Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e534673-9d2c-3b50-976a-a69f23cf178e.roa
File: 1e534673-9d2c-3b50-976a-a69f23cf178e.roa (raw, json)
Hash identifier: 1Ab3xVchh0/6HJWHhaH/H7zAXY4MaY5tBrq4eztXaFU=
Subject key identifier: 46:D9:53:17:92:41:48:0A:78:F1:8F:66:A2:C8:8B:95:56:0A:02:2D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7EBE24F036A494B1F8C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e534673-9d2c-3b50-976a-a69f23cf178e.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.55.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7e:be:24:f0:36:a4:94:b1:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=c03bf175-a13a-4be9-bb64-e910471504dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:2c:a0:b2:9e:3d:7c:c8:96:61:fc:dd:82:
65:a9:51:18:8e:16:b2:44:43:c3:02:73:90:26:db:
10:ef:2c:bc:c4:45:2d:17:23:bc:05:c1:68:cf:46:
d2:7f:e2:f7:1c:26:29:d0:69:ab:b2:c7:f5:06:e8:
39:c9:61:36:ef:3c:a2:78:dc:41:d9:92:c9:51:86:
0f:ff:1c:53:0f:fa:9b:b8:ee:c5:4d:cb:6f:0d:22:
9a:c7:de:ce:e6:3a:a7:10:9a:7f:7a:2f:12:3d:7c:
b3:9d:d8:54:79:eb:60:24:c1:bd:ef:4c:91:01:78:
7d:2f:e9:ef:70:5d:09:59:ed:d4:24:57:96:84:be:
f1:db:96:b1:d8:a9:d6:3f:b4:d9:45:12:26:db:00:
34:46:e1:c9:68:a0:98:de:f0:71:72:0d:f6:2e:2d:
a9:7b:4e:1c:d2:10:87:94:5a:76:22:38:50:03:9b:
69:d8:f7:ba:ac:5f:98:0b:17:c6:87:e6:ad:5b:06:
2f:21:1b:20:c2:e3:da:f3:ff:ff:57:5f:1e:ad:ec:
21:bf:88:80:11:3e:1b:06:92:34:ac:86:d4:70:a3:
4d:69:39:d5:b0:39:82:ef:d7:2a:d1:ed:58:49:a0:
7e:7b:00:83:48:84:a2:10:e0:f1:93:f4:b7:35:0f:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D9:53:17:92:41:48:0A:78:F1:8F:66:A2:C8:8B:95:56:0A:02:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e534673-9d2c-3b50-976a-a69f23cf178e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:14:c7:b3:88:99:0d:dc:6b:11:98:21:21:50:86:ab:2a:fc:
fa:7a:92:b9:91:1c:11:77:77:53:28:f3:f2:6b:67:60:ca:d1:
c1:09:af:cd:6a:29:9a:b0:01:ff:18:bf:07:8a:47:ee:46:24:
d4:73:b6:d6:f9:29:23:3a:ca:c6:2e:8d:8a:9b:2e:47:f2:27:
63:64:0a:d8:ea:78:98:db:ec:eb:29:08:d7:5f:df:3c:66:6c:
64:0a:41:b0:4d:28:3e:db:be:e5:71:10:29:90:5f:97:0d:d2:
1d:88:61:10:0d:6c:97:cf:7b:2b:ef:da:77:0a:1f:e7:31:4e:
28:cf:da:f9:58:af:2a:b0:c5:e9:ca:53:ea:38:f9:95:31:df:
28:39:74:b1:dc:fb:5a:41:e4:de:82:c4:47:f8:9b:27:cf:4b:
75:a0:5f:59:66:3a:bb:e7:d9:16:ac:a8:9a:1c:18:cc:9c:2f:
d7:84:d1:5b:04:57:58:6f:93:ee:6d:32:c0:b2:29:23:93:b6:
47:80:d7:f4:5b:11:55:54:e0:2c:7a:0c:ff:8f:4d:a4:b8:b3:
c3:ee:42:18:53:52:23:84:c8:bb:2e:f7:7c:bc:c0:31:2e:2d:
96:c8:c5:01:30:b9:32:a8:0a:be:d6:fb:a4:97:6b:8f:95:0e:
d5:6c:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:42:32 2025 by rpki-client