Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa
File: ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa (raw, json)
Hash identifier: Dh2m7mX4dtbkYgwIUnf3F+dbZpg92Lkj/DC3GCbAT9g=
Subject key identifier: B8:24:5E:E5:C2:20:A0:1E:6C:D9:B8:38:5A:72:2C:AA:E6:25:4A:FE
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584835BAA461EE46216CBCC80834
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 13335
IP address blocks: 204.195.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:a4:61:ee:46:21:6c:bc:c8:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=527be4dc-b26d-4688-88b4-d03451fc94c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:d9:de:05:ec:c2:a5:4d:2e:37:92:5c:de:
1d:0d:c0:c9:2e:be:55:c9:0f:fa:d5:1b:31:6f:7d:
cd:a1:71:7b:d7:d0:69:a6:bc:d2:3e:9d:3f:b5:04:
8a:c5:3b:1a:17:f4:27:f5:fe:7d:e4:91:cb:c2:03:
03:fd:a7:b2:c9:e1:d7:b1:f9:d3:c8:46:d1:92:c6:
ac:65:7b:a7:a3:05:5d:5c:d8:ef:51:90:53:a2:eb:
81:49:24:7f:51:dc:c7:a6:71:78:8b:2f:ba:10:66:
d2:2c:20:68:54:7c:5b:42:69:b1:bf:d8:ec:77:53:
2e:22:1b:1c:a7:01:86:0b:ce:e9:bd:07:5e:37:b1:
4d:16:2b:71:df:25:62:f9:e9:ca:a0:ba:eb:c0:41:
b6:8e:24:ed:04:dc:42:11:c5:ec:a6:1a:2e:d6:6e:
02:2b:a5:5b:fa:29:f3:55:0e:76:ad:88:e8:3b:f0:
d6:7d:00:fa:f0:26:b9:45:ba:b8:b1:bc:b7:45:6c:
80:ea:e5:ca:35:3f:35:c3:ec:7b:5b:b8:6f:25:75:
01:81:fd:2f:66:b0:4a:89:56:9d:01:76:d1:1f:4c:
59:34:d8:b3:71:42:ae:aa:41:88:fc:4d:fa:84:16:
65:2e:f3:24:d2:4a:18:d5:a8:2c:29:45:5b:52:b8:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:24:5E:E5:C2:20:A0:1E:6C:D9:B8:38:5A:72:2C:AA:E6:25:4A:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff1479a7-4d74-30fe-a2f6-e076fff9edfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:03:22:44:8c:b9:73:76:0f:b4:d0:84:83:48:8b:94:40:5f:
a5:02:f7:0c:f3:03:72:35:59:6b:12:0c:cc:ff:ba:a2:be:87:
41:90:cc:b0:81:63:44:ec:d2:7a:42:9d:76:e5:27:dc:87:c8:
5f:bc:77:3e:a0:ce:6f:f2:75:00:26:7e:12:ce:c6:f6:2a:31:
27:bb:46:6f:4e:93:4d:65:9a:31:bb:15:5a:1a:46:e3:26:ca:
4a:74:d4:19:2c:84:fc:95:28:c7:2f:9f:03:87:40:ab:bd:83:
bf:23:ed:a3:50:c7:6d:1e:f8:ab:52:9c:8f:e5:2a:6d:c9:f1:
36:0c:5e:63:67:a3:0d:e0:e1:7a:03:72:e3:a0:6c:b4:90:ba:
dd:76:9b:ea:4a:0a:28:36:65:88:12:7b:ac:70:e9:b3:ca:76:
a0:21:22:ab:50:11:5c:34:e7:50:fa:52:90:c7:14:7f:70:6d:
d7:66:be:dc:85:0d:0c:08:2d:0f:c0:22:7e:55:75:90:d1:28:
f5:d3:60:0e:0a:3f:d8:2d:0d:79:d0:06:d1:30:59:04:46:dd:
c9:44:13:cd:d1:c0:67:40:24:ab:9b:e5:3c:97:eb:b7:dd:24:
eb:84:52:0d:da:0e:8e:f3:a3:e5:85:84:be:ed:13:a7:92:92:
f9:93:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:10 2025 by rpki-client