Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa
File: be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa (raw, json)
Hash identifier: 1EEvTSSYsT/bZkwB0phw7sWVlZ8ouWIA1t32KvYlkW8=
Subject key identifier: 6B:8D:89:D1:D1:49:61:FF:8E:58:BA:35:36:D5:B9:99:0B:88:81:93
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA170FB32AC221101E440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a1:70:fb:32:ac:22:11:01:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=2ac1c76d-96c0-40d3-902c-d2a4ed5582e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:8c:67:08:a2:5d:73:af:e0:b9:b5:02:7b:
5c:24:3a:59:f6:88:51:f9:3a:70:c7:18:03:4a:5c:
23:96:2b:7a:dd:88:34:64:a1:02:c9:db:01:ac:b6:
de:3b:d4:ee:90:6e:bf:e5:46:90:f9:f1:39:86:67:
51:c8:03:a6:30:4c:38:f7:56:1e:5f:01:98:c2:fb:
6c:52:2e:81:86:f3:b3:cb:4b:f7:bb:3f:ca:cc:8c:
c7:2e:98:e9:f9:a9:6d:9a:b7:6a:dd:1f:91:0d:4a:
e8:28:27:22:ab:57:84:79:d5:18:dd:19:0a:90:5c:
9b:6d:52:ad:ff:a4:5a:46:6c:b6:33:43:08:f3:38:
90:c3:b2:50:3c:a4:72:2b:0d:38:e1:16:46:e7:8e:
39:42:25:6b:d2:13:39:03:9c:4d:bb:38:c0:77:57:
29:64:27:d7:cf:9c:6c:54:8e:15:5d:3d:c9:83:db:
b0:20:79:d5:07:e1:c5:fc:59:fe:a3:e5:80:d0:ea:
d3:d3:8f:f3:7a:ae:dd:08:90:4a:97:e3:e3:7e:f1:
2c:bc:4c:f9:b5:6f:58:e4:2f:fd:70:e3:a9:3e:d8:
2a:4c:47:59:2e:1c:2e:d5:5d:11:2f:63:05:42:92:
bb:70:d3:c3:07:9b:95:0e:c1:36:37:97:83:c9:3b:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:89:D1:D1:49:61:FF:8E:58:BA:35:36:D5:B9:99:0B:88:81:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:83:5a:12:15:fa:5e:99:0d:8f:1f:b2:dd:f9:ae:db:65:22:
d6:ae:12:15:1f:c7:54:8c:3a:ae:a5:a4:03:07:19:bd:b6:d0:
9d:40:c2:20:a7:38:ac:19:0f:0d:0f:cf:19:42:55:72:6f:52:
f7:70:ea:b2:78:3f:6f:21:84:79:7f:b9:00:9e:23:7f:ac:03:
f3:fe:90:0c:4c:6f:bf:97:31:51:eb:6c:c2:61:df:af:0a:41:
9d:53:00:95:6f:45:1c:43:0f:07:a6:93:47:bf:cf:a2:79:b9:
07:82:f9:d0:3a:7b:ba:16:ab:0f:69:1c:b9:9e:33:9f:0a:17:
d5:27:48:c6:1f:4a:5a:83:b3:2b:8a:74:64:97:19:e1:6d:bb:
7e:87:72:22:3d:69:b3:da:02:1e:b0:4b:2c:24:1b:d6:91:e4:
f8:36:c3:c0:f8:42:41:66:73:1a:af:fe:60:37:34:10:ee:14:
67:d8:5f:c7:71:ce:71:73:57:bb:6f:cb:d6:87:a4:74:3f:11:
65:b1:08:0f:63:a9:47:81:ca:2e:c2:7e:cb:26:ed:63:21:e7:
05:e4:b7:f8:3b:9b:49:cb:c0:e1:e9:4f:1b:36:9b:6d:9f:f4:
ee:e5:76:79:2a:20:b9:8d:4b:7b:92:6c:53:1e:53:2f:fe:72:
e6:42:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:50 2025 by rpki-client