Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f88d5dc5-2bdb-37a8-a2a0-eac37e7598f5.roa
File: f88d5dc5-2bdb-37a8-a2a0-eac37e7598f5.roa (raw, json)
Hash identifier: hv5wS2Bc8M9B3Ir5vXXjnVbZXXwj/1IajVR/ro64U28=
Subject key identifier: F3:13:B3:A8:58:6B:9B:FE:41:72:9E:C2:A3:E9:B9:A0:BE:3C:09:C4
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E886B9277ADF28C990400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f88d5dc5-2bdb-37a8-a2a0-eac37e7598f5.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 198.86.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:88:6b:92:77:ad:f2:8c:99:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=ff7c57e5-71de-4415-ac80-3b57aa7b3cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e9:fe:4c:7c:cf:08:e1:56:cd:16:a6:55:18:
71:a9:32:cb:e3:b9:e7:3b:4e:be:bf:2b:7e:1d:fe:
80:c2:ba:93:57:f1:f0:01:fb:50:0d:a9:e4:83:34:
bc:f8:84:b7:55:2a:c3:af:9b:3c:00:2c:76:e2:57:
bc:48:ba:90:0a:4c:c8:71:fe:08:bd:33:74:52:f7:
6b:c5:a5:8e:01:3e:5c:10:71:fe:a1:eb:4e:8b:00:
78:e9:1a:3d:5c:28:e9:a2:26:cb:23:c7:c0:f5:71:
4d:a7:29:8d:40:59:2d:7d:a3:6f:09:f3:51:ed:7d:
e3:ed:ba:cd:e7:31:e2:3a:b8:7b:76:90:9e:d7:f2:
48:ea:fe:7a:a3:70:5d:0c:69:43:d2:2a:05:1c:54:
80:b3:e1:ce:1e:6e:95:1c:f9:dc:5b:b1:49:f3:64:
fd:46:91:3e:e9:bf:8b:2a:9a:ef:29:01:35:cd:b1:
a8:7b:c9:c9:47:b4:30:67:b2:a1:f6:8e:52:25:a1:
2e:d7:31:92:e7:44:9a:19:d0:04:b4:a5:a9:dd:dc:
aa:81:96:e3:1f:5f:88:75:b3:9e:28:9e:9a:67:48:
c3:88:73:55:c8:e8:fe:17:70:81:64:f7:71:c6:a2:
af:ea:f1:04:ee:ed:fb:98:b3:ed:57:7b:26:b7:f8:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:B3:A8:58:6B:9B:FE:41:72:9E:C2:A3:E9:B9:A0:BE:3C:09:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f88d5dc5-2bdb-37a8-a2a0-eac37e7598f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a3:12:49:2b:c3:63:41:2f:84:a5:dd:94:06:a7:f3:9b:56:
0c:a4:b5:bf:5f:ea:39:4a:6d:c9:3d:46:79:fd:f5:aa:8c:64:
a7:c0:4d:8b:f2:40:c9:17:8a:5e:3b:30:f9:34:55:32:8e:2e:
2b:5b:74:9b:ea:ee:65:3a:8c:65:11:6a:93:7d:c2:3f:21:aa:
0b:ea:cb:6a:35:af:a1:66:36:b0:ca:6a:c1:8e:2f:d7:09:2f:
13:a9:1e:25:95:f6:f2:53:37:c1:70:6f:cc:f9:93:ba:ed:c7:
cf:39:ac:76:89:b1:c0:ce:01:bc:e9:c3:6b:db:3b:9c:18:67:
da:92:69:31:3c:f3:82:3c:7d:4e:0f:4a:0c:16:2a:33:2d:e2:
43:2f:2e:0d:14:9c:5e:22:40:2d:e4:21:dd:9e:77:c7:d6:f7:
e0:73:aa:1b:e7:e7:45:7a:fb:47:0f:ef:de:e0:8a:12:c2:95:
d8:63:ec:6d:aa:25:25:3f:87:61:ab:a6:2b:80:ec:f1:41:9d:
66:0e:40:fd:39:93:c0:f2:d9:d1:0a:8a:05:ef:30:0e:95:42:
7b:47:cc:f1:5f:e1:b6:a6:37:69:a0:f5:31:8d:68:2e:79:35:
61:63:f7:65:5c:48:22:84:61:06:56:da:f1:6d:e7:8b:9b:57:
7f:1e:bc:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnohrknet8oyZBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmY3YzU3ZTUtNzFkZS00NDE1LWFjODAtM2I1N2FhN2IzY2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgun+THzPCOFWzRamVRhxqTLL47nnO06+vyt+
Hf6AwrqTV/HwAftQDankgzS8+IS3VSrDr5s8ACx24le8SLqQCkzIcf4IvTN0Uvdr
xaWOAT5cEHH+oetOiwB46Ro9XCjpoibLI8fA9XFNpymNQFktfaNvCfNR7X3j7brN
5zHiOrh7dpCe1/JI6v56o3BdDGlD0ioFHFSAs+HOHm6VHPncW7FJ82T9RpE+6b+L
KprvKQE1zbGoe8nJR7QwZ7Kh9o5SJaEu1zGS50SaGdAEtKWp3dyqgZbjH1+IdbOe
KJ6aZ0jDiHNVyOj+F3CBZPdxxqKv6vEE7u37mLPtV3smt/hEAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMTs6hYa5v+QXKewqPpuaC+PAnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjg4ZDVkYzUtMmJkYi0z
N2E4LWEyYTAtZWFjMzdlNzU5OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxlZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHijEkkrw2NBL4Sl3ZQGp/ObVgyktb9f6jlKbck9Rnn99aqMZKfATYvy
QMkXil47MPk0VTKOLitbdJvq7mU6jGURapN9wj8hqgvqy2o1r6FmNrDKasGOL9cJ
LxOpHiWV9vJTN8Fwb8z5k7rtx885rHaJscDOAbzpw2vbO5wYZ9qSaTE884I8fU4P
SgwWKjMt4kMvLg0UnF4iQC3kId2ed8fW9+Bzqhvn50V6+0cP797gihLCldhj7G2q
JSU/h2GrpiuA7PFBnWYOQP05k8Dy2dEKigXvMA6VQntHzPFf4bamN2mg9TGNaC55
NWFj92VcSCKEYQZW2vFt54ubV38evA8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:51:37 2025 by rpki-client