Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa
File: cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa (raw, json)
Hash identifier: 9wODUhJIX8CD4HVKvO0nMjNUlPsG5E+QgJmG1xDGigg=
Subject key identifier: F1:4D:6B:53:67:A8:C9:50:68:BD:A0:A5:D2:CA:A7:12:83:FB:80:E3
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA57216297B5F74E32640
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a5:72:16:29:7b:5f:74:e3:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=3f7f4b09-72ed-4228-8509-0852552951a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:20:74:5d:ac:d3:04:8d:f2:04:8f:6f:d7:9f:
f5:b9:7b:05:80:a6:d6:4b:47:9a:c7:e4:15:8e:74:
80:e1:d2:20:b2:46:8f:9c:5a:53:b3:7d:8e:76:66:
ab:75:b8:53:52:ac:cf:af:dc:24:31:ec:c5:39:6c:
51:7f:09:37:4e:59:3d:1c:d9:49:d0:6e:55:89:b7:
f2:03:70:39:73:92:ed:7e:91:d8:a3:3e:d9:a8:52:
df:4b:24:43:af:4b:c0:93:2d:e2:14:b5:bb:cc:9e:
09:3e:14:eb:24:03:99:f1:fa:28:69:dd:05:0c:da:
42:1a:80:a2:4a:a0:ef:c0:3a:e2:48:5b:57:f0:79:
50:c3:d4:e2:0c:f2:3d:ab:0d:30:84:9c:17:b4:b9:
0c:2d:e2:24:bf:f2:79:c1:9b:7f:11:74:b3:28:fd:
f3:3d:2a:19:2f:dd:7f:8b:2c:a8:41:df:fd:2f:49:
be:b7:af:12:80:ac:61:09:17:d1:21:1c:40:88:8b:
35:ae:2d:e7:ca:b0:11:a7:72:cc:92:e3:a3:80:fe:
09:60:eb:23:2e:f0:a5:79:7b:aa:f3:65:3a:0d:18:
31:2a:6e:5d:ea:10:4e:64:10:50:2b:02:62:ed:79:
d4:dd:88:19:2a:e3:1b:dd:e0:98:10:6b:82:2e:2f:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4D:6B:53:67:A8:C9:50:68:BD:A0:A5:D2:CA:A7:12:83:FB:80:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cce3df74-b494-3f24-bb77-a5eeb5d3e670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:ad:79:dd:9f:2b:58:ed:e9:70:75:f8:a3:5a:87:75:a0:42:
fa:1f:71:3c:ef:6e:eb:7f:18:b9:59:2b:56:c7:c1:a6:8d:fb:
9c:c0:e9:b5:fa:ff:00:39:52:6a:0c:e5:91:16:41:e6:38:ed:
cc:69:4f:54:e8:32:09:b6:9b:0b:43:6d:90:0f:ab:20:c5:87:
2f:c7:30:b5:24:dd:34:d0:a8:ba:8d:da:78:44:b1:70:44:8a:
bf:e3:93:06:38:14:e9:21:8f:b2:92:40:50:7e:9a:ea:ca:76:
e0:ee:a8:3c:cd:3f:c4:c5:a7:6c:7f:f3:93:04:47:e2:45:f7:
0c:0b:4c:d5:4c:1f:81:4f:6f:16:d1:8f:08:2d:9c:dc:47:d3:
b8:00:a0:a0:c0:b4:66:4d:a0:d1:7c:bf:d5:02:78:35:81:39:
85:5f:2c:ff:74:11:fa:ff:0d:35:1e:a7:ed:42:3e:db:3d:d3:
2b:d3:e8:32:f8:43:25:2d:fa:ba:89:e1:93:90:d6:11:eb:d5:
d8:06:4f:99:a1:ca:84:86:95:ec:81:17:92:65:25:04:4f:cd:
9f:1c:de:2f:97:7d:41:50:7f:2f:f7:a4:4c:bb:5d:57:ac:5c:
93:2b:13:85:dd:bf:c7:b1:d6:b6:2e:c3:ec:84:ab:88:7a:61:
62:fe:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:07 2025 by rpki-client