Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa
File: 7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa (raw, json)
Hash identifier: ujXaNy3+WE2GvFvzQAD4wkxb217+fDMu10yh2OFTs3Q=
Subject key identifier: 9C:29:EC:48:A5:71:07:C4:E0:5F:DC:5A:48:90:E0:3D:D6:D9:E2:96
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C311B81B5C9C1E0C71330
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 198.86.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:1b:81:b5:c9:c1:e0:c7:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=3cd82c0a-4609-47ef-86cf-2a76899dbf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:d9:13:e4:ab:0a:40:fa:83:53:3e:2a:de:
4c:29:d3:92:10:47:f3:8e:11:0d:42:12:c6:27:53:
34:bd:2a:f4:1c:4b:e0:6a:d2:4a:6c:1d:73:33:b3:
27:2a:82:0a:80:ec:ae:bf:a3:85:58:f6:77:24:94:
07:e7:7e:64:3c:fb:66:cc:9c:23:1a:71:e9:0e:3a:
89:fd:63:0e:0b:a0:0c:83:8c:d8:be:cd:07:4d:18:
29:f6:c0:a3:a0:44:df:38:01:ba:2b:5f:7e:ec:77:
ce:86:d4:2d:fc:a9:0c:0d:d5:99:08:29:4d:31:4c:
47:96:11:60:47:96:09:3c:54:0d:ea:a3:5a:5a:0f:
30:57:e0:8f:37:3a:a7:c7:14:0a:d1:e2:f2:a9:06:
f0:e8:77:59:45:ad:72:27:9f:74:8c:29:a1:5b:7c:
53:36:22:64:f3:40:b8:77:7b:bb:49:64:db:27:f6:
f2:60:3c:c2:f5:2a:31:88:91:da:be:f2:ba:0b:ed:
96:c2:54:9c:64:62:01:db:e8:37:8c:34:4e:f5:08:
91:ef:3c:d0:f5:5b:6f:c3:2d:13:ed:55:a2:d0:c2:
fc:04:6a:ab:f8:1e:37:0d:23:7a:e4:63:d4:5f:c3:
8a:7a:14:40:5e:d9:23:d9:84:36:ce:1d:a4:22:10:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:EC:48:A5:71:07:C4:E0:5F:DC:5A:48:90:E0:3D:D6:D9:E2:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cea6eee-9d29-3f6a-a8cd-594c7f054961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:7b:bb:e4:ea:c0:2a:51:56:64:08:08:a7:aa:9d:02:c8:87:
50:c1:57:11:0b:da:1f:6e:51:3f:15:94:bb:39:81:ab:37:b1:
7f:a0:89:cd:fc:32:fe:89:c2:b0:3f:b8:44:e3:4a:bd:01:79:
d8:b0:c5:0a:eb:48:69:40:6f:64:b3:69:05:1b:98:22:b0:44:
f7:57:7c:0f:70:64:07:15:48:f4:6a:43:c0:84:48:a7:5c:f2:
fd:a7:12:92:73:e3:e9:8d:f6:dd:86:d2:0b:10:6e:b4:81:99:
12:63:12:da:02:3f:e1:0c:95:9b:7d:d6:43:43:b6:d7:82:55:
01:3e:72:c2:a7:a9:73:f9:dc:cf:42:04:a4:b0:cc:82:68:b3:
81:93:f4:e3:9d:93:ed:c1:63:ba:3d:cb:ab:e1:08:45:9e:ee:
8b:2f:4f:4e:41:cf:0e:50:dc:22:26:33:25:db:f6:bd:ac:22:
79:9d:9c:2f:5f:31:75:cf:da:5a:b1:a2:aa:58:a4:bf:b3:2b:
c4:25:23:11:e6:cb:1e:b3:03:6d:ba:77:52:22:5e:e3:65:1d:
63:aa:a6:1c:4c:5b:f7:00:f1:20:ef:b0:cc:46:9e:40:85:96:
16:8c:1f:ab:e0:2d:56:21:67:2d:a4:db:0f:ff:56:54:58:de:
e6:03:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:20 2025 by rpki-client