:e9:73:5d:e1:08:34:
d4:0c:ce:ef:f0:7d:d3:e7:d3:3f:ef:74:24:a2:21:
6e:a2:42:77:f7:52:2e:bc:24:31:0d:15:d1:e9:1a:
f5:17:e3:99:a8:7a:0d:44:65:20:49:c9:50:1c:d7:
a6:86:29:c7:2a:a3:d0:7d:ea:96:51:66:b8:e0:6b:
92:05:6e:c7:77:87:45:94:a0:8d:77:35:04:38:99:
ae:cc:c1:fd:ea:f9:99:68:6b:3f:80:77:19:0b:bd:
73:cc:b3:1c:41:0e:3b:84:09:ff:ab:50:c0:7b:1e:
db:d4:b8:b9:4f:41:e0:e0:8a:0a:2b:49:2c:de:88:
f2:6a:cf:ba:80:60:4e:36:12:ac:18:db:97:52:09:
24:3b:ef:ec:84:d9:c1:5d:74:e5:56:dd:fb:c7:29:
26:1d:56:71:53:56:7a:a1:82:bf:ad:19:b2:66:b9:
30:ca:82:ba:0d:87:8a:36:45:cb:83:f9:50:aa:19:
89:dc:58:cc:37:d7:cc:b5:96:8f:af:43:cf:ea:00:
b6:cd:48:19:cd:bc:f3:50:40:71:80:f5:d3:f0:ee:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:86:2B:F3:AC:88:03:8D:B0:01:FA:74:91:1C:3D:F9:EE:86:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf25971a-9c2e-3fda-84e9-5b71a98fb091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:8c:84:6d:54:b7:65:5b:07:be:00:3d:9a:49:d6:a0:41:00:
02:e1:83:71:a2:1d:e8:d0:e1:41:66:c2:75:ae:e3:bb:17:b0:
05:7f:13:1e:a2:8f:bd:00:7a:dc:18:ee:20:79:5f:4b:23:8e:
fa:d6:75:82:9c:88:0c:58:82:09:c0:f3:d6:19:9f:da:19:41:
b1:74:17:bc:22:9a:ed:7e:ab:b7:20:d7:7a:c0:1e:51:62:b3:
2c:4b:6b:70:0c:72:9a:36:d0:88:71:af:96:02:d0:d1:52:7e:
9d:e0:8c:ec:6a:3a:7c:95:bf:8c:cc:cc:5d:00:05:fc:90:5d:
5f:05:b3:73:04:01:8f:65:71:33:6e:b5:f4:1c:30:ad:a8:d7:
cd:1d:d7:ea:47:e3:a2:cd:68:6b:b5:c9:b0:6e:46:2f:bd:fc:
9d:60:be:4e:18:4f:33:38:07:c8:52:6d:38:86:bb:d9:74:c3:
dc:70:d0:d2:4e:5d:08:9d:c2:e6:1e:a2:fb:e3:85:d6:32:e3:
cc:b0:38:7f:2d:65:d5:a2:e1:6b:ef:77:45:8c:23:bd:9c:dc:
9e:15:16:c2:f3:f0:d0:ab:09:fa:93:8b:dc:5a:97:1c:b7:e6:
80:2c:2c:53:82:b8:24:2c:68:fe:25:6d:04:f9:a2:29:44:d6:
02:99:9f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:36 2025 by rpki-client