Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b21e5e8a-630a-3b7a-abe2-354af6022ef7.roa
File: b21e5e8a-630a-3b7a-abe2-354af6022ef7.roa (raw, json)
Hash identifier: l6GyAFAvEbjmd7ETGvh2nQYwlVyInhwwAGFnoewXtG4=
Subject key identifier: 42:A8:A6:11:D6:7A:34:E5:F4:6E:9A:67:19:C7:C8:53:70:E1:62:7E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8890F599368EEF441BC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b21e5e8a-630a-3b7a-abe2-354af6022ef7.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 198.86.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:88:90:f5:99:36:8e:ef:44:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=306e2a68-9806-403d-bd16-a4608eb3dc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:18:1a:37:e6:06:63:f3:b4:64:6e:e9:a4:
96:15:72:52:38:dc:5d:16:83:c9:b6:f7:33:44:92:
58:24:0b:f7:f1:bc:90:3f:03:34:47:71:51:5a:b8:
c6:47:33:44:3d:b0:e7:08:54:20:2f:2b:46:bb:65:
c8:60:13:54:59:5c:f2:6a:a8:c0:1b:7c:fa:83:26:
8b:81:de:07:9d:02:3b:9c:ac:75:21:b3:14:84:8b:
13:37:57:ec:58:9d:19:13:ba:13:a7:e8:b2:21:2a:
39:38:5b:b5:19:3b:13:82:b1:2e:3f:8d:a8:48:75:
42:ed:07:58:93:1c:52:e1:7e:52:ab:71:64:fe:e9:
b2:88:75:24:51:72:24:e2:18:ce:73:97:c0:e2:98:
45:5f:11:7f:10:eb:77:09:b7:67:77:25:95:28:77:
16:23:3a:c8:e2:0d:0f:69:dc:e3:38:bc:fb:a4:d5:
f3:d8:de:fd:97:a9:e3:30:64:d1:4c:91:52:a3:d7:
7e:95:12:d4:7e:70:c0:9c:eb:38:05:f8:f8:e9:2d:
68:93:c0:25:31:6d:ff:a7:74:68:73:b1:48:42:ff:
6f:1c:ff:05:f5:5b:da:d6:49:cc:da:ea:c5:f8:c2:
d8:11:12:3d:b6:c8:d0:56:15:a1:45:40:e6:b3:7e:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:A6:11:D6:7A:34:E5:F4:6E:9A:67:19:C7:C8:53:70:E1:62:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b21e5e8a-630a-3b7a-abe2-354af6022ef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:16:0b:c5:95:8e:f0:ea:00:f1:bc:1a:75:3f:96:c7:c4:f4:
04:de:14:b5:ac:a7:9e:42:a6:19:ff:83:cb:7a:2d:ad:da:80:
6d:23:0a:6e:fa:06:1e:42:f3:d6:66:c4:69:4c:6a:3b:f4:9d:
97:28:b9:5b:1d:6c:a5:53:f0:d8:5a:f4:b1:46:db:0d:f8:bd:
12:08:0e:a3:45:2e:2d:f2:55:ee:08:84:fb:a6:e3:b4:74:fc:
52:ca:78:7d:bb:37:11:65:99:ae:56:aa:98:17:89:96:77:c9:
60:46:b4:13:c4:fc:d5:53:72:1e:04:4b:14:79:33:90:38:31:
c1:1c:04:bb:b8:bd:76:ef:13:36:b2:c1:d7:3e:a8:e8:b5:35:
d7:d2:c0:15:32:de:85:7b:ce:6a:c2:b1:a9:f3:11:76:fd:08:
6f:5c:f0:7e:3f:51:c7:59:14:93:67:49:ea:b4:5f:ee:14:22:
f7:21:b6:26:a5:b7:53:fd:35:cb:d1:fb:c7:c9:0b:29:d2:93:
86:a9:c6:94:91:9b:e2:58:6e:59:04:f9:4c:12:a5:08:e7:96:
5e:17:8f:1b:3a:1b:2c:c9:16:ce:23:6e:00:86:85:51:0f:94:
0c:e5:20:3c:b9:2c:0b:7d:9b:ec:a9:62:f0:89:8e:eb:5a:18:
89:42:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:18 2025 by rpki-client