Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1fbab00c-2de1-3293-b223-1befa51ea56a.roa
File: 1fbab00c-2de1-3293-b223-1befa51ea56a.roa (raw, json)
Hash identifier: BFAp38SXMR4VEmoB4WRKynu7Xf9BfOztzg/5HZ440Uo=
Subject key identifier: 74:E8:8B:D0:42:12:0D:0A:91:41:17:40:61:1F:DC:2F:DD:FB:19:DB
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7F1D8BCDF6F865DC7C40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1fbab00c-2de1-3293-b223-1befa51ea56a.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 192.154.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7f:1d:8b:cd:f6:f8:65:dc:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=b7cc4202-62e4-4112-9ef7-b009308e4d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:46:7e:a3:c8:fa:2f:e1:04:1e:ee:79:3c:
cc:05:20:6e:4f:0a:5b:ac:8e:5c:35:37:b2:a1:f8:
f1:1a:c6:60:89:ac:29:3f:84:ce:f8:a4:22:39:8c:
92:63:c8:9a:7b:cc:53:e4:9c:80:72:e4:60:5a:e4:
7d:0b:d3:eb:12:e8:64:98:fb:5a:ed:59:77:96:7c:
9b:c1:e9:86:f4:8f:74:42:5a:2b:d0:ba:51:b1:2d:
72:41:f3:d4:8c:d4:6a:55:1f:4b:54:c0:7d:4d:10:
e0:04:3b:29:ab:85:0b:a1:8a:de:b0:d3:e3:ac:b7:
7e:8c:15:48:9f:21:13:80:b7:14:43:d9:40:3f:de:
94:e7:97:d1:eb:92:c2:75:af:f0:46:48:ea:19:60:
f7:ad:2e:bd:ef:07:d1:14:4d:c3:e5:a7:4d:e1:11:
20:22:a7:3a:a0:00:81:00:db:db:c5:60:bb:a6:6f:
71:c0:2e:0c:d1:66:6f:1b:35:5f:a4:9a:70:e2:ed:
3d:0b:18:9f:28:32:d6:b6:f0:97:42:5a:4b:cb:33:
e7:f5:6a:aa:b8:f5:29:e3:f0:d2:70:90:5b:3b:75:
fd:82:fb:b1:7a:68:72:d1:97:e7:4e:f7:e7:41:74:
83:da:7e:71:dd:5a:bb:bb:b0:9f:2c:57:06:ef:4c:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:8B:D0:42:12:0D:0A:91:41:17:40:61:1F:DC:2F:DD:FB:19:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1fbab00c-2de1-3293-b223-1befa51ea56a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:54:bd:bb:ce:a4:b5:b3:3d:80:9d:13:93:19:1f:79:00:4e:
de:ff:14:26:bc:32:8f:76:be:72:b6:45:c4:56:41:dc:ac:4b:
c1:aa:65:2a:b0:05:0f:81:ae:db:41:da:3a:e1:c9:29:52:da:
a2:4d:68:34:b4:ef:e2:98:a6:f0:05:8b:a6:bd:eb:9b:14:cb:
b4:49:ed:2f:39:46:27:32:9a:6e:0d:f4:23:c3:a1:c6:7b:00:
b9:8b:bf:42:7b:16:ba:55:8d:79:00:e6:45:1e:21:41:22:11:
b9:92:9f:3d:7c:c3:35:54:b5:20:68:2e:7d:95:2d:7d:e6:8b:
33:60:58:78:64:30:d1:e2:d6:13:fb:66:15:9a:09:45:b8:d5:
91:70:4e:6c:8c:fe:d1:4f:0d:d5:3c:f3:d8:b9:d6:6b:cf:c3:
28:18:47:23:d0:91:9c:37:e0:11:ab:2e:6f:95:d2:4d:26:c3:
ae:b8:da:40:a3:0a:1e:ae:86:b7:60:e1:b4:84:20:d4:bd:91:
21:e6:f5:3d:7f:7c:f9:71:58:ce:20:79:97:16:7f:38:aa:20:
11:a3:a1:0b:f4:74:18:93:b4:ea:40:e1:a4:19:f9:40:40:62:
bd:20:e7:d6:76:68:f1:71:6b:1f:9a:31:53:39:c2:42:03:a3:
fd:09:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:18 2025 by rpki-client