Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd8d2a68-1cf6-3694-a712-bb63f2034995.roa
File: fd8d2a68-1cf6-3694-a712-bb63f2034995.roa (raw, json)
Hash identifier: ecRtupDNdToczpA6a5fDQ7xjqnn7ncqx5He9qKVCyEo=
Subject key identifier: 14:B7:29:69:B6:6E:53:56:F5:D1:23:18:26:54:EB:99:3C:A4:7C:B4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F623F0A924FF7E492E50
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd8d2a68-1cf6-3694-a712-bb63f2034995.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397241
IP address blocks: 204.74.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f6:23:f0:a9:24:ff:7e:49:2e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=d9ae132c-a58f-44e3-900f-55543aec9eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:4c:9d:c9:dd:75:59:33:ae:37:f4:92:ab:
f2:f3:94:9d:cc:d7:c5:f8:99:4a:9c:5b:0e:e8:b8:
ab:2c:fc:69:3f:3f:7c:78:b2:77:b5:6e:50:b2:e6:
85:b2:b6:1a:4f:bc:33:55:8f:10:f9:6a:49:4d:72:
91:d9:96:d6:b2:81:15:b2:17:c9:52:58:85:3d:21:
21:fe:e6:4b:5f:1c:da:ce:98:b3:a7:9a:cf:67:48:
d6:7a:5f:94:c1:b6:6d:1a:e1:9f:d3:23:26:6e:71:
e4:99:0e:14:f8:b3:eb:83:34:c6:05:46:69:54:93:
68:42:0d:3a:82:51:e8:22:75:07:09:1f:9d:f7:c9:
79:71:66:dc:01:7c:d1:25:cd:58:25:43:aa:75:7c:
56:26:66:b2:ff:db:c1:a8:42:0b:e4:21:e3:3b:a3:
8b:e9:83:0e:70:71:32:d0:e5:97:65:10:3d:4e:5a:
4d:d3:f4:ae:30:eb:b7:26:77:09:0b:7d:88:75:80:
35:ed:0e:b5:4f:e8:ae:7f:4b:71:96:29:e1:8c:e2:
31:c8:c7:54:f9:f7:fb:33:3a:8d:10:5c:b3:02:6c:
5b:14:4b:39:72:5d:15:dd:a1:f7:2d:c5:48:e6:68:
6a:b6:db:f5:80:97:8c:02:89:ea:e9:b9:43:e3:8d:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:29:69:B6:6E:53:56:F5:D1:23:18:26:54:EB:99:3C:A4:7C:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd8d2a68-1cf6-3694-a712-bb63f2034995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f9:e9:2c:f9:5b:88:c0:dd:d7:30:27:86:8f:80:1e:31:c4:
94:bb:4b:f0:c2:37:85:f9:9f:a1:29:1b:9a:cf:ac:1d:ff:7c:
f4:53:90:a9:ae:92:3b:e7:6d:c8:3e:f6:22:00:7d:c0:b0:67:
54:03:ea:fd:93:11:4c:d5:d7:fa:28:52:db:c4:cf:4d:a7:1b:
db:36:78:28:1f:41:af:40:55:1c:b6:e3:bf:a8:d9:2d:85:13:
c0:83:f7:a0:d5:49:45:c2:6a:b5:be:4c:4c:1b:fa:d9:a0:3f:
d6:42:56:b7:f2:f0:1c:7c:72:59:22:c0:53:cd:7e:01:37:3a:
e4:9e:82:26:75:03:d5:e6:da:00:52:96:59:e0:cd:2d:d0:93:
98:98:41:31:d7:96:e1:2f:30:c8:8d:f8:c7:d0:47:02:57:5f:
53:3f:85:90:5c:4c:68:bc:21:e3:2c:4a:92:3a:93:77:93:d4:
00:57:d5:30:28:4e:a0:b8:1c:ee:68:56:15:d7:59:56:cf:cb:
93:58:4b:50:69:47:cc:eb:7c:15:68:38:b5:61:97:d1:e8:f5:
ff:f2:cf:12:9b:f6:22:f3:f9:f6:2f:ce:e7:69:ce:19:e7:98:
14:ff:a2:9a:d2:42:52:0e:77:df:6a:24:24:cc:8b:d9:08:80:
b0:67:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:54:30 2025 by rpki-client