Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a43b88dd-9d56-3476-abb4-6009aa6cd8df.roa
File: a43b88dd-9d56-3476-abb4-6009aa6cd8df.roa (raw, json)
Hash identifier: MZWp9qEnVd7EpbRXP3rR6gXEtui3uUJF6xNundR8VFE=
Subject key identifier: CD:7B:C4:D9:CF:A0:8C:64:F2:B1:14:07:FE:3C:FF:19:37:4E:73:77
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E892FC8E07EA9FD5D13E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a43b88dd-9d56-3476-abb4-6009aa6cd8df.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 13371
IP address blocks: 198.86.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:89:2f:c8:e0:7e:a9:fd:5d:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=0b094e14-8e2f-44a0-a390-772a8b746b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:e4:25:b6:50:ed:b9:08:84:75:1d:48:b6:
66:6b:76:54:1e:15:78:b6:97:73:f1:21:94:95:ae:
df:58:2e:67:21:57:05:ec:74:40:b3:97:0c:67:68:
bb:13:0b:a8:a1:0c:fa:96:f0:42:3d:4f:15:df:9c:
52:8d:9e:ae:14:0f:e4:7a:59:00:c7:a5:ed:42:07:
ff:9f:a4:1a:ff:ae:6d:b4:14:dc:7c:67:34:0c:da:
6f:68:89:ef:aa:bd:74:6e:13:97:0c:11:c3:74:b0:
7c:5c:cd:8d:29:56:5f:f5:d9:09:a9:02:15:ca:7a:
da:ce:a8:c7:71:69:ae:1f:ca:2b:a6:57:5f:a8:28:
0a:ad:75:b8:79:c5:be:91:f6:5a:f5:7e:02:0c:22:
98:40:10:3f:88:b5:1f:c0:58:85:2e:0a:fe:17:77:
3b:f7:b3:29:b5:d5:2e:6b:5c:ce:68:20:6b:8c:cf:
ac:12:e3:fe:58:a6:c7:09:1a:27:eb:35:e3:64:b7:
4f:10:23:be:d5:ca:86:a8:e6:15:b2:c4:b9:96:cc:
a4:7a:98:c4:16:06:86:34:dc:20:94:94:f6:02:57:
d8:f4:c5:04:d1:19:02:e3:fb:dc:27:15:44:78:93:
82:14:f3:ca:6b:cc:d2:70:b2:a6:9c:16:92:06:bb:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7B:C4:D9:CF:A0:8C:64:F2:B1:14:07:FE:3C:FF:19:37:4E:73:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a43b88dd-9d56-3476-abb4-6009aa6cd8df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:46:01:dd:58:fa:11:7a:24:d7:3c:c3:04:15:ae:44:02:6e:
ae:5a:72:14:0a:dd:eb:26:06:2f:44:64:fa:f7:2f:69:cc:f8:
2e:ca:29:1c:ed:29:bb:d3:b7:01:40:ae:1c:09:5e:e6:b5:fc:
f1:f6:15:33:8e:1c:38:de:65:01:98:5e:bf:34:d5:0f:cb:4a:
8e:3f:55:1e:aa:ea:d8:c5:84:9a:cb:6d:65:70:91:de:e9:83:
74:82:3c:5a:16:84:de:4e:b3:d2:4c:13:d3:ee:81:04:02:e1:
f5:2b:75:16:e9:95:18:53:ad:cc:12:9e:98:56:69:8a:52:4f:
26:3c:d1:e4:ff:bc:76:54:2c:dc:47:cd:ee:f4:f7:9d:d8:a2:
fc:e5:3e:92:54:5e:ee:8f:f3:c3:40:9d:3e:9e:15:ab:ca:24:
1e:e7:be:6f:0f:2c:5c:38:31:05:d1:00:38:b1:e3:9d:d2:3c:
a6:6a:78:4a:a0:7e:ca:b0:3b:8c:8c:cc:e7:c9:0d:d6:0f:db:
6b:0d:10:2e:d9:1e:49:f8:81:35:82:91:47:08:96:59:05:2f:
35:0b:14:ea:0d:7f:dc:ae:6f:89:31:b2:88:fe:77:55:d1:cf:
a7:07:63:aa:6e:b1:ec:9f:de:e3:71:59:b0:61:88:06:d9:e4:
33:40:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:05 2025 by rpki-client