Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fc4cafb4-b2b1-3a8f-9e68-c51fb8528dcb.roa
File: fc4cafb4-b2b1-3a8f-9e68-c51fb8528dcb.roa (raw, json)
Hash identifier: UhxlKrxpIFQg9U0nj8D6W+kzX2mCYd/J3EzCLZeONSA=
Subject key identifier: 3F:95:21:6B:9D:90:D6:46:91:FD:13:CA:64:DC:79:B7:64:3E:CD:9C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3B0FF441451618260C80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fc4cafb4-b2b1-3a8f-9e68-c51fb8528dcb.roa
Signing time: Mon 30 Dec 2024 18:10:36 +0000
ROA not before: Mon 30 Dec 2024 18:10:36 +0000
ROA not after: Sun 30 Mar 2025 17:10:36 +0000
asID: 36850
IP address blocks: 198.85.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3b:0f:f4:41:45:16:18:26:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:36 2024 GMT
Not After : Mar 30 17:10:36 2025 GMT
Subject: CN=2058adae-1c55-4845-abfc-42a2dd940b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:71:dd:be:ad:41:7d:e0:06:2e:a6:97:dd:
98:8b:ea:14:25:d2:7f:89:11:69:8e:93:d8:14:c8:
e1:02:c4:35:6d:91:3c:2a:72:d1:cb:8a:d0:20:c5:
65:4f:e9:f0:7d:ac:75:24:59:1f:a5:9c:ff:97:e9:
ea:36:6c:d4:48:8e:0b:67:da:92:ec:ab:66:68:7a:
f3:70:4c:d2:dc:22:d1:f1:5b:c4:50:88:de:80:52:
f1:ea:8c:79:e0:29:5a:16:80:ae:41:67:9a:a9:2d:
02:1a:5a:c6:cf:ec:e1:a4:8e:f5:01:ac:e2:c1:de:
ed:f4:67:a7:53:5e:d4:94:4f:b2:82:c6:6b:af:93:
67:4c:b9:1b:7f:86:d5:ab:85:e5:a3:e5:ab:4e:fc:
1d:0d:44:72:0f:81:d4:70:8a:3a:13:d6:ba:43:6a:
f0:b9:29:a1:eb:1d:fd:03:c0:57:5b:3d:a9:b2:49:
1f:b3:af:2d:bb:db:3e:cd:f9:ee:3c:18:9e:e0:5e:
91:27:cd:a6:2b:a2:3f:24:0c:32:34:9e:a3:62:c0:
9c:3f:24:4c:6f:6a:b5:3d:59:2a:bf:0d:cd:2f:ef:
4d:a3:c4:06:bd:2e:ed:a0:4c:ed:a5:f6:15:a3:34:
83:34:7b:65:ab:2f:60:2c:73:fd:cf:cb:95:11:b4:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:21:6B:9D:90:D6:46:91:FD:13:CA:64:DC:79:B7:64:3E:CD:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fc4cafb4-b2b1-3a8f-9e68-c51fb8528dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:68:9e:93:aa:a0:cf:76:a8:11:65:c2:70:4a:f9:c7:42:45:
9a:d5:3d:ba:d7:4c:26:48:7e:bc:3b:84:12:67:bc:f3:77:8a:
b0:b7:5f:a9:9d:d0:52:1e:02:62:36:8a:8e:f0:d4:bc:00:69:
ed:ee:15:4f:3a:99:57:26:36:b2:b4:bb:7e:e1:5b:fe:87:b5:
df:83:fd:35:64:3f:d8:d9:4a:c0:45:0c:b8:d5:cf:d6:60:3f:
9e:49:59:5c:a0:0d:b7:95:dc:6d:b1:98:02:6b:7c:10:ff:f2:
92:62:c2:2c:7d:4b:9e:cd:8e:39:45:de:38:8d:c3:aa:51:a8:
b3:26:28:ad:a3:10:93:04:72:07:5b:d3:93:6e:b0:70:3e:3c:
9f:ba:ba:71:08:15:3b:cc:2c:4a:4b:1e:8c:70:b7:bc:46:90:
40:1a:ef:8d:fa:8e:52:5b:86:11:64:b0:ed:41:c5:bc:7a:f9:
74:71:d7:86:c4:a2:a6:f2:74:2c:8d:8b:69:c7:f9:57:db:70:
fc:5d:56:94:19:f2:fe:2c:06:79:4f:5c:70:d2:82:a6:d0:85:
03:56:e9:38:2b:a3:99:40:74:d1:30:9d:25:90:96:31:64:16:
14:c0:b7:c0:1a:a4:56:89:21:1f:ab:c8:8b:0d:c1:39:fc:7f:
6c:cd:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:56:44 2025 by rpki-client