Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa
File: d1a609a4-1014-3bdc-9236-560c8f8b9963.roa (raw, json)
Hash identifier: TXY51yn9A5T4O6h175/+mWF7LlSLYhvzjlw6XIh07TU=
Subject key identifier: DA:48:E0:DC:FB:17:73:72:ED:85:57:CE:6E:6B:22:E0:DE:12:DB:6D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA43FC94C61BE52623820
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a4:3f:c9:4c:61:be:52:62:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=47bf0501-5863-4c35-a444-f6f5bc0fbdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:5f:0e:67:87:85:8a:45:1e:bb:7e:be:1d:
f7:ae:9f:28:19:b4:40:8f:54:49:af:25:3b:af:1d:
d2:ce:33:89:da:40:90:0a:64:22:d0:e4:09:2f:3f:
b9:62:ae:cf:81:de:62:f7:fb:14:6c:4f:c3:98:87:
47:d5:d0:56:25:6f:ad:90:88:7d:74:41:13:18:ac:
5c:95:51:6b:db:61:4d:1c:73:63:19:c4:40:d7:28:
64:7a:fc:74:78:33:94:8e:59:85:0a:0d:97:ad:e0:
ae:62:d9:2b:41:78:d1:47:7a:e0:3d:09:0a:95:60:
6f:db:62:d3:fa:e6:6e:25:73:e2:60:60:46:a6:5a:
73:8d:19:ad:38:e1:f5:09:59:ae:e7:cb:90:d6:6d:
7f:8e:cd:55:25:35:72:a7:b9:29:39:0f:9f:d3:5d:
31:fd:0f:99:9f:0b:6f:91:72:d0:6f:ec:74:92:f2:
ab:b4:cf:49:5c:97:83:01:88:72:db:bb:f1:7c:fb:
57:ac:72:50:58:50:50:8f:d9:65:f4:73:af:ec:d4:
ff:83:5a:4a:b9:9f:5a:ce:c0:b5:b5:48:1e:41:41:
19:d3:82:60:00:b2:67:b6:95:5b:e7:c0:30:1a:99:
3b:ed:de:c4:17:6e:6d:48:3d:b3:0c:da:0a:7a:b1:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:E0:DC:FB:17:73:72:ED:85:57:CE:6E:6B:22:E0:DE:12:DB:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1a609a4-1014-3bdc-9236-560c8f8b9963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d8:6f:03:33:02:d7:42:ce:7d:d3:6d:dc:a6:b4:eb:52:59:
c0:d6:c4:e4:0f:a5:b1:4f:af:86:5d:6d:87:83:5e:7d:dd:a1:
26:cd:f4:af:e4:e6:c5:82:b0:ea:be:5d:f3:89:ea:75:e9:e3:
c3:3c:03:47:7e:d0:b7:21:4d:6a:1a:c0:7f:ae:55:af:22:52:
e2:8a:bd:71:cb:33:fb:5e:d5:bd:15:bd:20:b5:54:22:99:2c:
f4:0f:2a:ba:f1:27:8a:f5:a7:c9:0e:0a:27:13:ab:9a:fc:76:
16:61:15:a3:ba:40:1e:33:66:51:01:f6:d3:04:54:cf:6d:bc:
c8:76:5f:ea:e2:21:7a:ec:f4:de:f1:6e:fe:7f:74:91:1e:0a:
49:12:e7:8e:b2:4d:88:1c:d6:8d:5b:f4:be:1f:3b:85:88:56:
af:4c:1b:9b:83:de:b7:63:e1:92:b2:89:50:6c:ec:2b:5e:2b:
6d:47:94:40:ff:4a:c7:8d:27:0d:55:f6:41:5d:9b:66:4a:e7:
84:08:29:cb:e9:ee:78:3b:57:c4:a8:d4:9c:aa:99:bb:cb:b1:
9d:e3:2e:b1:75:ff:a3:e5:40:b4:52:6f:41:bd:86:27:e8:51:
e0:86:11:91:cd:e8:a6:c3:cb:c8:d8:e3:47:6e:71:1b:43:24:
6f:18:2d:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqQ/yUxhvlJiOCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk
NDdiZjA1MDEtNTg2My00YzM1LWE0NDQtZjZmNWJjMGZiZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzNfDmeHhYpFHrt+vh33rp8oGbRAj1RJryU7
rx3SzjOJ2kCQCmQi0OQJLz+5Yq7Pgd5i9/sUbE/DmIdH1dBWJW+tkIh9dEETGKxc
lVFr22FNHHNjGcRA1yhkevx0eDOUjlmFCg2XreCuYtkrQXjRR3rgPQkKlWBv22LT
+uZuJXPiYGBGplpzjRmtOOH1CVmu58uQ1m1/js1VJTVyp7kpOQ+f010x/Q+Znwtv
kXLQb+x0kvKrtM9JXJeDAYhy27vxfPtXrHJQWFBQj9ll9HOv7NT/g1pKuZ9azsC1
tUgeQUEZ04JgALJntpVb58AwGpk77d7EF25tSD2zDNoKerFNhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpI4Nz7F3Ny7YVXzm5rIuDeEtttMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDFhNjA5YTQtMTAxNC0z
YmRjLTkyMzYtNTYwYzhmOGI5OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfYbwMzAtdCzn3TbdymtOtSWcDWxOQPpbFPr4ZdbYeDXn3doSbN9K/k
5sWCsOq+XfOJ6nXp48M8A0d+0LchTWoawH+uVa8iUuKKvXHLM/te1b0VvSC1VCKZ
LPQPKrrxJ4r1p8kOCicTq5r8dhZhFaO6QB4zZlEB9tMEVM9tvMh2X+riIXrs9N7x
bv5/dJEeCkkS546yTYgc1o1b9L4fO4WIVq9MG5uD3rdj4ZKyiVBs7CteK21HlED/
SseNJw1V9kFdm2ZK54QIKcvp7ng7V8So1JyqmbvLsZ3jLrF1/6PlQLRSb0G9hifo
UeCGEZHN6KbDy8jY40ducRtDJG8YLeo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:58 2025 by rpki-client