Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/66190d0b-1161-3162-afb9-b1671e0435a2.roa
File: 66190d0b-1161-3162-afb9-b1671e0435a2.roa (raw, json)
Hash identifier: 8MiLq89u5O4wzibqSXjrDeVqMRhlBp00FKQJByLv20s=
Subject key identifier: 23:EB:B4:1D:09:44:95:A2:78:E8:51:F5:42:EA:A5:6C:B1:E9:1E:A0
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E880D35CB43D18E687DB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/66190d0b-1161-3162-afb9-b1671e0435a2.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 399050
IP address blocks: 198.85.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:88:0d:35:cb:43:d1:8e:68:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=677f412c-0473-4b30-9553-881aeb7acbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:58:3c:bd:e2:25:c6:74:86:a7:a5:bc:7c:
e9:35:ef:88:13:e3:04:3c:20:c6:af:78:c8:86:19:
b6:19:5a:11:53:8a:7a:73:8c:75:bc:dd:e7:be:0d:
88:b7:e1:6c:0f:bd:b7:76:74:f6:26:df:b0:dd:5c:
bd:a8:b0:5a:6e:44:6d:37:04:05:7d:56:75:14:11:
6a:2e:c2:7a:5a:f6:f8:f2:49:c3:58:d5:a0:56:97:
72:c0:5e:05:90:f1:8d:86:76:8f:56:3b:9a:5b:9c:
6d:00:92:c4:71:91:94:35:d1:16:08:ad:1a:b5:fd:
bc:85:9b:e1:39:de:81:6e:3b:49:a9:dd:1b:04:96:
74:d7:44:33:78:d8:04:b2:2e:f1:95:0e:d6:a3:cf:
19:13:a8:73:08:85:48:77:34:30:d5:8e:7e:c0:fe:
70:d7:61:ed:52:f6:88:66:8f:ca:b5:1a:f2:c9:e7:
c0:62:6c:5c:7c:a4:85:b6:2c:aa:be:65:79:64:7a:
4b:18:f0:83:b2:17:40:ed:a2:47:e9:1d:39:3c:eb:
ea:a9:24:fd:15:ca:a7:9f:4f:50:20:e8:75:88:2c:
3c:53:a8:96:a3:62:04:10:06:43:0f:48:2d:3d:d3:
dc:dc:d5:d5:39:01:35:f5:13:a3:09:f8:a5:15:4b:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:B4:1D:09:44:95:A2:78:E8:51:F5:42:EA:A5:6C:B1:E9:1E:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/66190d0b-1161-3162-afb9-b1671e0435a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:cb:24:5a:7b:d9:d9:02:a7:d5:27:ad:79:09:67:9b:50:26:
8c:a3:bb:b4:5c:40:53:34:65:c0:c1:a6:36:cf:db:05:25:14:
c1:fb:d1:53:09:9f:af:12:e3:bf:eb:6a:6f:72:5e:55:2b:dc:
db:2d:84:68:7e:5d:7f:e4:a9:8e:20:72:55:b7:b0:71:30:79:
e8:cf:04:e4:05:d2:2c:eb:5b:89:77:db:a6:d1:fa:9b:43:b8:
f8:cf:41:74:91:16:b2:b1:ae:43:1b:da:7a:28:3a:3e:8f:8f:
f6:af:0a:bf:7f:2f:40:79:55:17:68:d2:c9:c0:51:9e:f4:4e:
eb:56:cb:2a:ca:7f:af:df:4f:42:a5:98:94:1a:5c:55:37:4d:
58:bc:bc:f9:58:66:4a:fa:fb:6d:d2:f4:19:3c:56:37:ce:fc:
ba:9c:6b:35:9f:27:b7:ff:2b:90:5c:cc:34:61:6e:9a:2b:66:
07:92:34:1a:99:48:c8:45:58:1d:64:ab:39:25:62:4f:75:46:
43:42:74:d4:bb:3e:17:90:05:8f:cc:43:1c:94:15:90:40:a9:
1c:1c:16:4a:5f:15:2d:9b:88:d9:0c:5e:b2:aa:91:4a:57:33:
20:e5:4e:9d:07:c8:a1:a8:57:1b:43:5b:96:3a:f2:18:d1:c6:
b0:ed:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:11 2025 by rpki-client