Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77ed6760-7fa4-3697-94be-8af7d786b8ab.roa
File: 77ed6760-7fa4-3697-94be-8af7d786b8ab.roa (raw, json)
Hash identifier: RYFVWKhgMkKgNns1PzTlQ0bgB55RZVx7Kl3RzblHcUQ=
Subject key identifier: 31:64:1C:7B:36:7E:1D:A3:61:EC:97:D0:3B:EA:20:2C:28:C1:4C:2C
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA6B5B494766693854030
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77ed6760-7fa4-3697-94be-8af7d786b8ab.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a6:b5:b4:94:76:66:93:85:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=7994ee74-a0a6-4f85-b5f7-995d3d95f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:f9:bc:92:d1:10:28:92:11:61:29:04:8f:
51:97:b3:ab:7d:77:6c:1c:d7:6f:45:03:bc:d8:5a:
58:3c:f2:64:15:04:97:da:fa:c6:f6:2d:a5:9f:d9:
d2:0e:b8:2e:01:7e:d5:77:a1:af:a9:5f:51:f3:fe:
66:db:c6:7a:bd:19:d6:9e:fe:16:bd:02:36:42:db:
9f:4e:ac:9d:5c:3a:d4:e1:c0:80:6a:e4:c7:5f:43:
cc:b4:07:05:b7:a1:0e:f4:ca:99:33:6b:01:48:e9:
b1:67:3e:ac:a1:f3:03:32:88:d1:dd:e1:d4:94:58:
d3:71:7b:0d:2e:d5:a7:4c:70:eb:6a:b4:83:1a:f1:
b0:d4:ac:61:6d:c5:4c:4a:2a:44:a4:38:e8:b3:05:
e3:ff:0b:c0:0b:29:37:9a:7b:63:17:aa:5e:8e:59:
7a:13:73:02:38:43:17:a7:66:66:ec:7e:24:1e:01:
28:a2:2a:e8:36:c6:e2:7c:6e:ad:e5:46:23:d6:42:
d3:a7:2f:18:89:d5:27:81:e6:d2:d5:ec:f2:55:4e:
5d:97:f1:e1:af:a3:f4:28:a2:e6:dd:6f:f6:04:0d:
37:b7:17:13:57:59:aa:41:9f:1c:99:26:68:77:fa:
43:1c:a0:b2:11:31:48:08:be:c4:21:65:0e:0f:76:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:1C:7B:36:7E:1D:A3:61:EC:97:D0:3B:EA:20:2C:28:C1:4C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77ed6760-7fa4-3697-94be-8af7d786b8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:97:4b:b7:8b:3b:10:67:51:28:58:b7:03:f0:2f:c2:59:c8:
11:fe:d7:09:4d:bc:8b:f5:fa:6c:54:59:2c:c9:2b:db:98:14:
c9:83:5c:b0:83:9d:7e:6e:6d:55:e2:44:00:19:bc:fc:8f:9b:
cc:25:49:c9:d9:60:ef:e5:c8:d4:33:c8:ee:85:5b:ed:04:01:
22:34:de:bf:7d:7f:60:80:77:6f:b3:3a:2a:4a:6d:2f:8e:28:
fa:7e:1c:68:22:07:12:06:55:bd:b5:54:0d:9c:c8:58:1a:fa:
17:be:99:7d:04:90:a1:9e:c6:83:86:c5:0e:b7:4d:78:47:c1:
bb:b7:6d:57:9b:53:6a:f9:40:19:e7:64:df:c3:70:05:e6:3d:
b1:86:cd:42:7b:66:a9:93:69:23:a9:45:07:ad:a9:0f:79:09:
b8:35:20:0c:6d:bf:ee:64:ee:7e:f8:e5:e9:14:a6:3c:c1:a7:
53:70:84:51:90:db:99:26:b6:93:8d:16:55:d2:3c:69:d6:63:
a7:83:fa:6e:0b:bc:17:93:6b:09:3a:a7:8a:23:69:b3:84:44:
d3:ce:6c:c9:34:da:14:68:7d:30:18:fd:c8:d2:4c:7e:06:eb:
13:79:a0:ad:83:9c:a5:6f:88:c9:0a:ed:4e:00:ea:e0:99:4d:
f9:01:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:17 2025 by rpki-client