Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa
File: 53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa (raw, json)
Hash identifier: 4ge2rbjcs9ZA0vsNODn2oon0pWoPOSrGXNWoX0kh0JY=
Subject key identifier: A7:D7:AE:0E:97:4A:74:F6:21:1E:25:2F:E9:0F:A5:DF:1E:41:2C:41
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E818FB405999B45D0D800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.22.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:81:8f:b4:05:99:9b:45:d0:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=ef16fd33-41bf-4c7a-9b4e-707923f0850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:2d:df:59:74:62:3d:d5:ee:ef:a2:d0:44:
3c:c1:33:4c:8a:1a:32:b7:c2:2c:00:58:d6:82:d5:
a3:01:6a:9d:a9:1d:29:c5:42:6a:9a:ca:64:76:31:
84:8a:81:6e:05:d2:76:40:9d:8b:c2:4d:e8:f8:ff:
80:f4:b3:fb:38:58:ec:50:41:21:41:b6:0b:0b:10:
9e:5c:62:e2:8f:ef:6a:d4:fd:3c:0c:53:b6:03:83:
85:ff:1c:3a:cc:18:de:6e:e5:8e:86:cb:c1:ff:6f:
58:eb:19:6f:cb:a0:f0:1b:43:35:10:38:d2:2d:97:
29:07:c3:a8:0d:f0:9a:c7:f9:ae:6d:64:00:11:e4:
55:a0:8b:c5:1a:c3:00:87:32:30:9f:af:51:04:eb:
86:d3:ed:d3:12:10:eb:84:bf:61:d7:d6:09:95:de:
4d:1a:35:0f:b8:7c:a7:8f:81:2f:24:25:b9:4c:4f:
a7:a4:88:a6:50:85:ef:28:a8:d3:f9:85:fe:60:a6:
50:fd:f1:b4:37:e8:bf:1e:ee:e0:de:8f:40:6d:02:
c6:11:99:90:4e:3a:ea:fe:cc:e6:5e:31:42:96:96:
1d:2e:1b:9c:f3:15:3e:2b:1f:e5:a3:5b:79:93:c8:
a6:f2:ac:c5:97:80:80:35:1a:05:cb:b7:81:8c:11:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:AE:0E:97:4A:74:F6:21:1E:25:2F:E9:0F:A5:DF:1E:41:2C:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0c:72:35:b3:d5:c2:aa:fb:57:00:1c:aa:90:da:f8:48:66:
e9:3b:a0:a8:58:a3:40:50:1e:c2:16:ac:60:1a:65:1c:12:72:
3c:e4:5b:70:79:c5:c8:93:3b:15:f4:1e:f9:ab:c5:df:75:06:
77:42:2a:df:b9:5f:7a:61:47:da:72:94:d0:02:fe:a0:5d:23:
79:16:a2:07:35:27:2d:60:d0:b7:4f:c4:1d:8c:c2:ee:97:a5:
12:74:75:a0:5a:62:c1:c3:c2:f8:7d:40:1f:55:2d:8b:0d:81:
c5:9d:f1:8f:8f:dd:60:b6:d7:2e:5a:09:79:dd:d6:73:de:2d:
9c:f3:2c:76:a1:ad:b2:7e:8e:06:37:af:ec:6a:ed:dd:64:4b:
96:7e:cd:dd:2f:8d:a1:c8:fa:8e:e1:7d:f9:7b:91:f1:87:a3:
e1:c8:8c:57:f3:a9:ee:5d:cc:14:a1:87:d7:1f:43:52:dc:ab:
3e:ad:ae:83:a4:e4:12:f6:e1:e0:79:89:b4:b6:39:0c:58:3d:
1a:8d:31:61:ba:be:eb:29:94:a0:43:bb:49:9a:54:5b:0d:98:
8c:7c:04:06:92:c5:f7:8a:2b:04:c2:12:06:22:91:cc:68:1b:
49:6e:fb:59:07:e3:89:45:9c:d9:40:69:62:74:25:e3:47:b0:
83:c9:77:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoGPtAWZm0XQ2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWYxNmZkMzMtNDFiZi00YzdhLTliNGUtNzA3OTIzZjA4NTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfgt31l0Yj3V7u+i0EQ8wTNMihoyt8IsAFjW
gtWjAWqdqR0pxUJqmspkdjGEioFuBdJ2QJ2Lwk3o+P+A9LP7OFjsUEEhQbYLCxCe
XGLij+9q1P08DFO2A4OF/xw6zBjebuWOhsvB/29Y6xlvy6DwG0M1EDjSLZcpB8Oo
DfCax/mubWQAEeRVoIvFGsMAhzIwn69RBOuG0+3TEhDrhL9h19YJld5NGjUPuHyn
j4EvJCW5TE+npIimUIXvKKjT+YX+YKZQ/fG0N+i/Hu7g3o9AbQLGEZmQTjrq/szm
XjFClpYdLhuc8xU+Kx/lo1t5k8im8qzFl4CANRoFy7eBjBGfYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfXrg6XSnT2IR4lL+kPpd8eQSxBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTNjZGRlZjktNmU2ZS0z
OTMxLTgwN2UtNGZkNWU3ZTM0M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYMcjWz1cKq+1cAHKqQ2vhIZuk7oKhYo0BQHsIWrGAaZRwScjzkW3B5
xciTOxX0Hvmrxd91BndCKt+5X3phR9pylNAC/qBdI3kWogc1Jy1g0LdPxB2Mwu6X
pRJ0daBaYsHDwvh9QB9VLYsNgcWd8Y+P3WC21y5aCXnd1nPeLZzzLHahrbJ+jgY3
r+xq7d1kS5Z+zd0vjaHI+o7hffl7kfGHo+HIjFfzqe5dzBShh9cfQ1Lcqz6troOk
5BL24eB5ibS2OQxYPRqNMWG6vusplKBDu0maVFsNmIx8BAaSxfeKKwTCEgYikcxo
G0lu+1kH44lFnNlAaWJ0JeNHsIPJd8Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:22 2025 by rpki-client