Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
File: 8bc8180d-ca82-3197-a1df-9a917b8db27b.roa (raw, json)
Hash identifier: kUGDNxl5yTTM2hO95cdbakFvNihszKPNU7/ZwYW7xDc=
Subject key identifier: 03:D9:EE:F4:75:2D:84:FC:5D:1C:70:B9:84:CC:22:C6:C1:32:F9:16
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F4328584863CB0838B1741A772BF19980
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 2495
IP address blocks: 198.248.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:08:38:b1:74:1a:77:2b:f1:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=c8adab6c-0eb5-4c67-a484-8b27fe4e3dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:a1:76:12:12:1f:5a:02:c9:52:f8:fc:12:
a0:c7:30:da:d7:49:62:0d:21:93:c1:6b:0c:68:ec:
89:ea:1a:1e:e9:ad:a1:9a:be:db:c3:7f:1d:87:c0:
17:54:a4:57:e6:c8:a8:f6:dd:ab:36:03:4e:8d:92:
57:2a:c8:9a:47:50:0e:7c:4a:7b:1b:69:df:1e:c9:
5b:f6:76:9d:da:1d:e2:ff:8c:1a:95:99:3f:6c:a9:
13:8c:ae:65:fc:04:e7:6c:89:09:57:f9:72:e8:c7:
85:4d:6e:95:60:90:a0:34:b2:df:30:fb:aa:58:13:
0e:06:1f:df:7d:49:31:56:5c:9d:c9:9f:7c:41:fe:
b4:a7:8e:bb:c1:b0:16:26:12:ff:e6:b1:ae:0a:82:
aa:19:fa:66:07:4d:a6:6e:23:57:5d:8e:31:62:24:
c0:09:46:00:82:50:87:cf:c2:22:ef:dd:bf:5f:6e:
eb:1a:db:24:e5:bf:2c:90:97:43:5a:4b:1f:29:dc:
69:af:ef:e2:bc:9c:19:e4:bb:0c:63:8d:27:5d:e8:
40:db:f8:d4:b9:f3:9b:13:5b:01:4a:80:cf:1d:d0:
32:a3:2b:d0:93:c4:91:05:21:ff:38:c5:53:11:8b:
c6:61:3c:1f:83:95:63:44:1b:a0:e3:a8:f8:44:0d:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:EE:F4:75:2D:84:FC:5D:1C:70:B9:84:CC:22:C6:C1:32:F9:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:af:fd:71:9f:b7:bf:39:f2:1d:9b:63:78:95:fe:cd:ba:22:
8d:57:a2:c3:37:49:0d:18:af:36:b2:14:d7:52:f7:1e:7e:9b:
a1:b9:dc:7a:c6:27:c8:4c:76:91:6c:03:72:fe:a1:e5:36:f5:
60:67:34:75:a5:5c:25:ae:1a:d2:e0:03:e1:b4:7c:b4:ff:ed:
08:19:f3:c7:db:01:0d:b9:8e:e4:66:35:4b:0d:cf:be:33:92:
7a:b5:3d:af:ab:79:91:ee:e7:cd:84:24:ad:cc:5e:05:98:c8:
7b:4b:eb:ea:12:bf:bc:ad:7e:31:8b:0f:75:7d:83:12:48:d6:
5e:b1:b1:8b:e6:93:32:4b:af:ce:77:0b:5f:c7:9f:fd:f6:d7:
06:c5:43:84:95:6e:b3:f0:54:c8:11:73:b0:50:5e:b9:ea:6a:
a9:84:02:fa:a2:97:ef:06:b8:a6:90:9b:fa:67:c1:01:b7:8c:
5d:a2:fa:1a:30:91:d4:b3:e5:1f:c9:49:34:da:b7:77:42:1e:
bf:98:78:0a:4e:92:28:f9:e2:52:f8:d5:8f:e8:37:7a:9d:df:
19:d1:69:83:e5:c4:59:86:98:c6:7a:fd:27:61:a1:53:29:42:
3f:b7:c0:ab:56:ce:c4:e6:f9:8e:53:a7:94:6e:3a:b6:6b:75:
8c:72:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:14 2025 by rpki-client