Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6c32211-7344-3618-99e7-b1494cdfb2c8.roa
File: b6c32211-7344-3618-99e7-b1494cdfb2c8.roa (raw, json)
Hash identifier: zakJiKxJDsTzeevcfrSN4CJEfo73yoPyBn8D+8AaGi0=
Subject key identifier: F8:53:CC:80:6E:97:FB:F0:8D:32:82:16:26:08:F1:6D:FC:29:FD:E3
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA735243ED3E6F10EA780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6c32211-7344-3618-99e7-b1494cdfb2c8.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a7:35:24:3e:d3:e6:f1:0e:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=0909f0d3-9cea-4777-b794-27a3a259b8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:a5:4e:80:de:32:f1:de:19:13:80:3c:6f:
ff:5c:6a:fa:bc:46:4e:ad:9f:e5:5c:13:c8:a1:48:
c6:8f:57:2f:9b:6b:50:ca:9e:8e:e8:44:47:38:d3:
f9:77:66:dc:82:e2:52:47:1a:08:aa:c1:be:dd:c1:
b6:bb:70:44:86:16:fe:b8:1a:30:52:c9:c6:88:5c:
99:7f:a4:b5:ce:c5:ed:8a:52:a8:fc:b6:26:4c:d7:
68:d3:93:41:d0:21:53:3a:89:9d:9f:9e:2f:87:e3:
ef:ca:05:11:f1:ba:f9:26:ec:83:70:60:26:98:32:
ca:d1:d1:03:82:43:d8:d1:b8:be:5e:25:25:b7:c5:
1d:68:04:e7:da:34:6c:dc:86:53:18:a8:9c:1a:4d:
e7:96:81:7e:f9:0c:51:65:38:a8:1b:fc:95:04:4e:
85:43:60:cc:25:85:1f:b1:4e:e2:56:05:80:5a:13:
12:54:2b:8a:1a:cf:de:4e:76:3f:01:33:12:94:ad:
b1:e2:e2:d9:3a:2b:85:b9:40:41:5a:cb:af:e8:b5:
5c:91:0b:7e:3a:62:3f:cf:30:f7:2f:fe:31:a9:15:
89:37:3e:8f:06:20:fc:d5:15:7f:03:6d:0c:8f:88:
12:e6:dd:5c:a5:4c:e2:e5:31:36:c6:ac:ec:6c:5b:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:CC:80:6E:97:FB:F0:8D:32:82:16:26:08:F1:6D:FC:29:FD:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6c32211-7344-3618-99e7-b1494cdfb2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:29:fc:bf:4a:22:5f:fa:02:85:64:34:aa:04:4a:b7:9f:f2:
b0:ae:ba:a8:d7:c7:6c:15:bf:e8:40:22:67:db:9b:83:51:94:
c9:bd:c1:59:af:69:5b:48:7f:c7:51:f4:f7:61:1f:2c:43:0e:
29:36:64:ec:65:a4:26:6f:72:d7:ca:a9:80:ae:ec:5c:f5:7e:
9d:fd:1c:5b:5a:9a:f9:ff:97:9c:a9:9a:25:8c:fa:e5:9d:44:
8a:d3:fb:84:4c:f3:aa:17:a9:2e:81:d6:29:a1:a3:ff:e7:1d:
4f:62:c9:4a:69:58:00:3c:a2:eb:b1:26:6c:f5:4d:2e:e7:63:
67:f7:1d:b4:a2:33:69:bc:87:62:46:8f:de:20:d2:9b:8e:3a:
df:40:ae:40:f9:35:c3:1f:6d:f5:1f:26:02:a3:82:f3:4d:bd:
95:92:21:ce:6e:81:60:29:99:57:5a:d2:a4:bf:00:37:1e:c8:
7c:be:ed:ab:aa:a5:e6:70:1f:14:4d:08:58:d6:d6:1c:bf:0d:
8d:84:f8:d5:67:1d:f0:3f:8b:62:d5:fe:79:51:9c:3f:96:06:
2f:71:86:44:bd:af:73:95:cb:30:25:90:b6:19:30:4a:e4:7d:
d1:bb:cc:5a:7c:0f:b5:2a:05:e8:f6:3c:ba:1c:59:e2:e8:4b:
38:b3:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:03 2025 by rpki-client