Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/420eb37c-f09c-395c-8302-823b392352b8.roa
File: 420eb37c-f09c-395c-8302-823b392352b8.roa (raw, json)
Hash identifier: /60wR1bldn60pZMsW5Hlx/ADsvnnsXf8mwf9nOqOfjQ=
Subject key identifier: B7:EB:A0:F0:EE:A8:7D:0D:7B:49:9E:31:63:55:CD:20:C3:8D:29:7A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E848A7376C9B8FC603780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/420eb37c-f09c-395c-8302-823b392352b8.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.45.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:84:8a:73:76:c9:b8:fc:60:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=466d8a42-8bd4-4b25-84ae-5eb3782ecf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:36:25:eb:1a:ec:91:80:b9:4c:f3:ed:f0:
fc:2f:2f:dc:e0:5f:ce:a1:52:dc:90:16:3e:cb:ab:
a4:94:0c:ab:4b:03:fe:b7:da:ab:c9:a9:71:7a:90:
07:f0:9a:0c:c6:5c:af:dc:04:bf:a3:e1:d4:c2:18:
00:40:99:2a:0f:96:04:20:3d:dd:3b:66:df:24:8a:
9c:f3:43:27:c9:34:92:28:1c:2a:05:b8:e2:54:15:
60:81:1b:c1:94:f5:80:6d:b3:3c:6f:e7:18:37:c1:
08:70:22:ae:01:2d:42:07:7c:3b:cf:66:33:81:ed:
c3:7f:4a:6b:93:00:5f:a0:45:fd:62:bf:98:d0:be:
b4:bb:5b:b5:a5:4b:42:e6:3b:25:1c:3f:c4:95:33:
da:27:48:75:bf:e0:c2:bc:45:80:97:d3:b8:d6:01:
1d:21:f2:6e:fe:e1:d0:a2:f8:ed:b7:5d:9b:2e:8a:
5f:b0:f4:f2:2b:08:72:53:42:52:f9:c7:7a:4d:fd:
0f:65:62:04:5b:7f:cc:3e:b8:40:84:77:09:c4:1a:
1d:a7:41:e7:1f:24:99:56:db:e2:41:b0:04:9e:05:
0c:63:f9:ca:8f:cf:29:84:48:34:ff:6c:ef:87:41:
3e:d5:c1:bc:04:57:64:aa:e4:71:92:3d:db:db:77:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:A0:F0:EE:A8:7D:0D:7B:49:9E:31:63:55:CD:20:C3:8D:29:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/420eb37c-f09c-395c-8302-823b392352b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:62:e9:fe:a3:2d:4d:c7:4e:ff:62:d0:05:9f:ae:43:71:1f:
2f:85:d0:b7:77:d1:39:fd:61:f8:1c:55:06:ea:ff:e4:91:6d:
93:94:5e:41:8f:da:12:bd:8a:bd:62:27:a3:68:1e:b0:46:83:
35:45:bb:7b:e5:fa:12:7b:51:da:9a:b9:67:63:e1:f6:24:75:
57:b6:c1:e8:0b:f7:37:c0:cc:a4:f2:bf:11:ea:8f:0b:0d:6d:
49:f0:a2:0a:49:8f:e6:26:4a:b3:54:63:2c:44:8e:0e:39:4a:
31:99:90:30:94:93:41:77:a9:e5:ce:0a:33:fd:62:82:5e:98:
9f:62:31:98:36:5c:38:63:5e:b5:d5:95:34:cd:5e:7d:d5:91:
36:ec:7a:ce:a2:10:df:ea:e7:4c:bb:eb:e5:bf:7d:96:a1:e4:
d2:f6:ed:2e:2e:05:4d:72:df:7a:87:e6:66:44:97:ab:04:77:
44:77:b7:a9:5b:cb:a3:e2:b9:79:ba:8b:d6:fd:25:e0:ea:18:
35:2e:27:af:ca:67:62:2d:ef:d4:8a:94:49:bf:b8:56:40:3c:
51:e6:e0:2e:38:a7:78:69:83:6b:9b:49:23:80:d3:01:34:f3:
8a:a4:c8:99:84:9c:2c:62:83:ad:00:50:17:f3:3c:52:9f:b3:
74:ba:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:29 2025 by rpki-client