Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21e688b6-2a04-378e-bad3-44d4590c55d6.roa
File: 21e688b6-2a04-378e-bad3-44d4590c55d6.roa (raw, json)
Hash identifier: 3wTmSvgRlacEQ30RcFFzi9PiJGaBeS9TpmimVZzOdMY=
Subject key identifier: 86:A8:17:05:B5:11:D2:84:3B:1F:9A:E5:EC:97:51:1C:46:B3:47:F6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E88D99585532DD10DBDB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21e688b6-2a04-378e-bad3-44d4590c55d6.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 198.86.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:88:d9:95:85:53:2d:d1:0d:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=753db0df-1f98-4775-94fd-80dbcedc6f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:1f:63:60:c6:b0:af:a8:9a:ab:a5:dc:bc:
86:78:59:11:4d:c5:37:bb:21:b7:86:d8:01:2d:f5:
c7:db:b9:76:e6:6a:0c:49:b6:94:45:6d:71:e4:f3:
30:6d:11:ab:e8:dd:1a:d0:9a:be:57:4f:e5:9a:b6:
c2:5e:8c:54:db:e4:a5:45:64:8c:d0:9b:02:72:87:
f8:02:52:02:54:08:c7:36:48:98:c7:ec:e8:04:cb:
6f:be:01:86:8d:a8:13:3a:86:dd:ff:c2:3e:2f:4e:
47:0d:0e:fd:86:7c:9f:fa:81:2b:71:47:c7:da:94:
c0:cf:63:00:ce:f2:88:a9:4d:d5:c5:0e:4e:6e:1c:
dd:ce:dc:c0:b0:50:85:54:cb:61:c8:9f:35:6c:35:
9d:81:fb:98:f6:32:6e:c3:2c:0c:b2:18:ab:a0:cc:
95:2d:79:66:a6:5c:99:f5:cc:1c:9c:eb:23:42:2a:
d4:fa:cd:e8:db:82:47:b4:74:93:38:81:05:83:bc:
a5:2c:54:7d:ed:cd:9c:ff:82:cb:7b:6f:b2:f4:13:
63:6f:02:f8:39:c6:1b:b2:6e:5c:c5:be:0d:9c:cb:
16:83:3a:67:1b:b2:e5:fa:a2:75:22:af:39:ef:09:
dd:93:58:41:9c:91:4a:ef:56:53:d3:71:bd:07:e0:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:17:05:B5:11:D2:84:3B:1F:9A:E5:EC:97:51:1C:46:B3:47:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/21e688b6-2a04-378e-bad3-44d4590c55d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:cf:d8:6d:43:a6:88:0a:00:6d:0a:de:b4:80:cf:75:cc:30:
2e:6e:2d:f5:b1:c6:7b:15:32:66:2a:a6:07:b1:d3:75:68:3b:
d1:0f:40:6d:f1:97:1e:c2:82:59:90:52:ad:e2:6a:14:38:80:
b1:a3:62:87:06:2a:1e:85:5d:f7:ef:1d:3e:54:9d:72:b0:ad:
3f:22:25:ff:fe:e3:3c:9b:91:a9:2a:8b:f4:ad:69:c9:3b:a4:
78:e6:a5:c3:eb:94:f7:be:90:6e:43:56:35:db:ff:64:5a:4f:
3a:39:d6:f5:63:18:0e:ca:5c:88:77:98:f2:16:5f:8e:63:1d:
dc:1d:a0:9e:59:35:45:a6:55:2f:db:59:6f:3a:1f:b6:2f:49:
65:9c:b3:7c:e3:35:9c:b6:b7:23:01:e4:31:70:6e:48:11:75:
b9:74:8e:c6:76:81:42:b3:33:ce:0d:ae:45:cf:51:43:04:cf:
ee:00:02:87:fd:05:6d:30:2a:55:41:1c:69:ca:3c:d1:17:b7:
38:5a:35:e8:76:23:b4:c5:8c:59:6f:ad:bd:69:3f:45:51:92:
8e:27:17:f5:e4:75:cb:e1:a3:e4:b9:99:2f:23:d5:d7:69:c5:
95:40:e8:76:89:f6:3c:6a:7b:d6:ab:5e:04:25:55:42:9d:e3:
11:2d:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:14 2025 by rpki-client