Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
File: fcffe815-2a18-38d0-9061-3af5eec28d94.roa (raw, json)
Hash identifier: wp7+DbzsvPFMfM7QMEClm8nNnvDE+/BqlFFtQJCkyps=
Subject key identifier: 17:AA:CB:F0:F7:8F:65:31:20:5E:9D:38:2E:4E:34:AC:8B:35:60:61
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285849151163A366EF5396CA301080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13335
IP address blocks: 204.195.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:63:a3:66:ef:53:96:ca:30:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=3428dc44-1ef4-4f0f-a20c-857fc4eb8eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:55:4a:3e:ab:4b:88:aa:e1:90:36:74:87:
a7:36:a2:67:7f:13:43:a7:97:b1:6a:9c:80:af:86:
96:5c:a9:3f:e3:ef:f2:f2:a0:e0:88:13:da:62:1f:
19:af:4b:8b:47:e2:b7:47:2c:89:59:01:35:cb:f1:
fe:33:a4:3f:d5:fd:55:ee:ad:0c:4a:39:ad:ce:15:
83:ae:b0:ea:80:e3:f3:73:e1:7a:26:03:4b:fc:69:
46:3a:8a:7d:a6:11:1b:29:00:d2:ed:e0:97:bf:bd:
05:b1:22:3c:51:57:8b:db:17:73:a8:8d:84:c5:57:
74:a2:53:85:74:5f:68:40:f7:a6:ab:3c:9f:f9:40:
2c:d8:9a:a0:07:77:66:d1:2b:8f:37:a3:3b:f7:6b:
31:63:46:1e:3b:da:1b:7a:84:a7:38:cd:a3:3a:e0:
8b:8a:5e:89:5f:7b:68:2f:39:b7:da:05:e8:e1:fd:
e4:27:75:5f:a1:d6:ac:14:35:8d:2e:18:b8:5f:1c:
64:95:8e:ea:31:69:85:54:68:09:66:65:a8:9b:84:
83:1a:86:27:92:cf:bf:ce:be:c8:0c:83:87:fb:43:
6a:65:2c:c0:75:5c:98:16:18:1e:e5:fa:57:56:06:
0f:7e:d3:df:49:8f:2b:5f:1b:51:f4:57:f9:42:95:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:CB:F0:F7:8F:65:31:20:5E:9D:38:2E:4E:34:AC:8B:35:60:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.195.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:c4:4a:9a:80:36:d2:c1:1c:2d:60:2e:4c:88:78:eb:cc:36:
9b:0f:92:d3:3e:8f:6e:1d:a6:84:23:9c:2a:69:c2:a3:22:83:
3a:a7:2d:ce:fe:41:7c:74:29:6a:be:fc:f5:00:e1:b7:2c:26:
d6:a3:30:7a:4e:07:13:ea:76:15:64:30:1e:14:77:90:56:d6:
30:f3:56:4c:75:e7:47:95:cc:e2:b2:cd:b6:f2:79:e4:5c:53:
e7:80:8a:2f:16:b5:d2:f3:97:bb:3e:c9:f8:fe:f6:b7:2f:b3:
07:ee:1f:44:49:02:f8:d3:29:93:1a:d4:0a:58:36:4d:85:6e:
1a:71:30:58:55:30:2a:77:79:96:03:ac:cc:85:06:14:61:54:
e8:da:5d:d5:14:90:f4:79:08:b8:41:58:a7:0f:ad:b7:37:93:
d6:d2:61:a8:b0:d8:ae:93:da:9c:96:1e:88:aa:18:36:8f:f8:
16:f9:af:52:3d:db:db:96:d5:bb:ca:67:e1:cd:49:45:54:01:
1e:1c:07:55:af:31:a0:3f:66:63:90:5f:b4:94:da:d0:d2:7b:
9e:90:77:3e:16:e2:a8:8a:90:6e:c5:98:db:47:27:bf:02:25:
6e:31:59:aa:c1:62:cc:d4:80:45:df:f9:d1:41:3c:5c:4d:53:
f8:aa:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:04 2025 by rpki-client