Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0af8f0a0-fbf0-3a8b-b7c2-881e96e36dac.roa
File: 0af8f0a0-fbf0-3a8b-b7c2-881e96e36dac.roa (raw, json)
Hash identifier: 2zyfStRuam/tIXoLXOGvVBjV4W3AUCIfXmb6/Vge6T4=
Subject key identifier: 7B:58:02:A8:F9:DB:F7:51:B0:CF:96:AE:66:BC:6E:9F:90:48:24:5F
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849151165DF526ABCDF398B37C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0af8f0a0-fbf0-3a8b-b7c2-881e96e36dac.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:65:df:52:6a:bc:df:39:8b:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=79e7fed7-ada2-46ec-b3e9-46d26fd12965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:b7:10:9a:b0:01:ee:30:a9:3a:5a:b5:e8:
c8:5e:fd:3a:59:17:e7:13:e6:6e:ef:72:4d:16:6b:
51:fc:8b:fa:22:79:0e:84:f4:01:07:75:19:fe:57:
1d:82:b7:56:40:79:70:06:92:82:eb:6d:7a:4d:b4:
5a:62:f6:b3:c3:44:a8:ca:b9:01:fd:57:c7:dc:ef:
68:ee:f6:d1:c2:ca:90:02:02:3b:5a:d3:af:cf:50:
a2:d1:2c:73:aa:32:e5:93:34:76:a8:de:b4:22:30:
7b:f5:20:e3:19:e7:d6:7b:ae:04:39:00:22:58:63:
7c:af:5c:3f:d6:8c:53:78:c4:f2:e0:88:d2:be:18:
e3:50:63:fd:92:00:bf:8d:1d:af:b9:0c:6b:d8:38:
bc:f9:2a:1b:59:ac:86:a1:37:2f:a5:86:9e:c4:38:
20:0b:d4:84:36:29:b8:0f:0d:91:bb:fa:29:87:de:
a4:ff:4b:93:89:44:cf:ce:7d:d4:6d:91:fa:7e:d5:
94:07:1b:47:24:75:66:0f:d7:94:24:c0:4d:a3:04:
3b:4e:ff:9f:26:c4:91:68:fe:d9:13:2e:dc:7b:77:
89:22:c3:80:e6:f3:1d:65:10:97:28:34:9d:6b:09:
a3:58:23:6e:0c:b0:65:33:c4:d3:9c:25:5f:d4:7e:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:02:A8:F9:DB:F7:51:B0:CF:96:AE:66:BC:6E:9F:90:48:24:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0af8f0a0-fbf0-3a8b-b7c2-881e96e36dac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:9e:26:fb:11:8b:6d:a3:95:8f:e5:68:83:96:cf:c5:2b:30:
f3:6d:96:43:4c:b6:18:63:53:f1:20:b9:ae:b6:b4:83:17:82:
3f:0d:3e:df:e0:62:54:8b:7d:8e:f5:5c:8d:41:74:0b:b3:25:
c8:f7:8d:90:55:ad:3f:59:8a:81:5a:fc:b5:77:1c:68:8e:0d:
9c:ee:7d:32:2f:f5:c6:01:34:fd:90:5c:5d:ca:2f:42:66:e4:
a0:3c:f8:f1:e6:77:c6:1a:9e:d7:7d:3b:b6:2c:3b:f6:3c:2b:
31:67:0e:f3:24:66:39:4c:0a:4b:56:7f:37:57:4d:f8:10:86:
91:dc:a5:a2:c8:cc:4a:4b:b0:23:a3:6d:34:e3:84:38:8c:eb:
45:c8:0a:1c:8d:80:2e:de:dd:7b:24:a8:f0:68:be:84:a5:6b:
40:74:22:1a:04:70:f1:5f:00:cd:ee:54:04:7b:6d:23:f4:3b:
91:b8:e6:de:40:00:80:f7:25:82:34:27:42:69:7d:76:85:f6:
48:58:20:23:5a:f0:65:b9:0c:92:11:df:e4:94:cf:dd:99:24:
68:7f:11:88:ad:87:c8:25:6f:de:5d:2d:4a:71:e2:e0:f5:5d:
84:aa:a0:19:d3:de:92:8f:9d:7c:84:76:c1:a8:32:91:02:c4:
35:e3:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:55 2025 by rpki-client