Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77ed6760-7fa4-3697-94be-8af7d786b8ab.roa
File: 77ed6760-7fa4-3697-94be-8af7d786b8ab.roa (raw, json)
Hash identifier: P/xPWtwuhoVVMDVel7gtPUnl7GYvvU1DG4ivcPBh6Ak=
Subject key identifier: 09:06:EF:43:6A:41:FE:EF:AB:AE:12:50:F8:83:3A:45:39:18:64:A5
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584915116651239C44169333A028
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77ed6760-7fa4-3697-94be-8af7d786b8ab.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:66:51:23:9c:44:16:93:33:a0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=cc3b5fb6-87a7-4cc3-a115-151f64b167b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:c8:3b:f4:d1:18:00:f2:f9:37:13:5c:e1:
72:a7:ac:8f:ee:a0:19:98:6e:82:75:91:14:8e:ad:
20:11:b2:4c:24:07:4d:32:96:af:1a:79:01:fb:68:
1f:7c:bc:3f:43:d6:d2:47:3e:d4:2a:c3:aa:43:8f:
96:54:b0:eb:52:88:75:c5:ef:22:e4:83:1c:93:f1:
b2:33:12:bf:34:d1:d3:ef:a3:81:61:df:56:33:8e:
be:60:20:08:c0:5a:88:30:d7:c3:43:f7:1a:03:66:
10:1f:21:37:6a:1e:2e:36:41:6d:7f:a4:4d:ed:4b:
5b:51:3c:d5:79:2b:11:be:6f:bc:39:05:22:db:af:
2c:7e:fa:ae:a5:24:be:a5:39:0b:ab:ef:d7:44:fc:
a6:04:0b:d7:e1:ce:46:df:a8:7e:9c:8d:f0:7a:63:
b6:75:14:50:b2:ed:05:ff:46:5e:7e:39:ca:41:bf:
55:08:39:27:19:32:38:47:84:b3:b5:fe:98:c2:92:
26:01:39:0b:82:70:de:b5:69:21:3d:39:13:ad:a9:
16:5f:50:42:80:5c:b2:78:2b:e2:7e:96:df:7a:47:
ff:a8:0d:eb:5d:57:a2:4f:81:4b:3e:7c:00:9f:25:
92:e7:4c:1b:7b:36:3e:7e:bd:bf:87:2c:f6:c3:30:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:EF:43:6A:41:FE:EF:AB:AE:12:50:F8:83:3A:45:39:18:64:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77ed6760-7fa4-3697-94be-8af7d786b8ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:5a:8c:37:20:3c:f9:15:ab:6e:1f:d9:53:9c:91:f2:0f:e1:
d2:d4:65:43:f8:a2:e2:1f:79:27:48:c4:be:21:2d:13:e2:fd:
11:73:be:45:4a:cc:59:1f:ef:b1:c4:65:f2:33:f0:bc:fb:38:
cb:38:9b:a6:b4:02:44:e7:dc:38:82:e9:ab:29:11:63:7b:5c:
11:0d:2f:65:61:a7:33:b1:37:39:34:45:60:8b:e0:4b:91:e5:
b3:25:37:27:0a:c9:77:bf:90:f3:39:a0:93:a7:81:10:96:fd:
df:47:aa:4e:9a:20:fc:59:71:26:86:f2:4c:eb:60:9c:d1:b8:
05:15:08:fe:67:55:fd:dc:c6:ae:5c:fa:2b:82:ed:24:04:af:
55:36:be:a5:95:cd:ab:ef:aa:9a:bc:1f:94:2d:2c:20:5f:db:
e3:84:b9:25:8e:77:d2:17:c3:f6:8d:25:d4:44:2c:29:02:16:
cf:94:c9:13:05:a1:43:c0:72:7d:7a:f3:41:c8:b1:76:26:29:
ab:36:7a:96:a6:9d:e1:fa:27:48:70:e2:ff:2b:21:23:26:be:
b3:05:03:e0:f4:15:81:e9:a9:c1:6d:1f:f8:5c:86:f0:c6:4f:
84:53:f8:4c:84:ef:53:e8:db:91:04:b7:c8:73:dc:67:54:9b:
81:c9:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:43 2025 by rpki-client