Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa
File: 9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa (raw, json)
Hash identifier: ZPGCODhau6YxhyER/mfk8dN03AcGnQh83EmiTryP5zc=
Subject key identifier: 41:C9:FD:3D:B7:E9:73:ED:3D:A1:F2:A3:CB:84:44:5F:C2:D1:C7:67
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858491511629E1ADA9B9064CFD440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:62:9e:1a:da:9b:90:64:cf:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=4cd41132-6aa8-4dfe-8615-5dc752bd681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:20:5c:02:2c:f6:bd:03:4a:d8:a4:33:e5:
43:99:d4:4a:93:24:cc:9f:13:66:59:73:a5:7a:14:
44:89:36:08:61:ff:7f:36:51:4a:8f:a0:8a:67:fc:
19:c3:5d:25:51:d7:99:c8:f1:4a:ff:69:56:39:b2:
1f:e5:59:2e:4d:16:23:c7:6c:32:ad:19:bb:03:2f:
c6:11:1a:ce:fb:f8:96:d8:ca:33:ca:7f:68:20:6e:
60:95:cd:a1:1e:1d:76:4e:a0:3e:39:91:f0:c5:b2:
fd:02:97:b0:1f:5f:3d:f7:18:38:48:aa:cf:48:c5:
61:99:84:95:63:17:0d:84:e5:d9:5c:5f:1d:9c:fb:
6a:c9:17:e3:37:cf:c7:8d:f3:22:e7:11:d8:af:47:
c5:49:b2:e1:d0:53:70:36:24:76:34:d2:b6:52:a4:
09:17:cc:5c:59:2c:95:05:6b:54:81:94:49:5c:75:
f7:48:43:d5:59:89:0d:fc:12:0c:9f:90:5c:17:d4:
fa:ee:c5:57:19:cd:89:36:91:45:16:db:e9:39:10:
4a:d2:b2:23:a6:51:84:56:79:7a:9d:2f:83:82:5d:
36:8b:50:58:8a:80:91:fd:79:3a:81:ac:c3:81:1a:
30:39:73:f6:57:81:1b:e8:99:76:fc:c9:f8:7f:9b:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C9:FD:3D:B7:E9:73:ED:3D:A1:F2:A3:CB:84:44:5F:C2:D1:C7:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:07:de:22:a6:d3:1e:54:8e:db:4b:ce:2f:7d:d4:73:b5:44:
b5:0c:16:93:86:7a:54:a1:b2:da:57:cc:0d:51:50:6a:c1:74:
88:1e:9a:f3:68:3c:00:f1:48:b0:89:bf:1e:a7:cb:c8:eb:93:
94:e6:82:c1:f0:07:06:35:5b:21:db:77:08:57:cb:7b:be:17:
4f:9d:35:46:93:4e:0b:f0:7f:6b:c4:8c:71:05:35:6a:0f:23:
14:ae:2e:b8:99:f5:a5:01:f5:ff:dd:fa:cd:cf:b0:95:3b:59:
32:f1:d8:41:0d:16:6f:b7:36:3b:80:31:fb:e0:00:5d:5b:ba:
09:d6:94:2c:7c:36:82:6b:fa:a5:f7:e1:86:67:e1:81:43:c2:
72:82:f1:1b:f2:ee:1a:83:ec:f0:6c:50:4d:b5:86:38:63:67:
33:f6:e6:04:d7:41:43:02:44:71:d2:a6:81:d8:6f:98:06:5a:
81:23:ee:08:95:fa:27:ea:3e:f3:a5:73:30:bb:d8:83:3e:5d:
bd:33:53:63:b6:39:46:fb:2b:32:87:db:2f:eb:6f:5a:f5:14:
26:4b:9b:62:af:84:cb:40:3a:73:79:11:58:a7:ab:21:ae:d0:
d8:a4:72:3a:7c:fd:74:ca:78:fb:ce:3c:09:9a:68:6c:77:ca:
e5:a5:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:30 2025 by rpki-client