Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b6645cd-ea9c-3b88-b92f-1efcbfbf37af.roa
File: 2b6645cd-ea9c-3b88-b92f-1efcbfbf37af.roa (raw, json)
Hash identifier: EYepodsAPL3Rnb9/ERILSNNv2t1N9PotwP/pK5fp9hA=
Subject key identifier: 36:6A:10:79:FD:A8:27:B1:55:F2:48:04:73:BA:B1:6F:4D:5D:E1:75
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E879FBC7C72D7D1DFA080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b6645cd-ea9c-3b88-b92f-1efcbfbf37af.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:87:9f:bc:7c:72:d7:d1:df:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=a874f667-7c15-49f9-89b2-fdfb9d65c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:bb:52:93:e4:b1:7f:44:14:91:1e:54:df:
72:d6:3f:32:6a:6b:43:82:8b:1a:0d:ec:6c:5e:7e:
ab:ba:c1:28:b8:71:68:ac:46:86:38:2e:7d:5b:30:
b8:ea:6b:50:81:0f:51:a0:3d:f9:d5:51:e6:c8:c0:
e6:18:4a:c1:66:40:a7:99:ba:c5:8c:df:12:7b:47:
a5:10:9b:0e:27:f9:c8:8c:45:75:83:54:0d:58:1b:
c8:20:66:e2:d4:c6:c9:dd:4b:44:58:e6:41:30:3a:
11:db:4f:ad:53:81:86:eb:a0:69:75:d5:28:a7:92:
07:cc:2d:84:bf:d3:97:8b:30:07:01:e8:9e:f3:17:
62:db:75:8b:5c:d9:46:10:fe:d9:08:bd:13:b4:9d:
fa:46:1e:05:80:eb:6b:5a:e2:4b:65:f9:ae:d1:0e:
99:43:7a:72:b3:dc:f5:7d:69:85:7c:d6:10:d8:1d:
14:7d:bb:8f:5d:fb:2e:3e:73:f9:ee:a3:d8:e4:fc:
a3:65:78:70:4f:e3:a7:1d:02:d9:e7:c1:16:d6:8d:
fa:40:fe:4e:cc:ce:9b:8f:9f:41:66:7f:36:2f:d9:
c4:46:1a:b1:38:2a:39:c2:b0:11:ba:7a:30:f7:65:
4f:f4:b6:d8:34:76:ca:be:5f:87:c5:33:b8:69:1a:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:10:79:FD:A8:27:B1:55:F2:48:04:73:BA:B1:6F:4D:5D:E1:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b6645cd-ea9c-3b88-b92f-1efcbfbf37af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0e:53:83:21:e1:6f:a1:f8:a8:a3:ba:59:90:84:9e:a5:5e:
0c:04:47:c5:d1:ce:e4:b1:ee:19:5c:88:b3:83:11:14:7e:55:
5c:c1:af:e9:43:15:02:41:b8:66:06:57:d9:f0:69:97:1d:73:
66:1b:e8:08:71:ce:38:12:62:66:79:2b:e9:78:b3:0c:c3:af:
3e:8b:93:fe:66:70:94:b8:5e:59:69:49:b5:cc:25:ea:2f:93:
ce:6e:ba:30:96:e3:69:31:cb:09:cf:d1:61:52:f1:be:13:cc:
90:9e:64:db:f7:43:c7:3f:f8:da:79:c0:95:1a:4e:e8:2c:8f:
b8:30:b2:b4:07:1f:23:18:62:99:67:e0:e6:8f:72:12:9f:2f:
63:20:dd:0b:28:35:56:44:4a:32:f9:86:69:30:24:b9:24:0a:
b2:b7:93:f2:87:4f:92:e1:35:77:b1:05:f2:be:fa:c7:da:10:
57:24:56:c3:a8:18:10:70:7e:31:e4:b0:2e:1c:d1:d6:6f:9a:
a5:95:ae:1f:af:dc:b0:93:59:fa:8e:eb:34:75:ef:77:3d:21:
cb:d4:a4:e5:c9:1b:21:ca:ec:5b:5f:c9:a5:5a:e6:0b:00:ea:
ae:74:c3:da:47:f7:8c:4b:2e:f8:0e:b9:2c:72:36:53:2f:34:
41:9e:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:48 2025 by rpki-client