Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa
File: 11f726b6-96f1-3faf-8644-bdb6161ae2be.roa (raw, json)
Hash identifier: bLsSiISy4bBCLNr0kqtk0jIwjX9mSED6EKOhQZ7sGAw=
Subject key identifier: 46:CB:66:DC:47:B9:A2:F9:6A:9A:83:12:52:AF:22:53:BE:57:FD:A3
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA7455D6257841DB585E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a7:45:5d:62:57:84:1d:b5:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=bb79ff1b-3637-4081-9377-f32a3011f8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:ed:52:66:be:be:4f:62:82:df:76:31:53:
86:b8:a5:17:bc:67:c4:15:1d:c0:fe:c2:58:1e:3c:
f8:66:f0:7f:83:dd:f9:d1:6e:a1:65:b6:f7:ea:6c:
c9:e0:4a:60:36:ac:d3:ff:88:47:37:06:8c:78:28:
aa:cf:7d:11:9e:e7:37:ab:03:6e:69:75:7f:e1:c8:
3d:81:6a:1d:ec:00:3c:93:79:46:fc:df:4f:82:d8:
94:f6:df:85:f1:ef:89:8a:b2:72:0f:f3:70:2a:36:
5f:6c:9a:4b:7c:f6:d2:28:3a:1b:7d:60:9f:ce:3b:
8b:95:f5:d5:02:66:36:32:4d:9d:f7:26:a1:5b:4a:
eb:b6:fc:df:ec:c0:ac:1c:a7:5c:ac:77:25:ea:8f:
41:42:63:a6:e4:f2:80:1d:93:24:7f:c6:6a:94:00:
79:ee:ed:45:3f:98:41:17:7c:36:56:a1:38:1f:4b:
b0:77:f2:3c:c8:23:59:78:a4:29:12:f5:43:11:7b:
63:9d:bd:77:8e:12:75:b0:f9:55:7a:0d:91:b3:7e:
65:d3:08:15:68:4d:35:22:ef:3a:d7:71:71:91:e9:
d4:87:f8:89:2b:36:7e:e7:48:dd:d0:57:50:df:ae:
d9:bf:42:ce:52:c4:2f:82:ec:bb:b1:cf:6a:dc:16:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:66:DC:47:B9:A2:F9:6A:9A:83:12:52:AF:22:53:BE:57:FD:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:8a:a0:df:2e:2f:e2:b4:4d:4b:c6:1a:e4:6e:40:d1:a4:62:
f1:33:84:26:24:54:ff:68:5c:bc:a1:21:68:36:1b:25:2f:b3:
5f:f0:60:d5:34:b1:8e:97:7d:1a:b1:4d:b4:62:19:05:48:a4:
38:95:86:3f:96:1e:29:31:7b:15:50:07:b3:ed:69:c6:04:8c:
05:30:42:0c:b0:39:a4:7d:bd:c3:a5:9f:c6:e5:1f:e4:54:c9:
77:23:89:57:99:00:93:bc:cd:44:d2:86:e0:5e:5b:f7:38:2b:
11:92:8a:a1:33:f0:d5:19:17:6a:35:23:fe:32:df:ac:07:a7:
e2:2e:2e:07:98:04:95:73:d3:48:34:95:4d:6a:99:0c:c5:95:
4e:ad:31:14:9d:df:8b:42:f0:8d:0f:27:66:6b:ea:e8:4c:8a:
0d:e5:a2:c8:38:bc:7c:c4:d4:d1:a5:fb:2c:fe:43:69:5c:38:
96:11:c8:d3:78:0c:b0:2c:ab:f6:39:bd:16:6f:89:8f:74:e7:
61:8b:ba:68:df:ba:29:1a:f1:49:2f:a3:9f:17:5a:4d:d6:5f:
93:89:d6:25:21:21:79:0c:52:f7:2e:25:e5:39:e6:2c:3f:c0:
c1:f5:69:6f:ed:4f:f2:38:d0:7f:cd:5b:ec:d8:76:d8:1e:e7:
cf:18:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:10 2025 by rpki-client