Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
File: a815da88-cfa8-3af3-ada0-55a72b6309b2.roa (raw, json)
Hash identifier: 1qu48hvx0Q2ILpo19ddbAJT7buEqaZaZGkuapS9iXZw=
Subject key identifier: 35:6D:86:D3:8A:A7:CF:27:0F:4B:48:D8:28:DF:67:51:13:35:AC:5A
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA4804FF62F14261DA340
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a4:80:4f:f6:2f:14:26:1d:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=c964397a-86f1-4a9c-89f9-5140c61c8ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:90:bb:7f:eb:5b:e2:aa:04:1c:c8:65:f2:
a8:aa:f4:de:2e:20:f1:74:01:57:e5:6a:0a:b1:9c:
e4:42:59:fc:58:73:b5:0a:01:cc:17:eb:ed:b0:6c:
7b:e7:6f:64:83:c1:7b:13:87:0b:ae:7e:2b:b0:d9:
c1:54:d8:9f:0c:30:71:32:5c:11:69:ae:25:ea:dd:
98:08:45:fb:79:62:76:b5:0b:56:42:df:d3:99:51:
cd:fe:33:cf:e4:0f:d5:54:f7:7c:d2:11:b5:a4:26:
58:db:34:d1:0a:f0:3e:83:f2:35:0a:0d:98:db:03:
6b:6f:09:cb:b5:ed:69:95:bb:ed:64:72:ae:16:a6:
a6:89:10:c8:53:5f:82:d9:de:ec:a3:c0:45:7a:92:
15:a5:c4:65:ed:54:37:e2:79:04:ed:c8:16:6a:75:
11:85:33:22:c6:09:64:0c:3a:64:0c:68:5b:30:d0:
3d:ef:65:d3:42:e6:40:ff:9d:09:2f:43:0e:91:c2:
14:6c:68:45:f0:57:82:c9:2e:1c:6b:70:d3:a3:89:
c1:81:52:64:65:f1:83:e5:c8:81:87:b4:58:f8:96:
d0:7f:4c:01:6b:81:17:c9:96:3b:3c:99:03:22:da:
9c:72:20:9a:87:a7:7d:44:26:4a:d3:aa:4a:af:e8:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:86:D3:8A:A7:CF:27:0F:4B:48:D8:28:DF:67:51:13:35:AC:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:81:42:8c:7d:48:f5:19:06:73:d4:3c:cf:88:c9:18:9e:ac:
fb:02:d6:56:c6:b6:af:e1:1a:49:dc:12:93:20:2d:1d:75:77:
8f:79:81:3b:22:e4:3d:f7:3c:4b:8c:7b:38:26:7a:56:c3:0e:
28:2a:4e:53:f2:85:f6:f2:79:37:4b:45:b2:ae:29:48:57:8f:
a5:97:64:96:6d:0b:40:63:8b:df:db:94:be:44:5d:52:89:ec:
ef:0c:6f:82:8c:81:b4:c0:e7:25:78:34:c7:73:4e:1e:b2:aa:
b7:c0:f6:a4:ef:7e:af:0b:e6:a0:59:90:4d:05:68:87:55:88:
65:dd:59:9f:f0:02:73:1c:5c:3b:32:5f:c1:73:b4:cb:5c:a0:
fb:13:a9:6d:9c:23:9b:c3:31:f6:f8:7a:c8:8c:4d:e4:6d:f1:
71:6c:99:61:99:57:b7:8c:dc:7e:55:81:0b:4c:28:31:5e:30:
3d:fb:47:6a:e2:3f:b4:6e:6c:2f:fa:c7:61:5f:32:a4:f4:e8:
67:c3:a8:9d:c1:72:76:0c:31:c7:81:a5:05:3f:5a:a7:8c:88:
81:8a:11:5f:03:6b:c1:05:50:39:d3:f1:09:28:6c:e2:2e:6b:
e1:40:bb:e0:4f:e1:71:ac:44:51:c4:ee:39:4c:7c:33:8a:36:
01:a8:eb:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqSAT/YvFCYdo0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk
Yzk2NDM5N2EtODZmMS00YTljLTg5ZjktNTE0MGM2MWM4ZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJmQu3/rW+KqBBzIZfKoqvTeLiDxdAFX5WoK
sZzkQln8WHO1CgHMF+vtsGx7529kg8F7E4cLrn4rsNnBVNifDDBxMlwRaa4l6t2Y
CEX7eWJ2tQtWQt/TmVHN/jPP5A/VVPd80hG1pCZY2zTRCvA+g/I1Cg2Y2wNrbwnL
te1plbvtZHKuFqamiRDIU1+C2d7so8BFepIVpcRl7VQ34nkE7cgWanURhTMixglk
DDpkDGhbMNA972XTQuZA/50JL0MOkcIUbGhF8FeCyS4ca3DTo4nBgVJkZfGD5ciB
h7RY+JbQf0wBa4EXyZY7PJkDItqcciCah6d9RCZK06pKr+j8AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVthtOKp88nD0tI2CjfZ1ETNaxaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTgxNWRhODgtY2ZhOC0z
YWYzLWFkYTAtNTVhNzJiNjMwOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMP+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6BQox9SPUZBnPUPM+IyRierPsC1lbGtq/hGkncEpMgLR11d495gTsi
5D33PEuMezgmelbDDigqTlPyhfbyeTdLRbKuKUhXj6WXZJZtC0Bji9/blL5EXVKJ
7O8Mb4KMgbTA5yV4NMdzTh6yqrfA9qTvfq8L5qBZkE0FaIdViGXdWZ/wAnMcXDsy
X8FztMtcoPsTqW2cI5vDMfb4esiMTeRt8XFsmWGZV7eM3H5VgQtMKDFeMD37R2ri
P7RubC/6x2FfMqT06GfDqJ3BcnYMMceBpQU/WqeMiIGKEV8Da8EFUDnT8QkobOIu
a+FAu+BP4XGsRFHE7jlMfDOKNgGo69c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:31 2025 by rpki-client