Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa
File: d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa (raw, json)
Hash identifier: SOnbF+xkxRpymE8SjOEdP8gsUwWlmvBi0PAqaQTwZ58=
Subject key identifier: 5D:1C:0D:DE:15:DA:45:AB:E5:BD:F7:FE:A0:F3:74:99:EC:68:DF:6A
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F4328584863CB08EA7C74072DFC7AFD40
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 2495
IP address blocks: 198.248.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:08:ea:7c:74:07:2d:fc:7a:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=4a441bfd-17b7-4297-8e77-4d5174b0345b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:af:1e:c6:8b:ec:db:9d:61:f0:63:3c:50:
b2:63:b4:55:2c:81:29:91:a2:f7:5a:10:02:c2:ba:
cd:40:a4:ee:ba:4d:37:d6:27:b7:78:22:cc:b9:fb:
74:e2:23:33:e7:b5:ea:c5:0f:36:3d:c4:62:05:16:
69:2d:80:af:42:82:54:4a:3c:b2:27:c7:86:ee:2f:
04:b2:92:70:7c:11:d8:69:59:d6:81:50:1e:77:27:
93:ca:ab:3f:64:a0:38:0a:98:09:12:97:99:9a:27:
75:c7:46:7e:5b:c4:a3:f0:21:6b:55:27:b7:50:f5:
d4:98:1f:24:f3:26:8f:e6:df:f9:44:69:00:22:aa:
cc:f7:d1:7a:54:b8:71:59:49:fc:8e:da:fd:66:f1:
0c:ab:cb:6b:9c:49:0e:0d:c4:e4:8a:b6:d7:c8:cd:
32:44:0a:f1:90:48:ea:ac:f8:2c:48:cf:50:7f:21:
a0:55:51:b4:67:98:17:e2:ab:c1:21:2a:06:f8:c7:
39:56:39:b3:23:fc:b6:42:23:47:14:7f:59:2f:39:
18:68:c7:d3:a1:c8:4d:ba:8d:1b:3d:55:84:92:0a:
48:b7:86:5d:1e:60:8a:53:a6:81:da:1e:28:45:c9:
79:f0:b5:83:b5:fb:0b:e6:04:0b:86:96:ed:ec:2f:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:0D:DE:15:DA:45:AB:E5:BD:F7:FE:A0:F3:74:99:EC:68:DF:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d6b63973-e180-321f-a02b-4fe3aa4e6b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1e:c4:19:22:c3:f0:85:0a:4d:69:b6:83:33:76:53:71:b7:
11:2d:4c:54:28:eb:1a:39:d6:0b:ce:82:60:36:47:02:06:d1:
41:23:67:20:2c:84:00:fa:c9:69:02:70:00:2e:90:ab:f9:e5:
12:52:63:f7:13:84:ff:4c:00:47:87:6e:dd:c6:d7:cc:07:53:
08:b4:27:f6:36:88:82:dc:e9:61:e3:b2:5d:76:e5:2b:49:40:
fb:05:38:e9:c3:59:b5:63:8a:19:6a:59:78:25:7d:da:98:b4:
8a:96:d4:50:a9:39:e5:8a:ae:80:fd:0e:97:32:e8:a7:2c:d3:
96:08:87:00:fd:88:17:bb:fe:5c:18:81:63:46:3b:12:49:15:
40:52:0f:07:2f:52:7d:10:c7:70:47:d5:59:8c:23:f4:11:5d:
59:9f:b9:a5:b3:20:03:0e:fe:69:20:77:6a:30:c0:60:51:66:
fc:21:91:bc:03:3f:eb:e4:81:b9:15:36:a8:d4:94:6f:dd:f5:
db:98:fa:22:17:3a:d9:c0:20:64:93:5d:95:3d:2c:67:9f:41:
6c:2c:3d:4b:21:6e:c0:b8:15:0f:73:07:87:60:b2:0f:41:e7:
ab:0c:46:2c:8c:bb:4f:37:7e:87:7f:67:6d:84:bb:5c:ba:c5:
9d:c3:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:47 2025 by rpki-client