Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4c922e0-4cf1-3854-a61c-bbb3af613a2e.roa
File: d4c922e0-4cf1-3854-a61c-bbb3af613a2e.roa (raw, json)
Hash identifier: TqOLix2qxyx+G2iSqHR0xDRo9Xp/VNMeiJkWwWADU8k=
Subject key identifier: FC:E2:D9:E1:67:05:25:29:4E:DC:6E:92:81:E7:A5:52:A0:F2:F7:3C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99641E4498591E8CD9DD660
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4c922e0-4cf1-3854-a61c-bbb3af613a2e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397223
IP address blocks: 204.74.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:41:e4:49:85:91:e8:cd:9d:d6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=66c48976-7bdc-4ea1-adea-840826fcb1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:f9:9c:2c:f0:db:07:40:c0:e6:03:54:56:
f5:c7:5c:00:4a:0f:b9:20:e8:68:18:19:a7:c6:73:
bd:71:c2:3b:b5:90:99:da:b9:61:4b:ad:74:30:7d:
59:ca:3f:46:53:48:31:aa:1d:0a:d2:ce:f9:8f:00:
e4:f5:24:01:d2:bb:11:11:94:0c:6d:c5:b7:40:6c:
f4:bf:ac:33:ea:50:75:31:a3:ff:62:b9:ce:e0:36:
99:e6:6e:1a:5c:ca:1e:ec:f1:79:e5:c9:1e:41:19:
33:07:9a:65:61:29:30:a0:b3:ad:fb:fa:3d:cb:a8:
83:f9:00:ae:a5:6f:f5:69:62:a7:1c:3c:ff:e7:9b:
e4:a3:e3:b6:22:a4:f2:a2:13:e4:2f:04:23:40:47:
56:cc:bf:83:97:e5:f5:80:2b:59:2f:d0:7f:f8:a8:
92:55:8d:d3:fc:b9:eb:cc:4a:c5:bd:27:b5:80:ac:
42:db:a5:2a:1c:7f:72:0e:3f:62:2a:32:ce:80:b2:
41:5f:6b:b0:9e:aa:c0:13:27:70:01:88:15:93:bf:
6f:f7:8f:e8:49:e5:fd:aa:4c:f8:a4:e2:1f:1d:6c:
15:7b:e0:e6:88:01:9f:dd:31:50:e9:8f:32:b7:93:
13:35:23:f8:1e:61:65:f8:bd:b3:2f:ec:a1:cc:2e:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:D9:E1:67:05:25:29:4E:DC:6E:92:81:E7:A5:52:A0:F2:F7:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4c922e0-4cf1-3854-a61c-bbb3af613a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d9:41:9b:3d:0e:7b:a9:3e:cb:bb:d2:5f:ce:23:87:7c:2c:
ea:15:b9:42:14:29:e0:2f:09:54:8f:e7:c2:c0:e4:cd:93:39:
3a:3d:79:1e:c1:ce:d9:65:4c:cd:df:fb:54:5b:1c:38:5d:d3:
ec:45:ef:3c:9a:32:cd:83:0a:b8:9b:26:6e:f2:5c:86:59:bd:
67:98:c8:20:75:04:e8:93:67:2f:9f:22:8d:33:cd:3c:43:4b:
19:30:81:ea:dd:2d:8b:0c:a6:46:ff:d4:8d:10:36:c4:83:7c:
31:f6:bf:98:b9:b1:41:99:77:ac:90:4d:18:ac:67:cd:cb:94:
57:67:47:5a:b0:ff:9a:f6:ba:0f:a9:59:17:01:f5:64:72:2e:
76:89:87:d5:3b:6a:de:9e:f7:c2:41:08:f4:eb:8e:21:f7:f4:
45:24:24:ad:58:c5:7f:71:bb:b0:b1:87:8e:d6:22:7a:c6:c6:
c8:ee:57:7a:3e:32:35:62:d8:e7:97:47:88:ef:eb:e8:9f:a0:
11:4a:dc:4e:91:b2:74:ff:68:31:ec:78:7b:43:a7:90:f0:4b:
f6:1f:83:fa:3e:ee:c5:6f:f8:e8:bb:ef:e5:3b:ba:0a:b2:6b:
86:6d:b1:7d:02:40:eb:4c:3a:8d:9d:bc:72:5b:43:32:3a:a7:
a3:41:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:39 2025 by rpki-client