Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a92853cc-f7af-37f0-90f9-7b3b36f4aed4.roa
File: a92853cc-f7af-37f0-90f9-7b3b36f4aed4.roa (raw, json)
Hash identifier: 5XRatXxACMKyI7MVnC9CBDzTPgQSrrSceq+kGtaRpHE=
Subject key identifier: 4B:64:61:CA:DA:F5:50:CB:72:72:1A:C6:D8:E0:CC:73:BC:77:A9:FB
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584915116517DA7761F8527CF980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a92853cc-f7af-37f0-90f9-7b3b36f4aed4.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:65:17:da:77:61:f8:52:7c:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=422dd0a9-c6b8-42af-8530-10dde3fc6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:e8:8d:b6:88:53:65:2a:4a:d0:c9:0e:27:
83:70:df:85:50:e3:00:e0:c0:b8:32:b9:d3:07:0a:
3d:75:fe:a6:9c:25:7f:4f:fd:55:af:c0:d5:dd:06:
20:be:52:74:2a:df:79:ab:ef:6a:f9:86:08:5a:f6:
45:af:45:78:bb:07:1e:8d:ac:6e:77:dc:14:69:03:
3a:3c:c5:97:d3:9e:d0:24:77:de:ee:cc:51:d8:47:
e9:42:29:aa:5d:cd:31:ff:db:11:48:e4:4d:b7:a4:
93:c8:b9:44:b6:15:c1:b0:82:94:f8:14:d1:9a:fc:
27:94:2a:98:f9:2d:f6:a2:13:14:19:2b:a5:a5:7c:
62:86:72:3d:0e:5f:2c:3c:77:ac:14:78:2c:dd:63:
5f:73:b0:bd:d3:7a:b0:c4:f9:1f:ec:53:16:98:c7:
5a:23:6e:74:29:2c:9d:dc:99:cd:4e:8a:da:07:73:
f7:91:62:85:01:80:e3:79:45:0b:f4:8d:b1:b6:ce:
0c:ba:ea:87:05:98:4d:28:d4:7f:83:60:ea:8a:f0:
ce:f2:f0:c8:78:04:63:9e:63:9f:ff:5a:fa:a9:95:
83:28:f4:ec:52:9e:9b:78:17:6d:59:4b:f1:b3:53:
ab:81:68:c6:4e:1c:b5:6e:88:00:c8:7e:27:0f:e6:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:61:CA:DA:F5:50:CB:72:72:1A:C6:D8:E0:CC:73:BC:77:A9:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a92853cc-f7af-37f0-90f9-7b3b36f4aed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:62:81:b8:0b:30:d3:44:b5:1e:ef:62:82:24:88:b6:93:6e:
16:71:5c:31:8c:ac:3f:09:5d:f7:1b:c1:5a:d5:f1:08:05:66:
c2:15:3a:31:03:8d:5d:ea:b7:82:6e:71:ff:01:11:da:4a:70:
9b:12:b0:38:f7:44:c3:28:68:64:44:ea:7c:bf:04:0a:20:1e:
6c:d9:cb:fe:fb:00:9e:52:16:04:18:c8:d0:bd:7c:c7:c3:9c:
31:86:1d:44:60:4d:b5:60:9b:ac:6e:84:1b:4c:3a:6a:16:b9:
d9:a1:49:e5:83:6c:96:90:d9:ca:49:af:d5:54:91:f8:a8:cf:
7d:85:4f:16:dc:a2:ef:2d:d8:f6:09:fe:a1:08:27:a2:0f:a3:
72:55:d8:b0:c0:b3:6d:89:98:da:d9:32:38:1e:be:93:e3:c6:
77:f6:3a:b9:1a:7d:9b:a0:fe:7b:4d:e0:31:2f:d8:5e:e8:79:
7e:ec:87:32:b0:36:ec:b3:ca:7a:04:c9:a4:25:69:c8:30:56:
bf:4b:20:ce:bb:44:82:2e:6d:d0:ee:b4:d1:3d:c5:1a:04:41:
b7:79:a9:12:3e:d0:3d:8c:ff:8c:92:6d:d4:8f:b4:0b:e7:a4:
64:69:d3:7f:85:89:7e:a9:19:6a:09:2c:90:54:1d:df:fd:15:
60:cb:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:40 2025 by rpki-client