Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdb25ada-4edf-3888-9dcc-37337c8f2855.roa
File: cdb25ada-4edf-3888-9dcc-37337c8f2855.roa (raw, json)
Hash identifier: SQjYmReRoISomX1j5ZdQs7mxjhJg5aC1dJqi9MuC3kg=
Subject key identifier: 65:47:A1:FA:02:A9:A3:3E:94:2F:BC:1B:37:C3:08:66:75:AF:67:5C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F37F6A021C1626307140
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdb25ada-4edf-3888-9dcc-37337c8f2855.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397241
IP address blocks: 204.74.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f3:7f:6a:02:1c:16:26:30:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=2bb41f43-2d98-4539-9f6f-e51b486c2cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:a7:55:44:0d:8d:50:06:75:d8:59:78:09:
21:6f:71:1d:ca:42:2e:eb:2b:68:9a:95:47:45:2d:
ab:9b:dc:b8:76:6a:f7:9f:d5:7c:b5:00:7a:e9:27:
a4:e8:77:08:41:1e:fc:f7:c3:a3:a5:b3:c3:d2:4d:
3f:34:8b:b4:9b:56:3e:7c:ea:32:af:1b:7a:8a:d8:
23:c6:69:c3:8d:34:ca:9a:72:24:6c:7a:2c:85:4d:
6b:3a:7c:ee:28:71:fc:5f:0a:ba:69:3e:bf:14:1d:
90:62:27:f3:a2:ff:7b:40:f5:a7:d9:50:57:13:d4:
3b:26:b5:a4:d9:fc:53:c9:94:50:bc:e5:33:af:98:
bd:27:fb:ee:77:d2:0a:5f:7c:b5:42:08:33:22:19:
93:bd:b0:53:73:00:a5:b5:13:8b:2a:46:05:68:a0:
85:c9:7a:66:4c:b5:72:97:f7:0e:55:fe:c3:a6:65:
6a:cb:44:14:a1:c5:a7:c9:c7:3f:4d:07:f9:b3:97:
26:1d:09:aa:2e:3e:05:e1:f5:34:59:57:82:a4:b9:
8e:29:eb:3b:7a:9a:8c:b2:72:e0:39:ce:76:e6:cf:
fb:e5:61:b6:81:93:b5:c5:7b:83:d6:f8:63:18:47:
c6:ba:d0:39:ee:1d:80:fb:e1:b7:b5:c1:93:a1:2e:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:A1:FA:02:A9:A3:3E:94:2F:BC:1B:37:C3:08:66:75:AF:67:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdb25ada-4edf-3888-9dcc-37337c8f2855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:5a:2e:68:fc:30:d1:55:04:02:02:5d:74:21:c0:6e:86:1e:
1e:d8:e7:79:88:ca:48:fe:f0:64:e0:86:f8:a7:d8:53:36:3e:
0b:90:7d:eb:24:3f:38:99:cb:8a:0e:71:5d:44:16:ce:54:21:
84:59:59:25:72:e3:c8:e1:ac:70:04:59:00:27:b0:20:0a:27:
ec:81:f1:63:ed:ba:9b:73:fe:af:11:12:6d:28:ac:6f:eb:c5:
39:17:9a:bf:f4:9d:19:13:d2:07:a3:86:de:36:54:2e:7b:55:
26:53:1f:be:97:77:b9:b3:1c:dd:1a:cf:a5:54:ec:53:b4:e6:
03:ec:4c:39:17:94:f2:c6:2a:58:50:4a:2d:8a:6b:95:f5:76:
56:c5:01:79:d6:1a:dc:a5:9d:29:33:8a:ed:72:a8:ac:3d:28:
65:5a:30:16:fd:3f:b3:8d:e9:2b:c8:ef:e6:00:51:fe:b0:68:
48:d5:d1:c3:f7:45:f7:0f:20:13:3c:f6:f2:a8:e8:e8:26:a6:
b9:4d:b0:e2:3d:9f:fd:f6:6a:12:9d:13:f3:84:09:1e:e8:f8:
67:d5:ec:a0:7e:2d:49:a1:86:a4:ec:85:12:27:3a:ff:59:3d:
4f:c8:c8:ce:a5:9e:5f:53:35:6a:6b:fe:5e:6e:8a:ce:f0:6d:
23:77:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:55:41 2025 by rpki-client