Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aefcf14b-521a-3609-ae7a-fe3276cdc0c3.roa
File: aefcf14b-521a-3609-ae7a-fe3276cdc0c3.roa (raw, json)
Hash identifier: 3mZxcqlkpcjugErD7bSm2uzoGUrtfRnDEh5u/L12dFw=
Subject key identifier: 1A:31:06:C9:D6:41:2D:01:7B:DB:FC:DD:DD:AB:C0:E4:A3:AB:3F:49
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA356B9EEBDDF7F24C580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aefcf14b-521a-3609-ae7a-fe3276cdc0c3.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a3:56:b9:ee:bd:df:7f:24:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=af4d33ca-74c0-4673-92a8-234719c14af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:57:9d:cc:99:06:f0:4f:a8:03:5d:19:4a:
f9:2e:fc:49:05:90:e4:2c:62:a7:6c:f0:67:af:8a:
5c:a5:8b:43:39:6d:35:cd:a7:7c:58:8d:95:41:45:
ed:b4:36:dc:22:81:6c:ff:8a:43:a5:af:16:7c:cd:
4e:33:09:9d:7d:48:2f:ca:ba:5a:b8:3d:e6:de:61:
29:5b:68:f3:86:c5:af:79:68:59:49:e7:f2:d0:e0:
be:c4:68:ba:3c:cb:25:65:4f:f9:ff:9c:ae:e6:45:
fb:df:62:ae:ed:c3:a5:3e:09:3d:84:7f:a7:31:55:
d8:24:d8:3d:f6:c3:6e:65:bc:b7:6d:64:7c:0a:1a:
3a:91:77:19:4e:6e:38:e7:8a:79:df:4c:81:c1:be:
07:5c:cc:08:9c:2e:36:c6:29:6c:7b:68:08:fc:8b:
96:e4:84:04:7c:b0:0e:a7:25:b9:92:3d:f6:9b:3a:
7c:ef:04:13:e2:34:a2:d8:19:10:55:df:7c:1b:fb:
eb:26:de:fd:5c:16:d0:86:e8:4f:a6:1d:45:01:13:
6e:40:f1:ce:17:f2:4e:81:3d:87:a9:be:9a:95:a5:
f4:ce:ec:5b:dd:eb:e6:11:bc:ce:68:b5:9a:3d:3a:
3c:56:1a:44:ed:a2:b3:86:03:70:31:89:c5:10:0b:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:06:C9:D6:41:2D:01:7B:DB:FC:DD:DD:AB:C0:E4:A3:AB:3F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aefcf14b-521a-3609-ae7a-fe3276cdc0c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:81:5f:ed:ff:ae:92:dc:77:c0:91:d6:fa:62:27:06:88:50:
57:11:ca:fd:b2:bb:6a:5a:9c:32:15:07:ab:d1:5b:aa:64:e5:
d2:d7:eb:bf:7a:90:f9:79:d0:a6:40:7d:88:70:b6:fb:2d:14:
07:4b:6a:a8:1b:f6:79:94:0f:e7:97:42:71:68:db:fb:08:80:
96:e5:6b:8d:99:c9:dc:8f:e1:14:75:da:d3:73:67:de:14:3f:
af:4b:90:29:9c:67:39:89:d0:4a:3e:14:d9:a6:b3:c6:30:e8:
60:2e:ef:dc:8c:77:72:52:d1:15:e2:cd:7b:f2:fe:6b:6a:68:
fd:a5:4a:9c:0f:ed:09:67:b4:b7:c2:e9:01:97:5c:c5:a1:5a:
9a:11:d6:62:bd:24:b4:fd:59:e7:96:ee:dd:40:ae:ab:9e:1b:
a4:b4:e9:c0:e1:32:2b:1d:00:a0:ae:ca:d1:a4:63:e0:83:a4:
f1:20:cc:8d:b6:7c:5d:c5:36:9f:d2:78:ff:9d:37:51:e9:b1:
68:bd:e5:09:f4:2c:4a:c9:07:0d:76:59:68:76:41:ec:a7:d4:
fe:c7:53:2d:00:63:1f:41:c5:db:e3:0d:56:57:0d:f0:1a:8b:
8e:88:41:6a:95:e9:d5:97:cf:73:d9:f7:72:14:c7:1d:87:e4:
a4:dd:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:44 2025 by rpki-client