Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ec9d5c6c-edda-3e08-945e-5f8d85c01ea3.roa
File: ec9d5c6c-edda-3e08-945e-5f8d85c01ea3.roa (raw, json)
Hash identifier: puul0lZXWzf1rmFOLauTJHZF/BQd1A/fOVXBF3ahr+o=
Subject key identifier: 42:80:6D:F2:78:30:57:83:1B:6A:68:AF:45:97:28:4D:47:5C:66:BC
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3106EB4724C6D4E2E680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ec9d5c6c-edda-3e08-945e-5f8d85c01ea3.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 198.85.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:06:eb:47:24:c6:d4:e2:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=c54f5aa3-00d0-4ce0-a2c0-fe35d2cb1e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:3c:08:06:60:68:5a:d6:00:a3:b5:eb:76:
32:81:49:18:32:1c:cd:5e:3a:84:eb:27:ed:d3:06:
09:34:b7:ee:bb:20:7d:31:92:9b:14:6e:f1:59:48:
f4:27:28:08:2a:71:6c:72:1b:fe:4e:87:bd:b1:b1:
fb:2d:e3:4f:c9:5e:a5:12:60:d8:61:56:f1:3c:fd:
7a:d9:d7:02:3a:17:1d:03:da:6d:6d:e0:c2:7b:60:
60:c9:45:0e:0d:51:77:2f:98:72:b7:82:1b:59:68:
fe:ab:f5:b0:17:01:a9:83:1b:f1:23:93:ef:55:74:
60:95:47:d9:bc:f1:4a:82:64:23:13:7e:b1:1d:6e:
8e:75:e9:f2:69:d3:6c:3f:45:89:3f:28:c3:3c:a2:
0e:d3:6b:f5:a6:a5:b0:ce:10:1c:f3:b7:9e:a2:4c:
6d:44:51:50:ae:a5:1f:cf:5c:83:db:da:5c:c6:9f:
26:35:db:a2:c8:e0:48:cd:9e:e3:3c:ea:34:18:81:
3f:6b:d8:e0:f1:1f:51:15:57:b5:be:54:b1:bc:92:
c5:e8:e2:40:73:74:8d:e0:cd:58:44:cf:30:9a:f5:
6a:8e:a3:6b:5c:d1:56:fd:ae:e1:9e:8f:3b:cf:f8:
39:6f:70:53:6d:00:41:0c:74:64:1c:5f:87:b6:0d:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:6D:F2:78:30:57:83:1B:6A:68:AF:45:97:28:4D:47:5C:66:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ec9d5c6c-edda-3e08-945e-5f8d85c01ea3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:bf:34:b0:d2:0d:6b:f0:2e:02:08:3e:c2:8d:a8:fd:73:63:
11:8a:f0:6d:6b:74:3d:d2:af:aa:d7:dc:25:d0:32:6a:bd:57:
1f:a1:fe:a2:dc:23:49:27:cc:49:81:85:98:d1:fd:73:f3:f1:
50:e4:91:1b:d6:fe:28:15:8d:de:76:26:da:3e:19:64:60:14:
f5:5b:cb:fd:93:b0:07:7c:72:9c:60:b5:1f:e5:e1:e5:be:89:
82:0a:37:7b:4f:64:0a:2d:d1:0e:d1:62:0c:97:07:1d:bb:68:
b4:f4:53:fd:90:b4:c0:93:bb:1a:92:6e:e1:f6:cf:e4:39:19:
9a:2d:a9:2b:0d:97:92:d2:d7:e4:44:61:02:be:c3:1d:dd:2a:
23:ac:27:46:6a:b6:45:d5:bb:a1:e1:6b:04:f4:46:67:5b:72:
78:c0:eb:4d:e3:5f:80:78:2c:c2:16:65:aa:b7:ca:06:52:f9:
74:06:80:8c:c8:65:cc:72:5f:f6:00:ec:bb:0b:6e:2a:b8:73:
e8:9f:02:d9:94:48:70:ae:61:38:20:bd:92:49:5f:87:6a:e5:
b9:de:c8:76:05:ae:d6:33:4b:18:05:35:86:94:95:a1:fd:5d:
af:d4:ab:38:95:18:f2:a0:d2:40:80:f1:76:40:11:36:31:ca:
c1:5e:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:51 2025 by rpki-client