Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa
File: 80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa (raw, json)
Hash identifier: RA7rDGYBlSBq0SCz7KONKx7rdvUejEJ8r9HEn4phpzg=
Subject key identifier: 97:F8:CA:56:6D:0D:3D:E6:C7:D2:18:48:D1:6F:4B:21:E6:EA:05:85
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E881D847FE734197E5B80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 394165
IP address blocks: 198.85.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:88:1d:84:7f:e7:34:19:7e:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=0f55ec1c-ec28-415d-bf8a-f09765b64b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:08:a4:00:b1:01:ff:7e:68:89:b5:99:2c:
a8:3c:e8:a2:f9:6e:ef:bf:6b:21:9b:ff:46:75:00:
59:97:56:3c:ba:15:de:2e:89:34:36:ab:27:ac:b8:
97:87:e7:43:d2:a4:a2:c2:6c:eb:43:31:c7:d0:38:
24:45:8d:2e:6f:c2:e4:7d:ff:8c:ca:65:3b:16:b2:
83:8c:93:9e:a7:01:9e:c9:fb:48:c2:6b:4a:1b:30:
27:27:c0:db:de:cc:74:53:3c:5a:78:f6:93:5c:83:
ea:0f:d9:3c:e2:b2:13:3d:ef:c3:6e:09:66:48:cd:
6b:79:47:b4:61:02:3b:84:03:cf:a8:b4:cf:08:80:
42:dd:ea:6c:6c:67:de:2d:25:95:52:23:11:8f:8c:
6e:6a:51:f5:81:b7:c1:35:47:61:ab:40:98:6d:72:
a3:18:7b:eb:24:cf:82:cf:70:d3:48:43:a5:63:d0:
77:59:4c:f4:2e:f4:9d:d3:b5:dd:f1:78:da:9f:7a:
67:75:0e:0f:20:fa:c0:5d:81:1e:85:d6:d4:7a:6d:
e0:07:90:78:80:ad:1e:46:5c:4b:db:3c:f9:99:03:
19:5f:a2:e7:41:1a:2c:5e:d1:13:dc:ac:34:6d:77:
a1:f9:ae:31:fa:b2:f7:a5:70:11:ce:1c:b0:0d:63:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:CA:56:6D:0D:3D:E6:C7:D2:18:48:D1:6F:4B:21:E6:EA:05:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/80cc90c6-0f46-3ad7-a1ac-c8cd8af1bbcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:7d:20:35:7b:94:8c:dd:9e:15:12:cf:73:f8:1b:e3:a8:8e:
2a:ac:a7:71:d9:01:26:0f:2a:83:80:df:26:bb:45:84:a4:05:
bc:4a:0b:a4:a4:04:d8:fa:95:b5:a8:1b:b3:21:9c:98:d2:6f:
2d:83:7d:3c:d3:df:94:46:56:74:c8:bd:fe:88:b5:b4:d1:55:
ec:ff:91:90:f3:b4:17:f5:05:32:0f:74:41:6a:bd:1b:04:28:
58:cd:5c:14:e7:4f:80:b2:55:5c:a0:f6:4a:94:5c:ac:11:55:
f9:51:0b:d1:20:68:58:c0:26:cb:2c:e6:ab:06:c4:6f:42:b5:
f2:ef:5b:e2:2d:06:87:04:c9:ec:63:0e:05:93:1b:76:43:58:
b3:6a:ed:a4:e5:9e:8b:25:81:da:43:e7:24:0d:ae:08:6d:61:
fe:36:77:aa:b5:dc:f4:be:15:ee:01:40:bc:3d:1c:6a:b8:38:
c8:4e:37:aa:bd:d0:a8:01:24:e8:33:36:b8:a5:70:0d:ac:a6:
88:8e:cf:70:ae:0d:72:e3:16:01:9d:4e:8c:b2:89:b0:f1:61:
0e:0f:d9:75:55:52:2f:9a:48:65:a8:f9:a3:32:66:c8:bc:18:
8d:a7:8f:3a:7f:2d:bb:39:d4:46:3a:2c:d6:4a:e8:04:68:36:
f3:9c:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:10 2025 by rpki-client