Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa
File: 6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa (raw, json)
Hash identifier: Kez+7xnP0drAqiTLoX9yyrrTqMdCdlRw7vGCxeLKJvo=
Subject key identifier: 57:29:DD:64:A6:EE:03:D6:4A:A3:91:AC:C5:06:D3:E6:4A:BF:E8:CC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858485F9AEB261A2173BF9A6D2900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 399156
IP address blocks: 204.74.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:eb:26:1a:21:73:bf:9a:6d:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=627daa35-ab2e-417f-b838-414daf237693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b9:42:af:fa:10:00:a2:b7:68:1f:d4:93:e3:
7d:df:f6:09:e7:6e:a9:70:43:b7:cc:81:f7:c2:1a:
be:88:f4:65:0d:65:44:cf:8a:b8:40:fd:c3:0b:ff:
31:f1:39:4b:db:90:10:13:dc:69:fc:fb:8e:dd:4c:
87:92:45:97:3f:28:1c:c5:ba:b7:32:cd:ba:e6:f5:
8f:4e:aa:94:05:7f:9a:27:c2:a3:19:9d:2d:6e:44:
f3:cc:49:46:79:2f:66:32:97:4a:e3:7c:a0:2e:70:
b7:0c:c1:1d:99:b4:df:20:27:de:6b:42:8b:88:7e:
02:06:a9:16:80:6d:f2:1d:d5:df:33:8c:ea:43:2d:
e4:02:f1:b2:5e:6b:97:a6:7f:0a:35:72:a8:51:6b:
5d:67:ea:a4:6f:77:7d:b7:ca:46:62:35:19:d8:b0:
19:8d:0f:38:2b:b8:49:8b:55:5a:cb:98:e7:00:b1:
16:97:17:86:6f:fb:41:69:e4:fe:68:10:44:dd:87:
30:7e:f8:d5:d5:72:d6:5c:ad:e1:18:3c:2e:06:64:
c0:7e:f1:22:9c:c5:a9:86:75:39:0e:23:6e:f9:73:
f5:78:7e:1c:72:67:db:1d:6d:11:25:e8:bd:80:a2:
07:f7:d7:cf:ad:6f:bb:7f:23:29:33:41:04:47:c2:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:DD:64:A6:EE:03:D6:4A:A3:91:AC:C5:06:D3:E6:4A:BF:E8:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.74.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:cd:d2:e6:2c:a3:01:74:51:a2:ac:e9:61:25:9e:c9:80:9f:
2d:12:b9:7a:b3:ac:a6:19:61:a7:ab:b3:91:08:2e:af:da:b4:
21:a0:09:e7:09:44:12:18:b0:cd:c7:eb:75:83:0c:b5:75:5e:
60:67:72:6e:54:ae:82:23:2f:ef:32:53:75:4b:6b:fa:ef:92:
a0:a2:c4:68:ac:d9:2d:4a:2b:5c:0e:cd:de:08:b6:ca:97:4b:
bf:c3:1d:1b:61:aa:06:1f:f5:2e:7b:6f:00:18:53:8b:5a:ff:
9a:f0:69:42:d9:e6:f8:db:4e:39:c5:92:2a:fc:68:2a:73:c4:
d1:67:2c:da:9a:6c:e0:19:42:97:18:bb:4e:33:45:9c:c2:93:
57:81:b4:7d:45:15:4d:01:b6:22:70:8b:df:14:47:98:12:c4:
40:c8:0c:15:18:e3:8f:00:84:2c:ac:7d:44:34:b6:fc:89:36:
04:91:8c:9d:0c:14:3a:d8:aa:80:ff:a7:63:9d:6b:fe:ae:a8:
1e:1e:14:fb:f9:dd:cc:47:54:53:a5:7c:11:97:92:bd:75:62:
02:ca:8b:fe:2b:d2:9b:f1:cc:36:d3:97:8f:04:19:e8:ee:9c:
b8:02:1b:d8:ef:e8:0b:c5:09:3a:5a:c0:b5:38:ca:e5:ba:53:
5b:f3:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:11 2025 by rpki-client