Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa
File: 80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa (raw, json)
Hash identifier: +TXI/IO3Rd6z4HTOeNeqXz2xz5lYmuNqpj+gEWa/TeM=
Subject key identifier: 10:A3:64:60:72:50:09:23:3F:AF:A3:16:0A:1F:A4:71:20:F2:89:51
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3AE5A45A8B5268F99F50
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa
Signing time: Mon 30 Dec 2024 18:10:36 +0000
ROA not before: Mon 30 Dec 2024 18:10:36 +0000
ROA not after: Sun 30 Mar 2025 17:10:36 +0000
asID: 394165
IP address blocks: 198.85.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3a:e5:a4:5a:8b:52:68:f9:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:36 2024 GMT
Not After : Mar 30 17:10:36 2025 GMT
Subject: CN=ad377482-a9a8-4b02-8f7c-4c8faadcc9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:e7:db:ce:79:9a:87:88:6c:8f:fe:1a:fe:
30:81:79:de:d0:6e:e0:34:89:f0:ad:06:75:8d:7d:
ad:87:2d:ec:86:cf:a8:f0:ec:e7:a0:aa:6f:09:4b:
21:4d:7b:a7:91:5d:35:d3:ec:16:f0:d2:2d:c9:b2:
df:7c:d0:a5:28:0e:d4:29:7d:55:bf:18:da:78:39:
fd:e7:83:cb:b5:07:b2:12:cd:71:e2:ff:23:02:c2:
4b:ec:59:17:60:73:5f:2f:31:c3:fc:2b:59:1d:75:
83:f3:b4:7e:43:ab:4c:9a:0e:12:82:80:bb:07:e4:
8e:a5:79:c9:9d:32:7f:80:ad:b1:9e:81:70:ae:58:
21:e4:31:d4:8e:0d:87:fb:67:b7:c3:3d:d4:3a:43:
61:af:ed:40:c1:f2:59:ad:23:47:0d:1f:d0:2a:7f:
8c:e0:57:60:fb:58:d9:14:31:51:3b:0a:f7:0d:60:
3b:cb:d3:f1:50:29:18:3d:5b:46:f5:3f:98:d6:cf:
99:4d:b4:ee:30:dd:d0:6e:44:96:de:7d:fc:95:e8:
a7:e3:6a:5b:e2:b7:32:0f:7d:9f:56:25:f3:99:bb:
a1:ad:68:06:e8:bd:4d:ae:f6:84:7c:61:5b:2b:eb:
6a:4b:d7:f2:78:24:c3:1b:5f:b1:51:3f:78:1a:dc:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:64:60:72:50:09:23:3F:AF:A3:16:0A:1F:A4:71:20:F2:89:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d8:db:e4:c8:10:ca:5d:aa:d8:ca:a2:45:a7:6d:f4:69:28:
b4:be:71:e0:08:9a:8d:11:95:4e:3e:bd:3a:76:6c:09:07:83:
f7:43:bf:ce:e7:08:5d:83:e5:54:0a:c1:a7:a5:4d:27:8d:21:
a4:70:d9:f1:fa:ad:9c:db:9c:d9:b8:e3:ae:00:e8:c4:58:54:
18:cc:4e:d7:7a:9c:d6:b1:cb:8e:c4:ef:ce:0a:9d:47:96:83:
df:5f:8a:bd:ae:d2:aa:a3:c2:34:aa:5e:f0:2f:af:ef:0e:90:
83:77:15:00:d5:d4:f0:f9:e3:5c:56:27:f8:33:13:e4:5f:8d:
0b:5d:79:5e:26:5b:f7:50:b3:f4:4f:94:24:76:83:35:6e:ca:
03:f7:2c:f8:61:59:2d:23:4f:eb:2a:d8:5d:7f:de:dd:f1:17:
8d:82:04:19:9f:3e:49:7f:57:d8:0d:1a:aa:62:13:94:bf:39:
f0:56:30:a1:c7:05:c7:73:c8:12:ed:6a:ac:f4:f6:f2:ab:3f:
cf:db:1b:9e:25:13:f0:50:bb:4d:d2:28:c7:68:09:e2:1d:51:
89:5f:7c:64:1e:4e:93:bd:07:a7:78:43:1a:49:fc:85:f8:d3:
4c:7c:74:48:b9:9c:8f:c2:91:e1:a3:5e:63:c5:4e:15:27:cc:
ce:62:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:57 2025 by rpki-client