Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa
File: 060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa (raw, json)
Hash identifier: /oqV81P0FE+zLWyG0b93iqwPZgr5/7L0mQO/UIrsJPI=
Subject key identifier: 0C:24:EA:E9:A4:31:D8:C3:61:66:91:DA:41:06:5B:99:9D:98:D2:BF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E84332A9B35F47CC9B500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 6559
IP address blocks: 152.31.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:84:33:2a:9b:35:f4:7c:c9:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=ed4da51d-d59a-48ca-b188-817b290348fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:ad:18:f8:b8:92:8b:1e:52:c8:d8:4f:c7:
9c:79:66:d7:50:6c:b0:59:1f:a3:78:63:08:43:b8:
86:92:c9:0c:2d:91:60:00:d6:63:74:f5:0f:9f:f9:
bf:e7:a7:a7:93:bf:43:62:73:0a:78:5c:aa:23:a6:
fa:b3:78:66:32:36:ce:62:84:8c:c9:4e:c9:7f:33:
2c:9e:2d:87:6f:0e:85:50:83:63:fa:95:84:6e:bd:
8d:c7:7f:dc:cf:ac:e7:19:69:b3:81:46:c7:16:f2:
11:cf:e0:8a:5f:5c:ca:83:4d:e2:5f:1e:6f:48:de:
d8:a3:36:7e:ce:8e:84:e5:0b:d9:57:cb:4c:b4:47:
32:d6:21:4b:25:6b:fd:1b:8a:ec:14:08:32:87:53:
f9:c8:c1:72:cf:a0:3f:ac:c8:0d:c6:44:da:f7:43:
71:ea:c7:62:bf:a1:47:d3:27:31:76:a2:c5:34:3d:
6d:fe:2a:23:f4:eb:78:3d:98:23:9e:50:d9:2b:79:
be:33:a0:8c:8c:ba:8e:94:c5:ab:b7:da:48:52:ed:
58:8e:86:4f:1a:fd:39:01:1a:4f:c8:90:0b:85:bf:
de:b4:91:55:b7:3e:81:f9:6a:74:83:bf:6c:13:5a:
65:fe:6d:f4:70:9c:b8:21:10:61:1e:c3:d0:6d:86:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:24:EA:E9:A4:31:D8:C3:61:66:91:DA:41:06:5B:99:9D:98:D2:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:fb:6b:04:76:76:54:e0:42:86:18:e1:21:68:6d:db:20:15:
27:a6:63:1c:da:36:95:d0:dd:6c:aa:c4:47:b8:d3:65:de:70:
e5:db:fb:a2:e6:78:a4:80:db:38:78:59:85:a4:b8:dc:fc:33:
50:33:85:72:98:56:9f:3b:07:49:b5:31:d8:20:c1:35:8e:69:
89:47:46:43:2b:c7:ac:0c:fd:53:9b:c7:4b:13:20:12:b0:d1:
9f:5e:09:ec:b8:5e:4b:3f:d8:88:62:41:ad:09:30:4a:f3:d2:
1e:6e:d6:48:5b:09:3f:8f:8e:1a:af:27:46:18:fc:78:f5:f6:
dc:b8:28:64:b9:86:a0:a5:e5:99:88:f2:2e:db:b6:94:a2:05:
03:0c:b4:6e:23:57:43:07:1d:70:b9:b8:81:13:66:4c:fd:87:
ac:6c:d0:a0:4a:47:e6:ef:d1:9f:ea:ed:41:71:40:5e:6b:33:
74:4f:91:cf:e3:a1:c5:9f:82:53:75:1e:dd:bf:43:a2:e4:1a:
e9:31:b8:a5:16:63:ca:8b:34:73:45:ad:36:ca:f5:8e:3d:15:
6a:98:eb:62:af:87:b5:e3:03:5e:38:b0:10:60:54:c3:c1:80:
8a:bb:c2:d1:b1:26:ab:d8:9b:e3:17:d2:75:9e:a8:07:a3:93:
20:64:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:35:24 2025 by rpki-client