Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce8f0a73-3c20-3a0a-932c-688400a53244.roa
File: ce8f0a73-3c20-3a0a-932c-688400a53244.roa (raw, json)
Hash identifier: exIDIiaImnHOu4axerXmabBouceCC+8vf9ssznsGIz0=
Subject key identifier: 1E:EE:B6:92:52:A4:4B:47:65:2E:36:C0:12:5F:6C:1E:00:EE:BF:6D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964717B9D3A56EB3AB9D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce8f0a73-3c20-3a0a-932c-688400a53244.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397216
IP address blocks: 204.74.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:47:17:b9:d3:a5:6e:b3:ab:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=9137dcf7-a002-4fdf-b20e-1d2e9922299a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:6c:cf:7c:41:d7:f2:19:be:56:3e:a0:81:
b1:03:10:62:82:31:72:1e:8e:d7:7b:48:c2:12:2a:
01:2b:24:be:32:82:91:61:a9:17:20:4b:c8:26:19:
95:6c:70:f3:09:51:0a:87:7e:45:b3:53:e1:90:c2:
57:fe:71:d0:26:4d:e5:ad:8c:d4:e1:00:8c:fd:c3:
22:57:ef:1f:c2:2e:fa:b8:b2:d5:da:c9:36:6e:fd:
cb:70:1f:f5:3a:54:4c:59:8d:ae:69:cc:54:a2:9f:
e6:ea:79:f4:8b:aa:e7:61:c7:4c:1a:97:68:82:87:
51:0f:79:c9:5d:f0:52:0e:79:4a:c8:63:e5:ab:da:
60:a4:65:f1:43:98:b9:7f:7c:e6:14:8e:67:5d:79:
a4:35:f0:14:5d:86:7f:10:14:6f:b4:ca:22:32:6d:
c5:17:2b:2f:52:c8:e3:83:3a:fb:b6:15:55:ba:f2:
15:e5:6b:02:a6:24:df:15:e4:90:17:d7:30:d0:e8:
91:9d:1a:d9:de:73:11:ca:94:3e:29:ae:d9:23:8c:
f0:46:b6:20:53:c3:72:b1:09:53:ba:0b:e2:d0:6f:
0a:1c:9c:67:94:64:9c:f5:ab:c4:67:5a:e5:88:9f:
5a:6a:04:ea:20:03:6b:bd:7a:b4:98:b6:be:66:c9:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:B6:92:52:A4:4B:47:65:2E:36:C0:12:5F:6C:1E:00:EE:BF:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce8f0a73-3c20-3a0a-932c-688400a53244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c6:af:81:8d:72:bc:96:45:f7:23:e2:f8:3e:d8:58:66:83:
49:88:43:1e:4c:d3:fa:1b:f0:d9:b9:dd:93:51:95:1f:e1:23:
af:0e:c5:9b:38:16:d2:5d:af:f4:78:eb:fc:8f:8b:25:50:3f:
a2:c1:ec:7e:94:b5:f5:9c:ec:7a:07:e5:c2:31:e9:4d:8b:a0:
44:e5:fa:e8:e2:b9:ca:b5:32:ed:a0:f3:82:19:b0:25:a7:ff:
bc:1e:4b:de:c8:5d:8b:c8:f4:5c:32:b8:1d:59:4b:0f:c4:de:
38:7b:fd:4d:b1:03:32:7e:b9:32:e1:be:0d:6e:b5:6f:57:8f:
ef:8f:be:41:34:84:0b:1d:f8:63:87:d7:fe:f8:9c:4e:d9:1e:
3e:21:b0:fa:66:a1:37:68:53:47:00:f0:bf:3b:59:a9:e3:27:
8d:1c:fb:06:84:7f:10:2d:37:8a:42:c1:6c:0f:2b:ba:07:4c:
d8:ad:7e:d4:b8:a4:56:fb:22:bf:3a:01:53:80:fc:b4:bb:15:
f0:d2:a8:28:9b:3a:28:0f:de:35:e2:a5:17:5a:d6:12:4c:df:
68:f2:f2:6e:c1:0b:3d:23:cb:03:a9:7b:d5:ee:19:6d:7f:97:
c8:ed:81:ea:72:4a:b1:2e:ea:5a:64:87:0e:38:39:f4:20:e0:
5c:39:e0:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkcXudOlbrOrnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTEzN2RjZjctYTAwMi00ZmRmLWIyMGUtMWQyZTk5MjIyOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMFsz3xB1/IZvlY+oIGxAxBigjFyHo7Xe0jC
EioBKyS+MoKRYakXIEvIJhmVbHDzCVEKh35Fs1PhkMJX/nHQJk3lrYzU4QCM/cMi
V+8fwi76uLLV2sk2bv3LcB/1OlRMWY2uacxUop/m6nn0i6rnYcdMGpdogodRD3nJ
XfBSDnlKyGPlq9pgpGXxQ5i5f3zmFI5nXXmkNfAUXYZ/EBRvtMoiMm3FFysvUsjj
gzr7thVVuvIV5WsCpiTfFeSQF9cw0OiRnRrZ3nMRypQ+Ka7ZI4zwRrYgU8NysQlT
ugvi0G8KHJxnlGSc9avEZ1rliJ9aagTqIANrvXq0mLa+ZsnVWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7utpJSpEtHZS42wBJfbB4A7r9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2U4ZjBhNzMtM2MyMC0z
YTBhLTkzMmMtNjg4NDAwYTUzMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXGr4GNcryWRfcj4vg+2Fhmg0mIQx5M0/ob8Nm53ZNRlR/hI68OxZs4
FtJdr/R46/yPiyVQP6LB7H6UtfWc7HoH5cIx6U2LoETl+ujiucq1Mu2g84IZsCWn
/7weS97IXYvI9FwyuB1ZSw/E3jh7/U2xAzJ+uTLhvg1utW9Xj++PvkE0hAsd+GOH
1/74nE7ZHj4hsPpmoTdoU0cA8L87WanjJ40c+waEfxAtN4pCwWwPK7oHTNitftS4
pFb7Ir86AVOA/LS7FfDSqCibOigP3jXipRda1hJM32jy8m7BCz0jywOpe9XuGW1/
l8jtgepySrEu6lpkhw44OfQg4Fw54JY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:46 2025 by rpki-client