Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7eafb79-1323-32e5-ab90-41b5f8ac8a2f.roa
File: a7eafb79-1323-32e5-ab90-41b5f8ac8a2f.roa (raw, json)
Hash identifier: SANTSZlUzWqjel9PqDeVEKNjzZmdZXKoa+y3mDGbi+A=
Subject key identifier: 44:9E:13:4A:3B:F8:D7:20:AC:9A:5A:67:C3:4E:EE:72:D6:3B:B7:41
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E890FD0C8C054A6D29400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7eafb79-1323-32e5-ab90-41b5f8ac8a2f.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 198.86.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:89:0f:d0:c8:c0:54:a6:d2:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=7fd21e4a-2d04-4c1f-bc2c-490bb4a80424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:87:35:4a:f2:0d:25:63:9e:d4:46:a8:1a:
0d:7c:39:88:a2:08:65:8a:90:40:de:40:7e:fc:db:
af:28:c1:b9:28:49:5e:29:5a:b4:43:df:ce:05:76:
38:90:0a:d7:80:5d:f1:ee:85:b2:bb:34:b0:5c:5b:
b5:f9:d8:50:2c:c3:54:96:af:40:46:8b:58:3d:03:
1d:81:73:e9:89:e5:a0:d5:f3:d7:96:66:96:0b:81:
66:33:94:74:f6:4d:a2:e2:03:a7:d4:45:c1:bf:6f:
f1:f7:27:55:0a:60:99:55:67:80:86:db:0c:10:6c:
a2:cc:98:23:15:99:77:3e:87:0a:d9:43:34:5f:96:
75:0e:0a:4d:a8:ba:12:63:4c:3c:da:21:24:7e:d8:
46:e8:38:71:1c:0c:af:d3:8e:82:60:26:1f:9e:ae:
83:64:99:72:78:a0:31:45:5b:9a:7f:05:49:1a:c7:
b2:5a:86:0c:c3:33:6a:c2:dc:dd:de:cc:52:6c:1d:
ca:44:fd:cf:5b:11:c2:14:64:5d:3a:04:d3:f5:b6:
d8:f1:aa:b2:75:8c:ac:1a:92:73:1c:3e:7e:1c:2d:
1c:85:a3:4c:62:7c:a4:be:b2:e0:ce:c6:93:dd:07:
4b:2d:52:a9:51:94:ef:92:79:e9:7e:e9:90:ba:c6:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:13:4A:3B:F8:D7:20:AC:9A:5A:67:C3:4E:EE:72:D6:3B:B7:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7eafb79-1323-32e5-ab90-41b5f8ac8a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:dc:63:eb:7d:ed:35:2f:4d:09:cd:10:7a:a3:ab:4b:33:58:
34:0f:4b:28:07:97:49:8c:f0:13:ae:b4:7c:6f:0f:65:1f:e7:
61:44:9a:42:40:6d:b9:cc:b5:dd:b4:19:10:30:f9:91:d0:f6:
c6:74:25:13:7d:d6:94:10:5a:15:f1:85:0d:a1:57:38:b5:75:
6a:b0:f0:c5:48:84:2e:8b:85:ab:a7:08:d7:a4:16:ee:6b:7c:
81:cf:3d:2e:e2:67:b5:25:92:e2:a5:c7:d9:30:3f:6b:77:b5:
16:71:f2:1b:b3:c0:79:90:12:c6:c7:1f:c6:0b:40:da:ad:a1:
79:ab:b4:71:20:11:8d:e0:73:07:32:79:a8:a4:83:61:85:de:
94:d2:1c:e7:38:d2:b2:ce:1e:72:b1:0c:5e:17:1c:a6:77:35:
15:7f:dc:98:9e:94:90:42:9e:58:a0:82:99:70:fa:31:f9:36:
d7:45:d7:17:2a:9c:90:f3:ff:6a:49:bd:88:58:e5:34:16:2c:
7c:11:dd:4c:b6:30:79:71:05:2b:e1:30:91:bd:e1:57:23:87:
af:f2:c2:51:5e:3c:bc:80:c6:53:2e:14:36:c2:8c:49:f3:56:
fc:bb:48:fb:9f:cd:af:fc:33:9e:45:8d:39:10:7a:ad:aa:5f:
1f:dd:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:44 2025 by rpki-client