Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa
File: 70a09cd3-6119-367f-927d-0e3a9d8bd100.roa (raw, json)
Hash identifier: KSlDSTixU7HxH2ruI0sCt+KN8pnZZRXL29FAKTJ1A90=
Subject key identifier: 01:E6:FD:EE:EE:13:BD:EA:F2:45:AA:9F:43:03:A3:C6:B8:F0:83:56
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA161CDC514C714E37180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a1:61:cd:c5:14:c7:14:e3:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=0cfcf024-2079-4ea9-a242-13cbd1bc6d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:73:dd:de:55:f6:11:d8:3d:64:8b:f2:c7:84:
35:2f:a3:64:7e:22:a4:c7:ec:69:0d:ce:49:6c:ea:
0f:04:22:62:fe:e1:f7:b7:6b:9c:94:d2:f1:80:70:
b8:f6:32:4f:d5:fa:2a:b3:e9:c9:fe:cb:5d:3e:27:
bc:14:03:b4:97:53:fb:da:95:3c:6a:49:e6:b7:e8:
46:43:ba:2d:32:63:eb:2f:d0:6b:f2:d5:d0:f6:7a:
f3:db:2b:40:b9:7e:24:a6:9c:e8:9d:4d:fa:9c:b0:
85:01:19:0f:99:96:f1:d3:85:31:d5:ae:50:b9:fc:
d1:fd:fa:38:87:39:48:df:cc:4e:d2:04:fa:9d:2e:
d3:9e:49:b3:e0:97:3f:a5:db:54:75:05:83:e3:4b:
e4:bf:31:45:8e:0f:28:fd:ab:f2:2b:4f:88:db:69:
cb:9d:ca:d9:2e:dc:f8:21:6a:ef:0f:a5:0a:32:80:
17:e0:70:ef:86:67:59:f5:ea:e6:1a:11:1d:2e:70:
b8:8d:b1:3a:d4:8a:9f:2d:28:59:62:12:ea:ea:93:
3c:26:86:f9:b6:f7:99:50:d3:1f:61:43:92:e2:9e:
b3:4d:24:43:f2:95:b9:a6:6e:c1:4a:76:07:13:42:
02:fa:09:f9:21:73:7d:58:6d:a5:93:c3:a0:63:bc:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:FD:EE:EE:13:BD:EA:F2:45:AA:9F:43:03:A3:C6:B8:F0:83:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/70a09cd3-6119-367f-927d-0e3a9d8bd100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ce:00:9c:7b:31:70:71:ec:00:98:08:66:fe:18:3f:d1:81:
aa:67:29:9b:a6:74:a5:0f:0f:51:57:b0:14:e0:89:f3:78:e3:
b0:6d:05:91:a8:3b:41:fb:ce:4e:86:a0:5d:5e:c4:ac:0a:f8:
c5:7a:a0:82:d7:43:85:b8:28:7c:32:83:10:fa:46:01:e2:f0:
76:45:1b:ff:56:2a:f8:7a:33:1a:04:a1:36:82:83:8e:ea:d9:
b0:04:df:67:7f:95:d2:51:84:ed:90:f7:5d:de:e7:2c:d9:b4:
1e:e9:0b:aa:68:de:b2:c1:3d:2c:22:59:a1:ec:02:81:35:a8:
71:8a:7e:95:f4:b8:95:06:b8:d3:a5:43:98:2c:16:c4:85:87:
32:fc:62:90:e9:f3:3a:5c:4e:f8:02:5f:e9:3e:82:88:79:86:
bf:3e:6d:86:b0:1d:b6:5b:eb:2c:f9:84:c9:78:ce:d9:d5:3e:
f8:9b:e3:9c:0f:ac:43:c8:be:4b:53:3c:c6:78:7d:ed:6d:dd:
40:4a:4e:91:fb:2d:05:b5:62:52:3c:b1:75:46:ad:57:62:b5:
44:cf:0a:44:35:e7:dc:f5:f0:33:7a:49:0b:0b:74:46:de:ea:
24:e9:9b:c9:5d:01:e0:3e:5d:2a:2a:a4:4f:22:f1:21:7c:7a:
db:92:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:55 2025 by rpki-client