Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b43fe7f9-d26c-3095-8154-a2b4144c2d06.roa
File: b43fe7f9-d26c-3095-8154-a2b4144c2d06.roa (raw, json)
Hash identifier: onXCb3/m5rI+V+VZnVGR53wQdWFUx+6jm2Tt60zj0fY=
Subject key identifier: CF:07:95:F2:7B:4F:AF:72:02:6B:FF:C6:78:5E:46:8D:3A:A3:00:26
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3B7B45F74998F2954A40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b43fe7f9-d26c-3095-8154-a2b4144c2d06.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 81
IP address blocks: 198.86.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3b:7b:45:f7:49:98:f2:95:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=92806f12-9d99-4988-9e15-33e0f138cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:4c:61:2f:6f:9f:13:35:6c:5f:5d:ab:ff:
86:f3:87:5a:55:ca:ec:05:d1:82:b4:55:95:2e:57:
b6:9e:0b:e2:18:1f:5a:6e:97:0c:95:f1:08:cc:03:
4e:a1:77:c9:75:58:97:f8:bd:06:5b:f1:ea:22:9d:
48:a7:f6:d8:0a:11:1e:ae:90:4a:c5:bf:11:ad:8d:
23:d1:45:6f:04:1c:c7:9a:12:0f:27:1f:09:bf:2b:
d1:aa:57:66:15:bd:14:f3:00:d1:48:c2:13:a1:5a:
82:74:a2:c8:5d:07:af:aa:2c:56:59:8f:26:01:03:
e5:f8:41:0b:67:72:fd:44:59:a9:a2:23:9e:92:01:
3b:d7:7b:80:69:e5:40:bf:89:da:b3:89:24:c5:ac:
a0:f1:92:b2:a4:1b:32:4a:ad:3e:d3:ed:7a:41:59:
7a:32:9f:00:00:2a:7c:a4:11:05:0b:43:d2:92:d9:
0a:bc:57:3b:96:00:dc:d8:15:80:83:fe:21:f1:19:
e0:d7:62:2c:b6:05:8d:b1:5c:8e:ab:31:16:ce:0d:
f8:63:eb:b5:b6:00:ac:b9:2a:14:71:07:d4:d5:f2:
d0:56:1c:5d:3a:a5:2b:8a:d1:80:27:e7:c3:70:44:
d2:21:60:a2:30:12:ce:7b:55:92:ba:36:9a:72:80:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:95:F2:7B:4F:AF:72:02:6B:FF:C6:78:5E:46:8D:3A:A3:00:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b43fe7f9-d26c-3095-8154-a2b4144c2d06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:bb:04:e5:2a:7a:9a:3c:23:e5:80:8c:a4:e4:f8:cd:99:21:
7a:b8:94:78:e0:db:36:f8:13:94:ef:0b:fa:0b:00:02:ef:08:
78:e8:2c:d3:fd:8c:2f:5e:58:c2:29:c9:7e:9d:62:92:f1:7b:
4c:ee:11:af:8b:4d:85:2c:88:88:1f:0c:4a:89:46:db:7e:6b:
62:1d:7d:7d:fd:bb:ae:83:24:4a:25:a8:89:84:af:b8:0d:13:
6b:d0:a4:70:bd:a1:29:f7:44:3a:e8:3f:15:8b:d1:12:ec:06:
ea:00:f6:43:07:01:ad:d6:f2:53:4c:61:e8:a4:12:57:16:1d:
45:0b:62:8a:8d:53:54:1a:d6:38:5a:e9:23:cd:db:8f:c7:1d:
b1:29:37:70:13:79:43:62:65:b2:7b:1c:56:58:ec:a5:f9:0a:
27:2f:9f:f9:94:f8:52:2e:25:ec:08:74:cb:e2:0d:09:96:00:
6f:6d:06:53:c5:38:b8:00:04:0d:d3:b1:24:68:1b:73:5e:fa:
4c:c0:95:9f:00:e2:c9:9a:09:d2:71:da:c1:6d:fd:4f:fb:b4:
e6:e9:e0:2e:b9:36:1e:2c:2f:b4:11:fc:2f:87:75:0c:55:80:
db:91:13:9e:4c:5f:6a:46:4f:b3:7a:cc:48:6e:40:97:a4:30:
64:13:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:30 2025 by rpki-client