Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/733ea824-9324-3c53-8bb6-143d50e2ac24.roa
File: 733ea824-9324-3c53-8bb6-143d50e2ac24.roa (raw, json)
Hash identifier: vIn4e/LGC+7FCRnAhGqbtpfFV78yvt2MeVpOuOU6Afw=
Subject key identifier: C7:66:B9:0D:DB:98:D3:C5:69:EA:49:98:EB:39:E6:94:F1:1C:A6:2E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA69757887D12857D3ECE
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/733ea824-9324-3c53-8bb6-143d50e2ac24.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a6:97:57:88:7d:12:85:7d:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=80a22dbb-35f8-4407-934a-c507553cc3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:01:0b:83:d9:01:59:7c:a6:61:5c:92:42:
0f:82:1b:2d:ad:7e:13:0d:37:67:26:4c:5f:e1:47:
ba:79:48:c6:6b:0a:f4:53:d8:9b:74:2f:ec:6d:01:
bb:28:da:2d:59:13:22:ca:b3:16:dc:8c:5e:bd:f4:
ca:c0:33:31:a1:40:9a:4d:72:14:85:5d:9b:27:49:
8e:ee:33:4b:71:d8:7d:a2:3e:bb:d8:f8:ca:ef:40:
89:6b:c9:1c:13:28:e5:d0:4e:9d:26:2a:01:8b:60:
20:04:65:ae:a9:ff:13:f4:66:4c:4f:09:36:d2:e8:
6c:02:1e:0b:fa:85:83:02:e2:ee:30:fb:86:0a:3e:
91:07:b3:a5:a4:b9:a5:7c:9c:25:dc:81:84:ea:61:
08:10:ec:97:da:4b:b7:c6:11:f4:92:03:1a:ea:30:
33:51:bf:68:28:6d:05:52:4c:2f:59:7b:dd:14:de:
64:52:b3:f8:75:02:08:52:f5:d3:91:97:b1:f4:5e:
4b:2a:7b:2a:45:dd:50:a3:6f:90:c4:0d:ba:eb:11:
ef:70:6c:36:ef:bd:0b:37:d6:ef:14:26:fa:00:6f:
0f:6a:c7:68:c2:ff:fa:c6:a0:20:e2:1c:46:c6:17:
08:40:62:d7:fb:49:0c:16:e1:ff:06:f1:39:e6:72:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:66:B9:0D:DB:98:D3:C5:69:EA:49:98:EB:39:E6:94:F1:1C:A6:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/733ea824-9324-3c53-8bb6-143d50e2ac24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:68:fd:14:73:5c:18:b6:70:67:56:95:cc:78:91:a0:aa:8d:
34:66:3d:9a:9a:6d:a4:eb:5e:98:4c:cc:e9:ec:7b:c5:c5:45:
c8:98:e5:46:09:98:c8:1f:e9:4d:ca:01:d0:31:99:6a:91:0d:
a5:94:65:8a:09:b3:f0:fe:a3:14:37:bb:3a:08:9c:e9:94:8c:
1a:91:81:27:78:ec:22:87:6b:ae:30:dd:99:73:e9:60:2d:7d:
c7:53:18:24:dc:cc:7c:9f:eb:97:48:04:b8:25:48:44:4b:9a:
35:25:f5:a5:cd:c8:c3:af:68:15:42:f7:97:67:a3:61:e5:74:
fa:16:f3:6a:cc:2e:cd:5c:b5:4c:e9:86:b1:eb:34:98:70:bf:
67:e3:ed:07:e1:ae:23:f9:55:9e:e5:dd:5d:0e:75:3a:34:07:
8b:f9:f8:82:21:93:c6:c9:10:f9:9d:a8:15:af:d7:2c:20:81:
58:00:8e:2b:d3:0d:f9:cd:3b:ba:29:3c:fb:5a:97:da:a5:cf:
19:43:1a:6e:7c:8e:6f:6d:43:5f:f0:bc:6e:b2:58:55:f1:6c:
8e:1c:62:89:04:6f:6e:74:cf:97:44:8f:c4:41:05:a8:f6:3d:
9a:fa:8c:5d:7b:10:19:53:a9:81:94:6f:6a:0c:e3:95:01:7e:
a6:88:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:08 2025 by rpki-client