Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22c83c40-d813-32cc-868b-241590e92bca.roa
File: 22c83c40-d813-32cc-868b-241590e92bca.roa (raw, json)
Hash identifier: HlDT4+upnrnWO1yHcGFy4q/pJ3H+mVE8f/sTzxwHxmA=
Subject key identifier: B2:E1:46:A3:4C:26:F9:12:F9:60:71:9D:D6:E8:EE:69:49:78:D8:5C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7DD9F04F5B189C6D3F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22c83c40-d813-32cc-868b-241590e92bca.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.27.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7d:d9:f0:4f:5b:18:9c:6d:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=1d083a0f-8ab3-401c-a96b-dd63134fb095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:1f:2d:7d:31:f2:39:fa:bd:a4:de:13:0b:
c6:e3:4c:0f:39:08:e1:6d:ca:33:3e:fc:1d:85:94:
29:dd:56:b1:1e:15:2c:a9:e5:85:e1:95:57:74:be:
b5:9a:37:b8:4e:d1:9d:a0:2e:55:0d:05:9f:6f:13:
87:9e:1b:94:f9:ad:4d:d4:86:f6:43:50:6c:fc:df:
cc:a5:5f:a8:50:b7:55:d2:b4:1d:96:5c:83:5a:cd:
0b:4e:6d:e8:57:f6:bd:97:b8:7c:49:36:88:4c:5b:
04:12:13:24:97:99:36:e6:d4:43:24:a7:a6:97:1f:
b0:ca:dd:4e:08:b2:1c:70:ab:59:d5:85:2d:fb:b5:
78:79:cd:8a:0f:8a:50:29:59:fd:3c:6b:fd:fe:a9:
bf:26:d7:01:49:f2:3e:1a:aa:23:5f:29:0c:c1:d7:
e7:ef:f4:08:a4:a3:d0:ce:ce:c1:84:f6:0e:94:61:
01:80:88:1e:fd:dc:e9:34:76:b9:33:37:ab:d1:54:
85:30:d8:55:23:f2:c8:77:de:20:5a:a4:c6:d4:eb:
64:53:ba:ec:73:17:3b:fe:f3:e1:89:7d:a4:92:27:
d6:e1:d3:63:89:99:fa:cf:02:72:e6:e4:1a:91:d8:
e0:7b:20:41:e8:76:ae:f7:00:a8:18:12:44:22:6c:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E1:46:A3:4C:26:F9:12:F9:60:71:9D:D6:E8:EE:69:49:78:D8:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/22c83c40-d813-32cc-868b-241590e92bca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.27.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:41:48:f0:df:1d:c4:92:4d:c0:4f:7a:84:20:c8:b5:cd:1f:
2a:18:ef:16:f4:3c:77:b9:9e:de:cb:7a:fa:91:b5:f6:e6:5f:
6b:31:e6:99:29:f4:3f:32:77:b1:fb:4b:51:ac:5a:f5:8c:01:
b2:5b:54:42:17:24:a6:63:7d:aa:84:9e:c6:e5:d7:f7:ee:30:
2c:ba:0f:f6:52:36:41:2f:e4:e6:4b:d1:b3:96:77:92:f0:d9:
da:4e:37:6b:3e:bc:39:eb:e1:51:a3:e5:23:50:90:71:a1:86:
04:64:52:8e:00:ca:4d:cd:d6:c2:20:70:33:33:69:61:9a:49:
49:05:be:14:23:0e:a2:0f:4b:59:98:c8:67:ad:48:c5:c6:6c:
27:17:81:54:e0:de:2a:8c:35:09:ad:07:be:f3:2f:5a:d4:03:
5f:1e:0f:74:47:24:38:2e:b0:13:20:a3:93:b6:d7:af:4a:49:
18:47:eb:aa:83:0d:8f:da:ed:0a:89:ad:fd:69:b3:07:d6:5d:
8b:a8:67:cd:85:21:c3:39:8a:b3:04:52:d7:f2:77:14:a9:c5:
9e:77:4d:87:c2:7a:21:f4:6d:77:19:60:5a:1c:09:f1:6a:55:
3f:7a:4b:54:9b:d9:ba:a6:80:61:dd:06:78:30:8b:fa:d9:db:
38:20:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:39 2025 by rpki-client