Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffc03fdf-b30e-3d32-a016-9a801bc5907c.roa
File: ffc03fdf-b30e-3d32-a016-9a801bc5907c.roa (raw, json)
Hash identifier: z+ci1xQA+2SOG2vbRAP1KdHnI7ECS0/mQfcTL0Uq3Q4=
Subject key identifier: 3B:70:C7:E8:80:91:B6:3B:FD:1E:07:BD:DB:8C:87:7A:ED:AA:30:C8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20FB704D92CE93B01C8940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffc03fdf-b30e-3d32-a016-9a801bc5907c.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397218
IP address blocks: 204.74.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:fb:70:4d:92:ce:93:b0:1c:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=7e4814e0-8626-48e8-aa43-b09d231f1595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:2f:10:f3:b1:b0:79:94:48:66:2a:f3:7b:
ac:bd:c0:6e:0d:21:ba:43:dd:f3:cd:bc:47:7d:89:
4f:b8:75:40:73:82:71:99:d9:3c:09:45:95:71:69:
4c:92:1d:5d:93:d2:61:7b:bc:ab:2c:31:8d:09:b5:
e3:f7:b9:fd:21:2a:76:0c:20:ab:b7:ea:d0:be:45:
28:c3:4f:27:2b:2d:45:ff:7d:85:bc:56:69:b4:16:
9a:fe:79:5a:4c:4f:1d:1e:8f:18:8b:c6:4e:ea:94:
b1:ef:4a:09:81:94:5e:b8:ba:90:6d:98:57:86:4e:
3c:c2:b0:f4:30:1d:6c:92:a1:c1:68:9b:c3:44:fa:
6e:a2:68:68:4c:3a:c2:ee:c0:64:0e:d0:a5:d6:da:
76:04:18:55:d2:46:16:e6:b2:8e:bc:f9:22:e8:4f:
f9:76:0c:7f:56:f5:4f:e0:2e:df:f5:1b:f6:57:30:
ee:9f:08:ee:3b:f9:86:b5:41:f7:f7:e4:59:88:99:
41:5f:5f:3c:64:c0:65:71:2c:3a:b8:3d:4a:7a:bb:
45:57:ae:58:02:30:f8:b3:d1:eb:c5:c2:3c:bd:37:
7c:2f:da:5e:79:e0:7d:d2:72:0e:6d:65:c6:a8:ac:
ac:28:dc:20:01:5a:c8:3a:c7:ad:f6:d6:99:20:4e:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:C7:E8:80:91:B6:3B:FD:1E:07:BD:DB:8C:87:7A:ED:AA:30:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffc03fdf-b30e-3d32-a016-9a801bc5907c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:2a:cd:11:da:6f:c3:85:eb:4b:76:4d:79:b6:ef:bf:9e:3b:
bd:1e:50:83:df:b3:54:ba:27:bd:eb:bc:a0:65:e1:32:d0:92:
ba:8e:62:8d:64:da:ec:76:29:4c:a8:c1:b4:6c:32:94:bd:ea:
0b:ee:e2:03:44:95:bf:1c:96:c6:b3:f5:da:36:0b:f7:68:92:
e9:14:0a:6c:3f:60:5f:a7:4a:ad:9b:e2:9a:ae:49:75:a3:49:
24:ce:60:b8:2a:83:a5:cd:27:2b:f2:cd:6a:3d:5a:38:0d:a2:
2f:46:06:5d:ee:0c:f8:c4:a3:ee:f9:d4:3d:d9:91:22:df:d0:
d3:f2:21:41:fa:97:a4:5d:91:ff:9d:05:8c:d5:b4:8f:50:55:
e7:b4:aa:e8:da:af:51:53:36:a8:37:24:1b:ff:97:3e:7c:3c:
d3:ac:a2:6c:8b:d7:dc:56:a1:da:8a:c5:52:43:73:38:20:ca:
ef:4b:78:12:34:35:08:73:33:93:c6:77:c1:5e:22:5f:a0:6d:
0c:30:d9:57:ef:8f:70:ce:5c:ce:08:31:cf:55:25:f4:71:08:
87:91:99:2c:ae:94:3a:4c:3a:f1:fb:bc:93:b2:d6:d1:30:88:
6d:08:e6:1a:14:3b:fa:cd:31:40:f9:81:0c:b2:d3:f0:ac:e8:
7f:1c:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:56 2025 by rpki-client