Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
File: 6978a815-9a53-3f80-abe8-e211e21209d4.roa (raw, json)
Hash identifier: WFDa9SzQjhNCkKf4hlxeKR+yS4vfU5C58VI/RKeFXDk=
Subject key identifier: 1F:DA:42:0D:5C:54:9A:0B:F8:E0:C5:D3:64:15:DF:F5:07:37:A4:EB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858491511664396BB4A4331354740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:66:43:96:bb:4a:43:31:35:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=a97ae6a1-d02c-4ecf-ae31-5eb14f7b3520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:e6:0d:8b:0b:b5:d7:e4:89:d9:f0:6d:6f:
00:a9:8d:4f:4a:14:0f:9f:25:2f:5c:eb:4d:9d:3c:
1c:48:00:1a:62:1b:03:2d:57:d1:16:83:0b:86:87:
8c:7c:81:3d:02:1b:3d:8d:21:a8:28:49:15:09:31:
82:23:91:74:23:8e:e0:90:0d:d7:a2:5d:82:32:e3:
b2:8e:87:50:84:e6:4c:9d:23:94:3c:5d:fe:be:c4:
7e:a3:0a:79:bf:fd:0e:04:76:ba:7f:5b:8e:42:3c:
fc:d8:19:25:c5:0b:87:f7:24:0b:4f:62:9b:b1:c7:
be:8d:22:c2:13:d0:7c:75:ab:3a:83:c6:24:13:15:
b3:fb:62:78:80:c5:9c:99:7f:89:f0:80:b4:90:a5:
e6:72:dc:61:b3:9c:20:29:56:51:64:16:4a:62:c4:
de:49:24:4f:5c:51:6e:d1:75:1a:a7:27:ba:c6:ec:
da:2e:cc:d5:d4:77:a8:4e:09:7e:42:66:76:40:c8:
37:25:22:0b:34:1f:d6:9e:46:37:07:8b:f2:87:58:
dc:07:cb:03:23:75:01:9a:42:b8:d1:a8:a7:2f:e2:
14:8b:ca:b9:b2:04:f2:c2:13:93:d3:90:fb:f0:85:
27:47:70:50:68:14:b5:45:38:6d:c0:ed:6a:0f:ee:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:42:0D:5C:54:9A:0B:F8:E0:C5:D3:64:15:DF:F5:07:37:A4:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6978a815-9a53-3f80-abe8-e211e21209d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8e:c3:fa:21:7b:66:f8:85:7e:87:71:ee:f2:4f:54:de:a8:
71:83:ed:7c:1f:9c:a2:31:0a:83:8a:cd:5e:66:76:07:d3:51:
1a:de:8d:61:1b:8a:db:3c:5e:be:16:b3:51:a7:24:28:90:d8:
dd:32:b2:da:34:d1:9d:7e:b3:4b:60:64:c6:1d:b4:e2:7e:61:
45:6b:ec:53:2e:f9:2c:79:74:c8:9b:ee:7f:f5:fc:54:68:1f:
2b:a4:82:86:95:be:96:9d:b2:3f:bd:05:e1:e0:a8:ca:a2:49:
5a:7f:f3:97:e7:7c:fb:2c:fc:7f:26:ed:b4:e4:33:e4:01:bf:
2a:e5:ae:13:67:d3:c3:ab:29:9d:ac:be:0e:eb:43:a9:30:c6:
8a:0d:a6:72:9a:60:1c:44:03:65:a7:9a:a6:3f:8c:39:37:71:
33:8d:cf:56:db:e4:6a:b3:43:02:50:34:db:64:e1:46:b4:69:
09:f8:6f:d4:d2:5f:b0:b8:fd:4a:3c:1a:b2:34:f2:d0:ad:5f:
52:ab:30:7f:0b:44:aa:1d:00:c3:1c:e5:87:52:15:a9:4d:09:
2f:1c:21:b4:9c:c2:87:6d:42:1c:fe:0f:04:9d:9e:20:2d:5f:
29:ef:ab:25:b5:df:56:3f:7a:88:64:78:a1:26:03:5a:b1:19:
0a:de:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:20 2025 by rpki-client