Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f53dd6ee-887b-3a95-995a-650dfab6e012.roa
File: f53dd6ee-887b-3a95-995a-650dfab6e012.roa (raw, json)
Hash identifier: 31k3+FDDwChIBD1ncSgejIv+5hue3f6ipm7TmGgekXY=
Subject key identifier: 12:9D:4E:F3:1E:FF:E2:C7:7E:5B:F1:78:8E:94:FA:EB:2D:DF:DB:00
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285848467AC446503F2BF735055700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f53dd6ee-887b-3a95-995a-650dfab6e012.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c4:46:50:3f:2b:f7:35:05:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=a9c0c75d-1e99-41e5-a4bf-db33b3bc2ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:f7:1a:4e:d5:01:d1:31:45:c9:e3:a0:17:
9a:24:46:51:58:58:bb:40:36:86:7a:3a:ee:ef:b2:
95:77:bc:0d:c8:ee:1c:f0:44:d3:82:da:62:80:61:
73:17:4b:7f:8f:67:79:de:cf:ad:0b:92:97:0e:7b:
0a:dd:60:ad:95:87:2c:a9:f4:c4:fb:27:ef:42:86:
1c:e9:c9:47:97:81:db:1c:2c:3d:d8:fb:45:56:76:
b6:6a:bb:31:e2:0a:b3:1b:6b:84:20:7c:2c:34:6e:
a1:c1:b8:d2:a9:23:92:e8:0d:b1:7a:b7:80:32:c5:
4c:ff:e2:eb:ae:33:b8:b9:d8:9d:08:fd:59:1e:0b:
54:1d:bc:40:e9:b1:da:e9:84:d7:e1:d0:90:49:bf:
57:30:82:55:29:55:bc:e7:38:53:85:bf:67:38:e5:
7e:9d:06:8e:ba:8b:2b:60:90:2b:d0:0b:d9:c5:c4:
30:29:72:3b:54:a1:b5:ca:3c:bd:3f:b1:93:d8:2a:
4c:7a:e9:ad:b7:e9:82:1a:1c:1d:40:4c:47:0a:fc:
53:0b:0f:75:3c:4a:de:71:fb:59:05:dd:1e:bf:99:
7f:51:ee:ed:ff:67:56:5b:d1:1c:7d:01:30:7b:a8:
59:e2:2c:01:eb:41:f0:fa:ee:36:0d:1c:e5:42:4d:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9D:4E:F3:1E:FF:E2:C7:7E:5B:F1:78:8E:94:FA:EB:2D:DF:DB:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f53dd6ee-887b-3a95-995a-650dfab6e012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ee:ba:46:74:e2:5b:e1:67:9a:ab:87:18:c0:08:97:9b:c1:
ea:51:e3:4e:45:f0:1d:36:c1:89:ee:a1:08:5f:f7:36:d1:12:
9d:d8:ce:f5:81:f5:57:44:32:10:a4:97:62:d8:52:39:ee:ab:
98:bd:f7:ea:c5:c3:c3:36:09:66:46:04:55:59:82:ea:79:1d:
ed:60:62:43:12:c5:cf:93:1b:fc:1a:cd:f8:ac:42:26:84:68:
73:06:86:2d:7c:0f:5b:37:e2:25:77:25:9a:77:4d:e9:0b:eb:
15:5b:b2:4c:2e:71:d9:8d:c5:62:79:c6:b3:51:14:d1:1f:26:
30:d3:d8:ed:12:39:ed:cd:f3:d5:e3:b5:c8:49:fa:ae:07:34:
68:b3:6c:23:c4:ef:1f:d6:2d:99:16:af:3c:42:18:ca:1f:97:
fe:d3:3a:ca:e0:3b:b1:58:38:8d:cb:af:53:23:89:71:5d:5e:
32:5e:35:a4:35:02:34:07:82:4c:7b:12:f7:df:06:00:3b:11:
f2:58:56:fd:1e:67:17:5d:b4:94:06:16:a5:c7:2a:de:e7:e6:
5b:72:df:8c:77:c7:8f:92:fe:17:77:b1:e6:de:22:64:30:66:
2f:8d:a1:6a:4e:fd:64:4b:d6:63:ca:fd:dc:ae:d7:ca:d9:27:
92:94:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:25 2025 by rpki-client