Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0b06af81-7711-3f00-a55e-9e3e9bdc0111.roa
File: 0b06af81-7711-3f00-a55e-9e3e9bdc0111.roa (raw, json)
Hash identifier: paZnzBOnfetBn28N+f0rzJOVt6jH05I1v4UruLXUV80=
Subject key identifier: 90:6E:34:46:4F:13:B3:7D:53:49:FF:BE:63:33:88:43:BF:95:07:AA
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E87AFF827E2069F79B320
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0b06af81-7711-3f00-a55e-9e3e9bdc0111.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:87:af:f8:27:e2:06:9f:79:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=af1db110-7792-4727-b211-0edc5bf319ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:74:00:04:89:da:f2:ce:91:91:b2:69:ce:
4f:e3:ad:f5:18:67:d3:0c:69:fd:fa:11:07:fd:37:
1e:cb:6d:0f:19:87:39:bd:8f:eb:30:b8:0e:b8:fa:
e6:fc:1b:59:54:f2:01:e0:96:cf:c3:84:53:c1:59:
5a:35:3b:49:fa:9f:f0:df:90:d9:73:41:35:bd:36:
62:4d:ea:1d:91:5b:80:5e:c1:34:22:18:5e:b1:1b:
b5:1a:e6:9a:83:71:d1:3d:be:98:29:64:7c:ef:09:
6d:13:e9:85:6b:4e:ae:03:b2:38:70:51:20:91:a7:
ca:ff:f0:77:0f:2b:22:4e:fb:5b:17:0d:a4:c0:2e:
c6:04:6a:ef:7d:36:ff:ba:30:b9:f8:8f:99:e0:aa:
ac:72:b1:85:74:1c:65:60:a0:42:f0:e7:33:25:ac:
49:00:38:78:4a:53:89:91:9c:6b:f2:70:9f:1a:2a:
51:88:81:36:06:8c:ad:b7:a7:e0:89:39:17:c3:f5:
e7:c6:a2:8d:a1:b7:db:7f:3a:ed:2e:e8:04:0b:5d:
d2:da:81:cb:e5:81:99:18:ed:c7:4d:f4:e5:b2:9f:
d7:3e:5d:7b:41:12:a9:5e:a8:e4:6e:4f:80:95:3f:
9d:96:ec:06:52:51:f2:0b:7a:91:37:4d:69:48:c9:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6E:34:46:4F:13:B3:7D:53:49:FF:BE:63:33:88:43:BF:95:07:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0b06af81-7711-3f00-a55e-9e3e9bdc0111.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:8f:40:55:8f:87:1d:f2:8a:e6:e2:4e:b3:fc:60:07:a5:9e:
da:eb:dd:f8:fd:bd:91:28:b6:ec:95:8c:0a:3b:7a:23:86:39:
11:52:a6:5c:b5:2e:a1:39:27:f7:27:f3:80:55:d3:26:2b:c9:
6d:12:d1:00:15:45:d5:de:95:05:5a:47:73:4f:62:55:93:d1:
49:48:1c:cf:7d:ad:60:30:39:7f:49:57:b1:0e:02:12:63:e7:
67:6b:1b:6a:4f:31:85:1d:12:cd:54:26:32:dc:0f:06:62:a6:
78:90:1e:0f:93:47:aa:1c:f4:66:5a:5f:44:17:9c:ef:c0:94:
82:6a:02:16:39:e2:f6:3d:8c:a6:78:be:ba:9f:a7:71:c8:47:
05:24:c5:aa:a7:01:5a:9f:b6:42:45:c4:b7:1d:e9:fd:7e:62:
e6:a2:d1:72:33:bf:f7:6b:c8:42:d5:01:9e:bd:75:00:75:da:
86:a7:20:15:38:14:1d:f2:ff:26:01:c1:99:8e:a2:03:89:eb:
04:65:f0:87:4a:8f:ec:1e:05:ee:c8:84:5d:05:51:93:65:57:
89:84:0c:9b:cf:50:18:eb:7e:b5:20:69:b2:ec:5f:28:62:51:
e6:3b:ed:75:65:31:ea:91:c0:91:62:2e:19:08:55:47:25:c0:
9f:f1:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:22 2025 by rpki-client