Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
File: 5d294aa1-589d-36a0-863c-3f219e30b6f5.roa (raw, json)
Hash identifier: Uz4lY156Mk08X2QZLO7nwS7fGcHAMx3RAKLh/Qpk+Mg=
Subject key identifier: 80:40:2A:B7:DD:77:51:7E:71:AE:45:79:9A:E4:D1:A0:0F:AE:E2:17
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858491511618D6FD1FFE2959FE5C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:61:8d:6f:d1:ff:e2:95:9f:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=5e04308a-1cdc-4fb5-b1c8-6ea50601d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:06:b3:12:96:a1:bd:29:c7:a8:4d:b3:b8:
3d:2b:c9:99:97:0c:fe:8c:67:1f:08:56:4e:91:b6:
f1:d0:be:f9:68:d3:db:91:2e:e9:ec:2a:53:97:d3:
ed:52:35:e5:7b:8e:79:aa:91:f9:7b:c2:db:72:56:
de:5d:2a:c2:3f:5a:5e:61:a8:bd:39:31:dc:0a:17:
2b:99:e2:d0:89:29:9b:7c:82:18:7d:ff:45:19:3a:
0b:ae:28:3d:ab:c5:fb:17:b6:4f:7a:c4:08:98:c1:
80:58:00:68:ad:aa:2a:a3:02:04:5a:6a:74:96:2c:
9c:28:21:45:ad:7b:4b:c8:ca:41:dc:dd:4e:50:a7:
e4:f2:5c:71:ea:1b:0e:d4:45:28:41:33:9c:db:9c:
85:96:5a:60:02:f5:41:8b:b8:fc:c6:7c:e7:c4:a0:
aa:fa:eb:df:5f:f2:ef:cc:c8:09:9f:92:98:9d:72:
2e:cc:38:f5:8a:1e:88:87:96:7e:09:8d:6c:94:2e:
b4:0f:fa:f2:17:74:a0:6b:6d:ad:7c:df:dc:9b:0f:
cf:8f:e9:9d:4b:71:d3:5e:d6:1a:1d:e0:21:8f:3a:
a7:3f:e9:d2:13:a9:3a:ea:d5:a4:63:ad:f8:e8:c8:
a5:4b:c3:1d:7e:e6:23:06:ec:c9:da:4c:26:b6:7c:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:2A:B7:DD:77:51:7E:71:AE:45:79:9A:E4:D1:A0:0F:AE:E2:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:8c:4f:55:f7:fd:b0:32:21:b5:86:78:32:85:18:2d:b9:ca:
cf:bd:90:94:9f:2d:e8:c9:29:f2:d9:78:9c:8c:4c:aa:e9:8e:
b7:9d:97:d9:05:3f:73:5e:66:a4:0a:72:1e:53:e6:6d:fd:de:
42:49:ed:8d:67:9c:0b:ac:7e:1e:18:f8:a0:8c:87:05:06:f4:
5e:1d:c7:89:4a:3a:2a:ec:a7:b3:d3:dc:53:d3:e9:9d:4d:d4:
f4:f0:4a:4e:91:51:48:c0:c7:de:77:ff:ca:f7:3d:fe:78:cd:
66:8c:2d:59:48:30:a9:43:6d:1f:57:27:98:36:17:58:24:c4:
78:bf:c7:17:32:47:b6:a1:a0:13:26:9a:c6:0a:7f:29:ed:71:
60:de:b0:07:22:a4:a8:2c:80:4f:41:6b:bd:54:c6:cc:b6:eb:
02:25:76:98:0c:50:35:88:fe:93:30:1c:94:08:0a:06:6e:a0:
6c:16:1a:09:97:7f:3d:a9:e4:af:d9:37:de:9d:da:c2:23:40:
f7:1a:03:64:58:11:cc:0a:4c:09:34:c1:22:f9:9c:63:a7:b9:
49:f4:2e:e1:49:dd:18:e1:68:8d:ad:61:09:4e:1f:74:8f:9a:
d3:46:77:14:86:3a:d4:19:a9:b9:a9:65:7b:8c:ba:dc:59:48:
1f:36:0c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:39 2025 by rpki-client