Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5384eefe-b272-307b-bf94-ff9808e1b4d6.roa
File: 5384eefe-b272-307b-bf94-ff9808e1b4d6.roa (raw, json)
Hash identifier: kuB3MRzd7nMDEhmQJo+7AyhMRiVFqUkx79+Ajn7EIKw=
Subject key identifier: 26:D7:0F:D5:7F:A8:FE:B2:F9:AC:3A:55:19:6A:2F:BA:4F:9D:05:C2
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7DEF9E5DF19546A74F40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5384eefe-b272-307b-bf94-ff9808e1b4d6.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.28.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7d:ef:9e:5d:f1:95:46:a7:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=080975cc-e23c-4ff2-a4ce-efd73ee5c6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:fd:d7:79:d9:ca:4e:cd:59:ac:7a:f8:8b:
52:68:57:c9:09:e1:0a:37:60:6e:51:45:59:b6:90:
bf:27:91:61:fe:98:d0:eb:fb:98:22:e2:9a:f8:04:
e2:f2:f6:42:23:17:aa:a2:1e:5e:b1:42:69:e7:55:
a9:3a:19:14:5b:1a:67:db:3f:50:4b:51:72:3f:f1:
6e:de:89:03:60:9f:93:96:71:1b:af:00:68:ec:39:
b6:eb:da:66:fb:4a:62:b5:18:bb:e1:7b:a4:dd:0f:
aa:98:ac:15:45:97:28:a0:17:ad:28:c0:17:4c:f0:
d4:b5:e3:7e:5c:30:fa:8d:d3:0c:8e:34:5d:ea:28:
f8:18:aa:89:07:41:60:06:84:f3:31:3c:cd:c8:ac:
90:3e:f4:eb:84:85:a6:f9:6b:09:ff:aa:26:36:e6:
d0:1f:08:91:0c:2d:d5:9f:cf:c5:bb:c5:f0:fe:53:
15:df:d1:f1:fb:e8:7e:b6:38:d6:db:06:34:ed:57:
2a:2a:ba:6c:53:16:d5:86:c9:5b:e1:7a:93:f9:7c:
4d:b6:88:9a:7b:aa:f9:f3:0a:bc:71:be:b9:1d:43:
4d:43:f6:df:90:6a:94:ea:1a:81:3e:df:ed:09:32:
bc:62:4c:c4:99:a7:69:18:21:3b:20:9c:19:1d:70:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D7:0F:D5:7F:A8:FE:B2:F9:AC:3A:55:19:6A:2F:BA:4F:9D:05:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5384eefe-b272-307b-bf94-ff9808e1b4d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:75:29:7b:43:ed:1f:d0:36:b3:cc:9a:55:42:72:55:1f:96:
26:6c:ac:eb:35:f8:4f:3a:68:17:e2:63:42:dc:cd:07:ed:2e:
b9:54:42:11:4b:8d:93:d0:24:6a:8c:b4:ca:30:97:26:c2:23:
32:54:ba:8b:e6:d2:2a:20:30:7f:df:3c:83:c2:43:14:18:df:
61:a0:f1:6f:40:7d:87:47:17:f7:c8:65:c5:d4:d7:40:35:d2:
79:eb:21:12:2b:64:2e:f2:fc:45:07:a1:e6:4f:c3:92:b5:99:
f4:6e:44:60:b5:fc:1b:df:d3:ff:bb:94:ce:24:c5:5c:b7:a0:
a5:94:e9:21:69:6e:93:ed:94:d8:4a:2a:38:87:35:18:8a:42:
98:39:61:3f:f6:64:0c:dc:1f:f7:97:34:bf:94:64:43:49:30:
c0:ea:9b:df:60:c7:01:d3:e8:c8:af:11:f5:1f:e8:ae:88:ea:
62:42:c0:b0:f7:83:96:d3:f2:a7:4f:05:d6:49:fc:5e:7c:49:
60:03:ac:fc:24:2b:17:4d:f1:00:3a:80:d5:a2:62:36:7b:b5:
ee:1f:16:c2:38:70:c4:9d:07:13:50:3b:af:18:aa:2b:65:dc:
c2:f7:bb:66:31:91:ef:21:76:cc:00:53:34:9e:0f:c9:c6:a3:
36:a5:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:04:26 2025 by rpki-client