Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa
File: c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa (raw, json)
Hash identifier: AwY03Gmc1QBKgBwVA+NI1ZQqp/S1hZ6tDF6J7Hix244=
Subject key identifier: 0B:BB:1C:64:DC:C4:95:2E:EC:D1:71:2D:40:3F:16:8E:9F:99:00:10
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848467AC486425C1400FAFAED80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c4:86:42:5c:14:00:fa:fa:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=18d5ce18-0154-4256-affc-f2e27bd97061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:78:d8:28:64:fc:66:63:ca:1b:d2:29:f1:
e9:6b:83:65:07:79:9d:bf:79:51:8b:af:ab:48:8f:
44:06:6a:e8:14:94:7f:44:55:c0:c7:47:41:16:3a:
b4:8e:c6:42:a6:f0:0c:0e:fe:c9:96:23:42:45:c2:
30:04:d1:ed:0b:f4:d5:aa:81:5a:1e:31:41:d5:82:
83:5e:67:f2:f3:e2:2b:df:d7:a8:47:74:de:f4:9d:
16:10:56:b5:e3:9a:db:78:0c:82:2c:62:83:13:18:
7d:af:79:9c:e9:60:76:8d:d5:13:89:ba:c2:38:12:
9b:9f:12:78:1c:3d:ed:83:db:88:e1:74:43:2d:ba:
89:46:1f:08:82:bb:32:dd:1e:3c:1c:c9:fb:7a:d4:
9b:39:d6:71:43:d1:37:47:a6:96:32:44:53:92:c6:
ac:62:b4:be:47:3c:d8:6c:b1:af:ff:92:55:1f:0d:
cb:ef:e1:c3:2e:fe:c1:cf:6b:fd:19:30:f0:50:6e:
ee:32:fc:4b:fa:b4:24:d8:4d:3d:78:0f:6c:3d:7a:
f5:f7:b4:ac:47:8e:c3:88:32:34:44:c7:20:7d:0b:
4b:41:77:0d:e6:65:3b:65:c9:cc:b6:8b:b2:b6:2c:
81:75:39:d9:e4:47:51:ed:db:6c:92:50:54:ad:45:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:1C:64:DC:C4:95:2E:EC:D1:71:2D:40:3F:16:8E:9F:99:00:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c849dd5b-46c3-31bd-aadb-66a7f7e69db8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:df:dc:c8:8c:a8:ab:6b:42:bc:cb:77:6b:2d:b0:e8:49:d9:
a4:5f:13:a5:18:29:45:a6:3f:05:4b:f2:98:0c:28:c1:c5:7c:
a3:20:0b:a6:c5:c0:e3:61:7e:e7:af:57:a1:2d:22:a7:00:dc:
2a:02:d1:5b:a6:4b:76:89:3b:39:89:d9:d6:b4:56:dd:0f:b7:
ce:03:0a:9f:a1:a8:a1:4f:74:ec:9d:be:1d:55:01:09:ed:6b:
90:3b:66:3f:a3:77:c4:77:06:9c:88:eb:0e:06:35:20:01:1f:
4d:e8:71:d4:f5:30:6c:7e:0d:e2:88:f8:97:56:3f:cd:b5:18:
55:6a:de:1e:6f:d8:0a:97:bc:da:0e:4c:28:69:e1:7b:bf:f8:
2d:e9:85:a8:58:37:9a:b3:3c:01:71:ce:a5:1b:97:76:a3:4d:
0a:2b:1c:22:ba:bd:d8:08:9b:14:2b:b6:f1:c3:b5:47:4c:ec:
a8:1d:b2:26:c7:04:27:3a:80:5b:3d:52:8e:5b:a5:fa:48:71:
e6:78:38:68:e0:39:3b:ce:e4:5f:bf:b7:97:a9:cc:00:48:f2:
cf:c7:2b:9f:a5:e6:5d:9e:0f:d4:dc:ba:4c:0d:17:1e:9c:47:
14:fd:5d:ed:2d:d9:f7:56:bc:ef:45:88:d1:10:dc:44:ac:3f:
57:2c:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:05 2025 by rpki-client