Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
File: 8bc8180d-ca82-3197-a1df-9a917b8db27b.roa (raw, json)
Hash identifier: ShW5SAFXnxmOh9j4pi37pEEb8ph+fpKgiv80mkP0ID8=
Subject key identifier: FF:CC:31:3A:1D:1A:6E:A2:A6:62:B4:1A:F9:03:F7:30:7A:9F:60:77
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F43285849446934A3D247F033B4FBA580
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 2495
IP address blocks: 198.248.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:34:a3:d2:47:f0:33:b4:fb:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=324a26f1-461a-4af1-a7f7-d848339b848c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:b3:25:07:d7:56:b5:aa:31:98:7e:64:20:
10:19:e7:7a:28:11:d1:5d:17:f4:4e:42:41:95:45:
dd:67:cc:4b:8f:03:c3:87:e3:da:a3:1b:7b:d2:fb:
59:ed:cf:1d:23:04:d6:d1:25:8f:4b:01:37:e2:92:
7b:1d:0a:9a:09:02:0b:db:c1:e6:44:ae:1f:e4:d4:
8f:45:d4:9f:58:98:1a:8a:91:e2:11:3d:af:f1:f3:
41:46:25:5b:ea:2d:7a:00:14:72:51:4a:ed:cc:0f:
35:27:08:a7:64:0a:c4:7b:d2:7f:5f:0a:07:10:8a:
50:f6:44:f7:f5:17:a4:7e:5b:39:14:24:64:96:c8:
bf:bf:9c:44:fc:75:02:b3:39:29:77:78:9e:e0:73:
19:c8:34:b9:cf:13:c0:b2:34:5e:18:b0:bf:0c:01:
b5:1e:c8:d4:97:89:19:ec:15:9c:9f:33:2b:7b:7b:
c3:58:d6:97:87:48:37:c1:68:96:c9:fa:0c:35:c9:
e9:7d:38:ed:19:69:a2:b2:fd:be:22:9f:bd:70:1b:
16:f1:ed:c5:c5:12:6b:80:07:3a:f9:ba:96:2c:d2:
66:2d:3b:ab:1e:25:d1:65:a1:fc:62:f1:50:ae:69:
05:f3:46:6c:bb:2c:61:84:01:df:64:3a:5e:aa:cd:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:31:3A:1D:1A:6E:A2:A6:62:B4:1A:F9:03:F7:30:7A:9F:60:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8bc8180d-ca82-3197-a1df-9a917b8db27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:b1:27:fb:a1:1e:04:ec:a2:72:bd:c9:22:68:0b:f7:59:28:
a7:97:ad:51:eb:3a:f5:38:9c:27:d9:93:08:81:cf:99:f8:7c:
4d:7d:c4:71:de:27:08:19:d3:8c:83:1c:e0:59:d6:54:e4:b2:
18:e6:84:0b:02:bf:16:40:0d:ba:d7:1c:90:dc:93:7f:b7:5a:
61:f8:d9:6e:cf:a5:28:fe:d3:b9:61:3c:43:f1:51:44:f8:9e:
a4:76:e0:66:28:a3:e8:5e:27:82:84:56:7e:31:36:f4:d8:db:
f1:1b:86:df:35:b7:b8:78:4b:4d:05:b4:d2:9c:84:e1:d2:7b:
68:50:d4:7f:ec:54:a9:69:75:71:e1:bc:69:30:1f:66:1c:fb:
1e:91:38:f8:43:f9:3f:7d:58:d0:cd:5c:df:00:6a:d0:9e:c8:
6c:dd:23:ac:f0:99:ec:ba:23:c3:2a:c1:bd:1e:74:b9:3d:3a:
dc:8f:1e:f1:94:8a:e0:21:14:d7:f8:eb:55:c9:a9:39:9a:58:
0b:24:ef:18:f6:25:72:20:38:d3:d3:3f:2d:cd:ba:c6:77:e8:
7f:c5:d3:c0:14:36:5d:11:41:76:d6:43:6a:94:83:1c:70:3e:
b5:24:67:8e:d8:ff:67:14:b8:2c:4e:b3:70:09:e6:52:67:bf:
a9:16:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:09 2025 by rpki-client