Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0d034fdc-2bc5-3afd-80c9-3cc0d994525b.roa
File: 0d034fdc-2bc5-3afd-80c9-3cc0d994525b.roa (raw, json)
Hash identifier: AOtoIschd9Fnnp6C3PiQKP2Gg8UkU8z4stoudFizQow=
Subject key identifier: 1A:A2:FA:36:4F:14:7B:5A:BA:A1:F9:F2:39:53:1F:7D:DC:B6:DA:7F
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584915116085FE19E15E8265A700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0d034fdc-2bc5-3afd-80c9-3cc0d994525b.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:60:85:fe:19:e1:5e:82:65:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=5a998c20-5bc3-43ed-90b8-1c2dd48dc883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:5f:e7:73:f9:01:89:19:38:17:10:eb:d7:
44:d5:12:06:e5:da:99:ed:8f:ed:62:18:91:95:c7:
5b:eb:23:8d:fd:b8:a3:f6:4c:3b:a1:e9:9b:b0:32:
3d:72:dc:07:c5:79:0b:2f:b6:51:37:b5:d2:50:51:
38:a4:27:59:5f:70:82:51:46:68:a1:95:cd:df:39:
ff:4b:8a:45:a8:13:89:f7:04:31:0a:e4:a3:58:6a:
89:51:d3:7e:39:77:96:28:6e:17:18:1e:d5:06:a4:
aa:92:37:88:7b:42:00:50:b6:d0:3b:bc:07:d8:8c:
ea:65:fb:6c:32:af:5b:76:4d:69:63:4c:e8:de:e9:
8f:0d:a3:65:61:53:0d:91:ad:c7:7e:8f:80:84:87:
73:b5:d4:33:de:d8:c1:22:03:47:b8:36:60:7c:86:
e3:0b:e2:4a:96:d4:1a:e0:37:b9:23:48:d9:35:be:
e7:00:2c:0e:41:c0:e1:23:72:05:9e:58:87:ba:1e:
ad:92:56:21:52:c5:54:00:e4:4c:c7:82:ae:a3:42:
b3:fc:31:5b:27:b8:a2:b1:5b:29:f1:49:91:03:7a:
67:d5:18:7a:b2:47:1c:b1:de:04:0c:6a:29:de:33:
3d:bf:e5:d5:0e:8d:fb:69:fc:96:2e:06:8c:49:9f:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:FA:36:4F:14:7B:5A:BA:A1:F9:F2:39:53:1F:7D:DC:B6:DA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0d034fdc-2bc5-3afd-80c9-3cc0d994525b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:1a:35:4b:90:c8:52:6a:99:92:3a:07:a4:20:d0:0f:23:8f:
46:be:4c:d5:4b:c0:32:2c:77:f3:be:92:f5:13:6f:b2:ad:f7:
e1:a6:7d:1b:12:77:39:0a:4f:f4:f0:78:91:ff:16:48:48:46:
5d:24:8f:19:fc:33:f0:42:93:09:31:37:7b:a4:03:2e:99:b8:
6b:7d:a8:32:9d:ef:29:f1:2e:11:43:09:40:a1:69:b4:8f:87:
b4:ee:95:73:68:13:0b:19:4b:2d:eb:07:9e:cc:f7:1b:2d:05:
7d:1c:23:87:a7:ac:7a:e1:c9:c2:92:75:d1:9c:4d:7e:85:b4:
69:f8:af:00:f2:54:e0:04:0c:74:5b:46:f5:33:a4:c5:09:dc:
36:9c:47:d1:8b:e5:e5:c4:85:53:d4:29:37:2c:d1:ad:c9:20:
c5:4e:52:02:b4:30:d8:48:3e:b1:ac:fd:c2:4d:db:71:59:6b:
63:a9:43:b7:b2:6d:ca:f4:a0:bc:d9:7e:ff:03:fb:2e:7d:91:
f2:69:59:c4:cc:fe:f5:62:73:1b:64:cc:46:bc:27:19:44:21:
08:ca:19:17:11:e5:db:6e:5f:54:65:75:fb:16:62:2d:6a:94:
dc:38:cc:32:d4:e1:bb:47:2c:14:14:b6:c6:39:04:1a:a4:b6:
d9:b3:86:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWCF/hnhXoJlpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
NWE5OThjMjAtNWJjMy00M2VkLTkwYjgtMWMyZGQ0OGRjODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dxf53P5AYkZOBcQ69dE1RIG5dqZ7Y/tYhiR
lcdb6yON/bij9kw7oembsDI9ctwHxXkLL7ZRN7XSUFE4pCdZX3CCUUZooZXN3zn/
S4pFqBOJ9wQxCuSjWGqJUdN+OXeWKG4XGB7VBqSqkjeIe0IAULbQO7wH2IzqZfts
Mq9bdk1pY0zo3umPDaNlYVMNka3Hfo+AhIdztdQz3tjBIgNHuDZgfIbjC+JKltQa
4De5I0jZNb7nACwOQcDhI3IFnliHuh6tklYhUsVUAORMx4Kuo0Kz/DFbJ7iisVsp
8UmRA3pn1Rh6skccsd4EDGop3jM9v+XVDo37afyWLgaMSZ+aBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqi+jZPFHtauqH58jlTH33cttp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGQwMzRmZGMtMmJjNS0z
YWZkLTgwYzktM2NjMGQ5OTQ1MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsaNUuQyFJqmZI6B6Qg0A8jj0a+TNVLwDIsd/O+kvUTb7Kt9+GmfRsS
dzkKT/TweJH/FkhIRl0kjxn8M/BCkwkxN3ukAy6ZuGt9qDKd7ynxLhFDCUChabSP
h7TulXNoEwsZSy3rB57M9xstBX0cI4enrHrhycKSddGcTX6FtGn4rwDyVOAEDHRb
RvUzpMUJ3DacR9GL5eXEhVPUKTcs0a3JIMVOUgK0MNhIPrGs/cJN23FZa2OpQ7ey
bcr0oLzZfv8D+y59kfJpWcTM/vVicxtkzEa8JxlEIQjKGRcR5dtuX1RldfsWYi1q
lNw4zDLU4btHLBQUtsY5BBqkttmzhp8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:51 2025 by rpki-client