Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa
File: 3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa (raw, json)
Hash identifier: W+MqrjjFx69aC3NkQ2PO+4AEsjwRXSuqa5vPlK19XEg=
Subject key identifier: 3E:89:46:46:86:9F:CE:FE:CD:1C:33:0F:4A:D8:EF:22:0D:97:AC:6C
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA7AF180D743E2A29BE40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a7:af:18:0d:74:3e:2a:29:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=d17d5070-0ad3-476e-9c52-f6dd932ba408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4d:74:90:1e:bd:74:0f:ab:ff:8e:98:68:ad:
8f:b9:5a:fb:3e:fd:42:26:f1:f1:3d:90:59:6d:23:
35:75:ef:0d:56:0e:44:02:cb:83:af:55:e3:3b:5b:
67:b5:7d:88:d4:0a:b5:93:c3:5f:56:07:c5:8b:1a:
81:7b:3c:21:d6:20:e8:e3:73:d0:4c:d6:7f:1e:fc:
35:ac:a9:00:7e:00:1a:1e:73:bf:95:70:3f:1d:ab:
b7:15:17:3d:43:01:dc:6d:17:e3:68:99:87:ea:7c:
2b:89:c1:12:9a:35:26:61:bf:2d:13:f2:81:3c:44:
b2:4f:ea:a7:6e:33:30:f9:f6:a8:09:25:a4:05:fa:
3b:b8:cd:f3:32:03:44:bc:01:c8:1c:32:1a:c8:2e:
f0:70:9e:f4:1c:2b:e4:63:0e:d1:a2:5f:1f:76:7a:
ae:a8:6a:01:9d:4b:d6:e3:1c:cf:db:3a:17:b0:06:
93:60:bf:5f:a8:83:c6:47:3a:3a:4a:f4:3b:bc:fd:
87:54:35:bc:e5:0d:59:71:ed:f3:39:92:75:5f:a5:
ac:a1:67:0d:12:a2:b1:41:cd:8f:2e:d7:77:50:e3:
1a:64:cf:cd:f6:a3:fa:12:0b:00:ea:98:5b:23:9a:
65:18:66:b9:82:28:64:72:98:32:49:96:79:8e:8f:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:46:46:86:9F:CE:FE:CD:1C:33:0F:4A:D8:EF:22:0D:97:AC:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f2:11:1b:5f:00:2d:55:e6:96:ee:b2:1d:5f:fe:6c:12:d5:
a6:0d:be:fb:a8:f2:bd:90:32:a3:4d:c6:eb:b4:f6:24:0c:6e:
92:87:e5:66:2c:c3:df:9f:89:68:07:4d:a7:e8:22:e8:82:07:
92:ef:34:98:79:c2:ae:a5:12:c0:3d:e4:80:6f:ff:a3:14:53:
93:34:ba:3a:b6:c7:7a:13:18:ad:07:f6:ee:9a:7e:d1:0c:3c:
1a:85:f1:5b:d1:eb:fc:23:16:89:c4:b8:48:f9:c1:95:cf:dd:
8e:19:e5:b0:34:a6:ba:10:0e:c8:64:16:a3:44:43:d7:2f:04:
a3:4b:5c:0d:b5:b2:5b:65:40:08:88:d3:c4:80:92:ca:e5:33:
86:df:8f:3f:da:08:40:cf:76:8b:dd:d4:8a:66:25:db:b8:e1:
5b:15:4e:2a:dd:bf:64:48:4a:74:73:1a:be:b9:f0:40:1a:49:
fd:f7:02:17:31:3c:d2:d1:05:59:d0:39:b5:3b:7c:6b:67:46:
4a:e3:e8:59:8a:73:c9:7a:21:8a:19:52:65:8a:87:c0:71:0e:
9d:83:e0:e1:db:bc:f6:57:3f:6a:9d:10:91:d6:b5:b7:7b:15:
b3:df:56:e6:11:f1:9b:11:f5:fe:ef:fb:3d:c5:df:5b:1c:1e:
b6:db:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:33 2025 by rpki-client