Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa
File: ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa (raw, json)
Hash identifier: zuXvamv332Gx/bdbD5m+I5lmn6gtpA8Qp5DEgJ8bczI=
Subject key identifier: 38:05:6B:6D:26:1E:97:CB:46:3E:78:A2:F0:2B:87:9C:FF:19:D9:FE
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584915116223151B60C9E6047B80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:62:23:15:1b:60:c9:e6:04:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=6cc484c0-dfbe-4bd4-800a-a3f0aee89f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2f:53:d7:fa:83:63:41:33:cd:88:da:b4:9e:
32:dd:26:25:08:b3:ce:2a:78:0a:c5:ae:70:59:01:
e7:62:c8:9d:e4:91:b5:c1:02:49:fe:b2:d8:5c:ff:
7e:da:53:b7:38:70:b1:c2:d1:ad:7f:a9:e3:d0:ef:
c5:65:24:1e:98:a2:f4:07:72:c3:8a:4b:31:7e:0a:
0e:6f:3e:78:5a:df:5a:d2:e8:ea:48:ab:bc:ef:26:
63:4d:40:3d:c0:58:e1:47:6e:ff:79:8d:16:10:69:
a5:92:8c:ab:4a:79:92:76:08:14:cf:15:7c:08:44:
68:bc:0b:0e:1f:8d:e6:9e:2a:bd:66:4f:a8:86:1f:
53:3e:c5:36:75:f4:70:8d:f8:9a:0d:8c:1c:1b:9a:
5d:50:fb:ce:05:91:1f:1e:82:36:3f:ad:a9:bd:37:
30:98:8a:c0:65:34:46:06:04:c6:9e:9a:d3:4a:56:
aa:ba:ef:23:f0:6e:c2:b4:33:75:3e:1f:c8:e1:ae:
af:c2:0f:61:e9:84:63:18:8e:54:fc:39:88:ce:d5:
2e:32:fb:ff:c8:17:a3:33:2b:31:ef:4a:97:e4:d4:
c6:47:b9:c7:9a:02:19:25:23:05:ee:8b:03:27:f6:
93:41:e4:7e:f2:67:84:f4:ef:82:c6:9f:57:f0:b7:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:05:6B:6D:26:1E:97:CB:46:3E:78:A2:F0:2B:87:9C:FF:19:D9:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ef32b1eb-5a14-34e4-afbe-a7dcee9b601b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:54:e9:e3:87:1f:79:bd:b4:20:6c:b4:a3:6c:c9:e5:b0:c2:
a0:57:5b:5c:25:2a:09:a9:8c:b1:c4:b6:c5:21:df:c3:5b:85:
19:d8:74:05:d2:77:81:a9:16:be:18:45:46:88:76:13:c8:e8:
2e:64:5f:de:7b:d6:dd:e4:17:7d:be:6f:4f:49:d9:c0:01:20:
4d:d0:a5:66:43:c7:69:55:4d:f8:15:31:aa:ae:c9:3a:53:98:
1f:ba:0a:e0:1c:aa:60:86:bb:8b:21:f0:99:b2:63:17:68:cb:
45:5b:d1:19:32:82:09:13:8f:cf:18:9d:c1:a4:ef:af:67:49:
04:2c:49:20:7d:57:c3:84:55:e8:8b:e0:aa:3b:63:1b:cb:31:
02:1f:8c:23:64:6a:c4:02:7c:49:8a:50:f1:b2:b7:45:01:c1:
0c:54:d5:6b:5a:b0:92:ab:40:cd:dc:04:5f:dc:43:bb:a5:9e:
fa:83:be:d1:bf:aa:88:96:e5:79:52:2b:1c:81:ba:b3:00:57:
c6:ea:0a:03:d8:65:1f:eb:c7:bc:7a:d9:85:9a:9a:98:a2:1c:
f1:e4:a2:67:6e:53:bb:f2:36:f0:1a:a9:74:8a:ec:4a:ca:4d:
a0:32:3a:34:f3:9c:a1:5c:14:41:df:0d:a0:e2:a8:e2:f6:91:
53:0d:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:35 2025 by rpki-client