Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2042d0e0-bb5f-3ad2-96c3-17c2b0cfaea3.roa
File: 2042d0e0-bb5f-3ad2-96c3-17c2b0cfaea3.roa (raw, json)
Hash identifier: R31nnSZZRKhpaJTw/Jk4dib7jG7yHNuqYlwkQ4nSd4Q=
Subject key identifier: 1F:9C:60:79:81:84:67:FD:89:94:98:A9:7A:C3:95:86:8D:4C:5A:E1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E82C907C145E643EE78C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2042d0e0-bb5f-3ad2-96c3-17c2b0cfaea3.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.26.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:82:c9:07:c1:45:e6:43:ee:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=2cbeb96b-3adf-421b-9218-39f3262ece32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:ae:b4:78:a4:62:e8:13:44:24:cd:1f:8a:
ec:6a:47:a5:1b:4c:c9:53:f6:ae:d0:c1:33:9e:1f:
1f:f6:fe:be:3b:1e:a0:67:01:99:83:62:5b:fc:9e:
ff:ef:50:37:42:45:f2:91:4a:0f:be:88:f5:f8:aa:
4d:cd:3f:64:1e:14:0b:30:cb:0d:2b:60:c6:f2:47:
0d:4d:14:a2:0f:21:5c:7f:7d:8b:b4:24:c4:2f:e6:
ee:6f:ec:8e:6b:50:53:59:06:c7:41:e7:3c:08:a9:
51:a5:64:cf:85:98:50:49:92:ef:8d:c0:b8:aa:69:
66:76:ee:37:9f:34:2c:37:ee:af:3f:6d:9b:ba:ab:
83:7c:9d:29:19:af:24:07:e8:d2:ec:0a:b8:39:b3:
b2:b5:26:d9:d5:31:2e:dd:11:85:ff:9d:3a:15:39:
d1:09:57:52:2f:47:27:4f:7e:09:7e:1b:12:55:c5:
c7:4f:85:9b:a8:ab:15:b9:7c:10:87:fa:a2:57:c8:
8d:e2:a0:5a:67:28:55:6d:2c:e6:9b:70:48:f7:64:
3e:47:e1:08:b5:5e:4c:0d:88:bb:89:eb:fd:e0:e1:
e4:16:27:e7:b6:d6:76:db:49:fc:0d:e9:32:d8:a9:
21:45:69:59:91:a6:c9:3b:0f:a1:ad:4c:b3:1c:fd:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:60:79:81:84:67:FD:89:94:98:A9:7A:C3:95:86:8D:4C:5A:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2042d0e0-bb5f-3ad2-96c3-17c2b0cfaea3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:59:5d:7d:f3:e0:a2:58:46:1f:a5:11:60:c8:59:e1:5c:b1:
72:4b:ad:03:8f:8a:fb:fb:98:29:7e:72:7f:cc:06:8b:a7:96:
2a:15:ff:67:dc:25:a9:52:83:46:e6:bc:3d:cd:91:b5:19:58:
31:55:ee:22:7a:6c:d4:9d:76:a8:63:57:82:b2:65:31:9f:e4:
79:f2:86:6e:89:6c:8f:91:63:d7:93:ee:96:b8:dc:53:1c:66:
9d:f5:4a:e2:a0:16:12:c3:d0:0c:79:04:28:6a:65:94:bd:48:
f4:0f:eb:a2:30:0c:aa:e3:a2:46:39:41:6b:f0:a3:88:09:a8:
08:09:7c:84:2f:68:c1:98:28:e8:61:c6:88:6a:47:b6:44:ff:
27:de:d8:c2:fd:a0:4d:f1:a6:85:eb:a0:3c:cc:29:e1:97:90:
81:6e:dd:af:3a:1c:b2:52:be:2e:a0:c0:ed:94:50:53:9e:f3:
52:a9:38:ab:63:55:a6:97:f1:ab:f3:12:01:b0:04:0f:84:4e:
b8:15:06:3a:db:e8:7a:74:0f:06:19:24:e1:d0:3f:3d:a2:fa:
9e:85:ba:0f:4b:86:b0:ef:ac:8f:c6:1f:89:dd:2f:5b:04:4a:
af:c9:6b:f4:35:69:2f:36:78:98:31:a8:16:7e:7f:bf:1c:c9:
cb:3b:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:19 2025 by rpki-client