Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ff992f1-44b4-353e-b86f-d8851a6461fd.roa
File: 1ff992f1-44b4-353e-b86f-d8851a6461fd.roa (raw, json)
Hash identifier: iMvVEcjYycuSM77VoTP1/2/06MIss7fIXiPautKNxAA=
Subject key identifier: 58:6B:CC:A8:66:F6:75:ED:BA:CD:D6:5F:46:2C:87:05:16:22:18:52
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E845AB394F73B60930290
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ff992f1-44b4-353e-b86f-d8851a6461fd.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 53785
IP address blocks: 152.40.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:84:5a:b3:94:f7:3b:60:93:02:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=d8592238-b84f-4c62-b04f-973b38e229ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:86:c6:67:96:86:d6:ab:c0:46:63:19:b4:
2f:44:fc:22:c2:1c:ab:0d:14:01:6a:28:aa:a9:fd:
05:89:a1:9e:8f:05:5e:65:b7:76:4a:ad:ce:4e:cf:
c2:7c:86:54:40:2b:4c:51:38:66:fb:97:29:e9:73:
d7:1b:be:03:78:b4:dd:5c:3c:6f:3e:8e:4f:26:e4:
cb:a7:5d:89:e2:b9:ac:3c:7f:17:03:7d:80:ff:cd:
de:9a:32:63:b0:dd:1d:6e:d6:2f:5c:2f:22:33:94:
f3:31:b1:92:f8:98:fa:a0:14:fa:f3:f0:fc:5c:6f:
07:03:f2:ea:01:2f:c0:cc:1d:7b:a4:0c:51:71:ae:
e4:ff:78:c0:7b:10:5e:87:ba:ce:64:8d:06:0a:86:
57:92:e6:8e:0c:e2:4c:16:c1:5a:e8:e6:ca:6c:30:
ee:75:98:e9:18:80:31:ee:b5:9b:e1:37:7f:ee:80:
88:bf:da:68:23:5c:10:2b:67:a7:38:9e:06:d4:33:
97:71:49:ce:fc:de:52:dc:0b:b1:48:ff:fc:a7:b6:
1b:f9:d1:93:da:a4:8b:88:73:70:12:dd:58:2b:da:
bc:36:a9:46:5e:b1:9d:a6:9b:51:17:89:f2:87:3d:
0f:b7:4b:c7:ce:e2:0d:b5:b9:4a:b7:fd:47:69:3f:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:CC:A8:66:F6:75:ED:BA:CD:D6:5F:46:2C:87:05:16:22:18:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ff992f1-44b4-353e-b86f-d8851a6461fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.40.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:1f:f8:9e:71:3e:3d:c0:4b:f2:2f:c4:c3:51:3e:fc:f7:5c:
13:e9:bc:fb:d2:4c:f7:1d:a2:d5:6a:f0:c4:7e:04:93:08:ad:
b5:bc:40:0f:59:45:71:f7:4a:b2:de:59:e7:2f:e1:ba:2b:df:
fd:43:42:1e:bd:4c:89:fb:e9:96:a1:76:01:a6:c2:ef:59:cc:
b2:d6:b9:a5:7d:80:c8:4a:7f:88:36:b7:c4:50:79:4a:6b:b2:
a6:fc:35:13:8d:a8:b6:7a:3e:53:f9:05:3a:b0:39:41:70:55:
c9:48:80:b2:c3:09:40:e2:f4:ae:36:7a:da:7e:2b:85:10:d6:
05:bf:05:84:ab:92:63:c7:a5:80:86:cf:2e:34:df:1c:18:25:
4e:02:b4:f6:0d:e9:a1:3c:8f:6a:90:c6:40:24:74:e0:84:3c:
15:59:f5:a0:99:62:d3:2c:b9:c6:36:1d:8a:90:74:1d:b1:74:
88:04:44:5b:77:d8:8c:9f:40:56:5f:d8:52:af:22:3b:47:97:
fd:21:1e:c6:21:8b:fa:0f:42:a6:c3:cb:d1:04:5a:52:d0:93:
e3:8d:09:e2:6f:d0:a3:ce:d6:11:f5:cd:6c:78:b8:de:19:8d:
16:8b:ad:43:ff:4d:22:09:d1:43:8d:2b:84:8d:95:3c:4f:46:
a3:11:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:43 2025 by rpki-client