Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e9cb69e0-d04c-3894-adce-a230a01a2994.roa
File: e9cb69e0-d04c-3894-adce-a230a01a2994.roa (raw, json)
Hash identifier: ccdfaAXz6Kjxkc3IkFTEVAaeCShaAUVC+Jct5K3rLac=
Subject key identifier: 68:DE:D2:14:4F:9D:16:E4:D2:27:8F:D5:1A:43:F3:EE:B0:96:DA:3F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285849403955590AD557661E15A680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e9cb69e0-d04c-3894-adce-a230a01a2994.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 399156
IP address blocks: 204.74.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:55:59:0a:d5:57:66:1e:15:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=e7f32a44-a96f-4ad3-86d3-8775ae440971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:dc:3d:d8:b6:78:95:73:80:62:ba:31:76:
3e:0f:82:b9:0d:b1:a6:72:0b:47:7c:76:99:fe:db:
86:02:3f:05:42:33:1f:e8:0e:c0:33:c9:c9:e2:4f:
83:59:77:d9:ae:ed:91:bf:6e:78:bc:b0:84:67:19:
9a:5a:1f:9e:de:c0:37:2a:b4:70:8d:b5:a4:1f:70:
b1:06:7c:3a:42:32:85:ec:b6:1b:51:0d:42:14:a6:
22:70:38:43:71:ba:3c:86:dd:6b:c0:d7:d9:1d:95:
61:7b:2c:9c:fd:7f:a0:83:82:18:42:4a:e2:28:4b:
41:bb:7d:1b:01:82:62:94:cd:99:61:29:e2:9a:f9:
98:c7:42:69:99:d1:98:29:04:41:12:c6:22:b0:61:
7a:cf:c0:bf:c7:c9:13:f6:34:ea:7c:c4:cf:77:d9:
ae:d6:9d:a0:78:35:c3:5a:9f:da:64:0d:bb:e0:a3:
1e:5f:b4:92:ec:11:a7:25:41:19:c5:75:74:ec:cd:
33:0b:b6:2d:a5:ba:e6:9f:6c:57:89:6a:ea:4e:8d:
a2:cd:a7:4b:57:b7:cf:22:51:da:de:1e:df:45:b9:
da:0f:ed:8c:01:b8:b6:80:d7:bb:fb:4c:fa:1f:b0:
0b:d2:4d:93:ad:6f:79:7f:03:48:f2:1d:21:df:93:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:D2:14:4F:9D:16:E4:D2:27:8F:D5:1A:43:F3:EE:B0:96:DA:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e9cb69e0-d04c-3894-adce-a230a01a2994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:4f:52:4d:89:3e:e6:5f:f4:ba:c6:90:d9:28:da:7b:b1:55:
38:9a:2c:10:9d:82:40:e6:e0:25:71:07:c3:2f:4f:5d:da:fd:
dc:bf:2b:37:61:0a:0b:d2:44:ad:1a:9a:d0:a2:d8:74:bd:b8:
30:cb:36:83:55:1f:7b:3e:bf:df:ab:1b:0c:bb:de:6d:ed:c6:
69:e2:79:e2:17:cf:39:d6:1e:aa:8c:7e:ec:16:fd:15:45:2f:
a9:63:de:0e:36:70:05:4f:a6:10:f7:39:f3:0b:be:c5:c3:06:
da:f3:ed:91:59:72:37:e0:ae:ad:fd:66:a7:a5:fb:ef:b7:64:
60:09:a4:c4:c1:a0:0e:71:21:ff:b5:1f:68:1c:80:51:df:9d:
f3:6e:25:53:43:bc:9f:58:38:c2:d8:2d:d2:bb:bc:a4:22:74:
3b:0d:29:2e:9c:10:33:c0:04:dc:cb:30:79:f2:08:01:b6:90:
2f:c8:f8:dc:a9:9d:0f:a1:a5:2f:59:a1:e0:7c:b6:d5:ad:c9:
a8:07:48:b7:e0:d4:89:bb:e9:cf:71:b8:fc:9d:ae:ce:1f:e3:
07:cb:e1:3d:c8:e3:1e:e6:c9:ce:5c:7f:06:2b:3c:8e:e0:c4:
e0:9d:58:cb:98:d6:72:48:74:8c:d1:c8:5a:5f:ea:4d:4e:87:
e4:ab:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:57 2025 by rpki-client