Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3d4131f8-056d-3d85-aa50-dc87a891a73c.roa
File: 3d4131f8-056d-3d85-aa50-dc87a891a73c.roa (raw, json)
Hash identifier: j44m+y4k/5Vy7eKh5RCB9AX2WstYN75FeABjvZRQGrU=
Subject key identifier: 52:75:9A:A5:A0:DE:96:6D:09:5B:25:2A:9E:9D:68:A3:20:10:A1:65
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3AFACDFF4FDE868940C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3d4131f8-056d-3d85-aa50-dc87a891a73c.roa
Signing time: Mon 30 Dec 2024 18:10:36 +0000
ROA not before: Mon 30 Dec 2024 18:10:36 +0000
ROA not after: Sun 30 Mar 2025 17:10:36 +0000
asID: 32711
IP address blocks: 198.85.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3a:fa:cd:ff:4f:de:86:89:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:36 2024 GMT
Not After : Mar 30 17:10:36 2025 GMT
Subject: CN=98198997-c6f2-4c53-b9c5-21458cf098f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:a9:8a:61:d4:c5:69:54:25:c7:b5:f5:e0:
48:95:ef:6a:d4:b0:4f:09:35:77:f8:a1:6d:1b:c7:
63:aa:44:2d:2a:0a:2c:e3:8b:64:80:96:82:24:41:
39:3c:d8:6b:f2:96:dd:0f:10:0e:5e:ad:1d:1d:e1:
36:75:7d:f6:39:53:3c:d1:0a:1f:b7:c0:74:a8:e6:
5e:92:5d:f5:d3:2b:1b:95:81:de:f5:0f:f3:d5:d8:
70:b9:a2:2b:91:b3:8d:46:86:84:fb:1a:f0:32:ad:
ec:79:04:38:78:4b:e3:e1:ca:22:9b:82:8f:94:26:
d0:ad:28:db:8b:6a:66:1f:77:f6:b8:c8:f2:0f:31:
1c:e8:12:3b:03:85:af:26:42:d6:1f:58:34:ae:38:
ee:4c:5e:64:b1:a4:9d:d0:76:ed:59:86:81:b4:3f:
6f:6d:25:15:3d:e7:d5:e6:6c:48:e5:a6:28:02:44:
23:61:f4:e6:be:c6:79:aa:76:89:20:11:92:25:3d:
d6:39:5e:e7:6d:23:17:de:f3:9d:10:b7:d3:6e:df:
20:2e:19:d9:a9:f9:a3:d7:02:41:df:3a:1b:7c:c8:
1c:c1:9b:e6:d8:41:9a:69:4b:1a:16:95:b5:28:13:
47:7c:75:30:ba:ad:3e:4e:52:6d:21:a9:7b:1d:48:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:9A:A5:A0:DE:96:6D:09:5B:25:2A:9E:9D:68:A3:20:10:A1:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3d4131f8-056d-3d85-aa50-dc87a891a73c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:06:fd:77:e6:3b:df:e5:38:08:87:ee:c1:cf:09:d2:67:73:
63:10:39:3e:99:13:57:fa:95:f9:28:50:6b:fc:3d:35:91:82:
51:64:19:33:9a:fb:e2:e1:08:96:78:d8:44:d9:fb:4b:21:6b:
7e:64:46:6f:0e:a7:2e:1f:7b:fc:5d:68:30:ae:06:7a:3c:6b:
d9:5e:43:1e:a6:11:0b:76:f7:8d:8e:7c:4f:9d:24:40:0f:cb:
8b:9a:13:21:4b:f4:46:62:71:ca:58:51:84:ba:46:e3:fd:f0:
e9:28:9f:9e:75:8e:a5:25:9f:7b:7f:9a:06:9b:dc:31:be:0b:
0b:06:03:2e:92:5d:11:c0:15:10:c5:29:96:7e:31:9d:48:7e:
c0:07:6c:94:a1:a9:0e:18:da:ca:5c:24:93:13:8f:8d:b1:da:
57:61:03:67:34:b6:32:01:5e:92:ca:b4:4e:df:84:3e:fc:33:
e3:73:05:0c:22:fa:4d:c1:18:3f:80:b7:17:bf:ce:28:a1:a3:
01:1f:72:43:6b:9e:02:f6:08:72:e8:39:de:12:5a:ad:02:50:
85:d0:81:0e:7d:c9:92:d4:61:10:f4:54:5f:30:46:cf:56:45:
87:90:b3:0f:13:12:71:bd:eb:9a:fc:d8:5a:26:2f:37:57:e3:
d8:71:05:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhhfDr6zf9P3oaJQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzNloXDTI1MDMzMDE3MTAzNlowLzEtMCsGA1UEAxMk
OTgxOTg5OTctYzZmMi00YzUzLWI5YzUtMjE0NThjZjA5OGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhipimHUxWlUJce19eBIle9q1LBPCTV3+KFt
G8djqkQtKgos44tkgJaCJEE5PNhr8pbdDxAOXq0dHeE2dX32OVM80Qoft8B0qOZe
kl310ysblYHe9Q/z1dhwuaIrkbONRoaE+xrwMq3seQQ4eEvj4coim4KPlCbQrSjb
i2pmH3f2uMjyDzEc6BI7A4WvJkLWH1g0rjjuTF5ksaSd0HbtWYaBtD9vbSUVPefV
5mxI5aYoAkQjYfTmvsZ5qnaJIBGSJT3WOV7nbSMX3vOdELfTbt8gLhnZqfmj1wJB
3zobfMgcwZvm2EGaaUsaFpW1KBNHfHUwuq0+TlJtIal7HUiMYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJ1mqWg3pZtCVslKp6daKMgEKFlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2Q0MTMxZjgtMDU2ZC0z
ZDg1LWFhNTAtZGM4N2E4OTFhNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIG/XfmO9/lOAiH7sHPCdJnc2MQOT6ZE1f6lfkoUGv8PTWRglFkGTOa
++LhCJZ42ETZ+0sha35kRm8Opy4fe/xdaDCuBno8a9leQx6mEQt2942OfE+dJEAP
y4uaEyFL9EZiccpYUYS6RuP98Okon551jqUln3t/mgab3DG+CwsGAy6SXRHAFRDF
KZZ+MZ1IfsAHbJShqQ4Y2spcJJMTj42x2ldhA2c0tjIBXpLKtE7fhD78M+NzBQwi
+k3BGD+Atxe/ziihowEfckNrngL2CHLoOd4SWq0CUIXQgQ59yZLUYRD0VF8wRs9W
RYeQsw8TEnG965r82FomLzdX49hxBV4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:44 2025 by rpki-client