Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa
File: 5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa (raw, json)
Hash identifier: UPx3Z5+PAoxN8oJTSEJtUGlBgsB664dr5KDnZwzENA8=
Subject key identifier: 4F:14:4A:75:18:B2:03:21:BD:4C:00:27:45:A1:60:33:D9:9C:05:59
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA4C86AF4D9397E239440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a4:c8:6a:f4:d9:39:7e:23:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=1c3ad7e3-1745-4318-9b8c-a0090f36753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:e7:87:dd:db:0e:db:e8:5a:42:fc:ea:6b:
75:78:dd:8b:b4:7d:e1:cd:87:15:8c:cd:00:9b:4a:
9f:b9:f8:79:7b:bc:bc:d2:63:8f:25:b4:0f:b3:0b:
95:ac:bd:85:42:7e:3b:74:08:74:44:f6:73:c9:49:
3b:5d:99:57:cd:c6:25:6d:41:37:15:3c:94:87:ac:
c0:e8:a7:76:76:93:51:4d:d5:06:1f:80:3e:e9:bb:
a9:bb:f1:e1:be:4f:36:2a:84:b9:65:49:03:2f:c7:
ee:ff:99:23:6d:5c:c4:a9:1e:8a:02:5d:1c:76:c0:
bd:be:b9:a8:cd:6f:14:99:60:5a:67:74:ff:a8:1d:
43:6f:a8:f9:07:a3:a8:8c:0a:37:e9:87:c2:f9:2a:
1c:89:61:64:18:05:1d:ba:86:85:0c:e7:cc:38:91:
51:68:89:ae:16:75:03:78:7f:d6:c9:22:0e:97:e2:
ea:f0:d2:23:cd:83:38:7b:62:73:5b:ce:b8:54:16:
ff:30:2b:5b:da:a4:7b:f6:81:0f:64:08:71:80:b6:
b5:ab:59:1b:f7:50:a2:b7:59:e3:b6:38:07:41:86:
97:14:cf:d8:07:5b:89:22:39:01:a8:21:bf:80:51:
6f:71:a2:71:cf:ad:f0:4e:e6:3f:2d:ff:e5:3c:e4:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:4A:75:18:B2:03:21:BD:4C:00:27:45:A1:60:33:D9:9C:05:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5301f2ef-689d-3b5f-aaeb-cd2d5a8e28d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d6:5c:2f:b6:f3:b7:b2:4a:de:6f:91:e1:a6:00:1c:e8:93:
c1:02:5d:76:34:7c:7c:36:3e:d8:49:7c:39:f2:00:fe:7c:ef:
58:20:f3:d6:68:f6:d4:02:6c:a4:80:a0:4a:7a:46:10:39:fc:
b2:cd:28:58:fd:8f:e3:b1:74:e8:5e:0e:72:a1:da:9f:7f:b2:
7a:b5:3f:1b:1c:71:0c:8b:4f:89:db:f2:e4:89:74:d0:3a:73:
d1:c2:6a:54:6d:95:1c:6a:f4:d4:a0:d9:d6:4e:b7:91:e2:12:
59:02:fa:67:1e:69:58:7d:70:3f:e4:a7:79:9f:a2:56:66:59:
e8:1a:07:c1:9d:79:12:5d:f1:63:2e:4d:15:90:6e:31:f7:1c:
51:7b:08:50:c4:10:93:75:cf:ac:3d:31:39:ef:ef:14:1f:83:
5b:0e:cf:9e:a5:37:b8:b3:d8:92:32:44:d2:cc:84:a9:01:c3:
93:06:56:5f:2c:b8:67:b6:62:ba:27:94:ac:30:a3:89:a0:ad:
0a:7a:0b:87:e7:f3:74:a9:c2:b9:18:86:68:2e:bf:df:ec:19:
c0:cc:3c:9f:4a:12:7d:bc:c8:37:75:4d:11:7a:1e:64:b3:e4:
9c:b3:45:8e:cd:4b:22:27:6e:5d:e7:7f:46:46:7d:96:7f:fc:
5a:13:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:13 2025 by rpki-client