Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7d21aedc-1ce5-3a3b-849c-a8951552e49a.roa
File: 7d21aedc-1ce5-3a3b-849c-a8951552e49a.roa (raw, json)
Hash identifier: oVodzFrjFWp+OPIXq1wd+S+ywjXlT85orIQctNK/1kQ=
Subject key identifier: B7:A3:F5:1C:F2:75:26:98:04:12:12:48:9C:FD:14:8B:EB:F4:36:53
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3B917BA8ED088005B050
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7d21aedc-1ce5-3a3b-849c-a8951552e49a.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 81
IP address blocks: 198.86.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3b:91:7b:a8:ed:08:80:05:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=4ce449c7-5f52-4d27-b90d-c3a1e5f9e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:f0:bb:8c:21:bd:18:44:fc:df:ab:d7:f5:
da:3b:0e:a3:4a:e6:4d:dd:31:33:3a:16:4b:8c:a5:
bb:0b:5e:66:89:30:ba:05:ab:6c:56:55:23:7f:d7:
f2:7f:d7:c0:2b:1e:e6:43:e0:51:2a:2e:86:ca:04:
b0:9b:6e:e1:d6:be:a7:d6:41:23:a3:3f:d2:09:d0:
7e:22:5a:e5:0a:93:91:57:78:38:e5:ed:a3:4a:99:
4f:ca:c3:0c:4c:dd:37:0e:34:ec:17:1a:f9:38:a2:
bf:a5:94:fa:78:12:bf:3f:3c:40:64:17:aa:f3:b3:
d8:d6:c9:86:0a:f9:a6:54:e0:63:3b:6c:3e:b6:5c:
a0:15:a8:39:73:e6:c2:fd:ea:17:ec:27:8b:79:b9:
cc:9d:e3:b9:aa:37:bc:a3:58:3f:f2:c4:4e:51:ac:
6f:ad:1d:1a:36:6c:cb:c3:cf:18:5a:cf:3c:32:d6:
7b:43:47:1c:a4:3f:d2:fb:b1:7d:28:62:56:34:62:
d8:f7:51:33:85:b1:09:3b:fd:8f:d8:f0:0b:69:42:
88:29:7a:a5:8b:a5:4d:f4:9c:4e:4f:94:72:c3:16:
19:9e:7c:83:fe:8f:c0:6a:7e:78:0a:5c:d7:62:a9:
b4:7e:e1:63:16:08:44:e7:8b:3c:30:0d:8f:e6:03:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A3:F5:1C:F2:75:26:98:04:12:12:48:9C:FD:14:8B:EB:F4:36:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7d21aedc-1ce5-3a3b-849c-a8951552e49a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:84:ac:5a:a0:f9:fb:74:47:ac:9b:0c:2b:52:cb:13:93:85:
47:6e:26:9f:df:17:d0:77:85:94:70:22:b5:d0:f3:0c:d0:fc:
46:02:72:30:46:9f:51:4a:69:fa:47:dc:56:5a:ee:29:6f:2b:
7b:bc:80:36:fb:f3:8e:2b:15:e4:69:ed:c7:10:d6:2d:c8:95:
95:6d:08:07:4e:aa:ba:5e:0c:76:db:ab:8a:09:1d:70:a3:bc:
3b:18:e6:f4:2c:b3:07:eb:98:cf:f0:37:ab:c0:cd:91:2a:9b:
c2:a4:bc:4a:43:5c:38:35:84:2d:1d:64:f4:1a:55:e7:74:3b:
bb:8a:f6:86:e2:91:24:b6:ab:99:64:f4:87:cf:12:57:65:72:
5e:b1:eb:74:96:3b:5f:d5:c0:83:51:83:62:ad:2b:47:eb:7b:
8f:f5:53:42:63:c6:27:e3:14:62:44:24:d7:fe:af:e8:7f:89:
ff:e3:39:34:23:4c:3f:9a:d8:f5:20:2c:66:d0:82:b0:9b:a2:
4f:6c:f4:36:e2:5b:5b:1e:0a:98:64:94:59:8b:15:54:e3:19:
f7:b4:d1:ad:91:79:d4:5a:27:e2:6e:4f:9a:da:d2:55:c8:94:
73:49:ee:86:a7:e9:2b:20:25:bb:6b:fc:c8:f1:3c:2c:62:f7:
a5:fe:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:06 2025 by rpki-client