Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5935768a-8409-3d54-8b1f-dbf094eca3b8.roa
File: 5935768a-8409-3d54-8b1f-dbf094eca3b8.roa (raw, json)
Hash identifier: TnVMs1iucyDx8BzzZ/RwnY+b4SP2XEKQ8JOq01FqtNY=
Subject key identifier: FE:6D:5C:0F:DE:2B:88:AB:00:75:BB:D4:35:DC:53:52:E0:8A:67:48
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E84DE7AD9BD49BBAE0980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5935768a-8409-3d54-8b1f-dbf094eca3b8.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.45.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:84:de:7a:d9:bd:49:bb:ae:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=b74a41d9-881d-40f9-9fff-9520ffb7cb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:57:2e:f2:9b:0a:11:0f:76:ed:ea:df:f6:
60:80:d0:68:a4:cf:15:87:6f:d9:e8:3c:92:58:5c:
b1:a0:81:76:d7:db:d4:d2:65:82:c1:ec:91:81:4a:
76:54:93:74:39:dc:f6:d0:73:80:9d:be:cc:04:63:
1a:94:af:1d:6f:cd:97:0f:ea:31:77:5c:b1:db:ec:
1e:78:16:d1:9e:1a:99:ca:d0:94:03:8c:64:38:74:
0b:9c:df:ef:91:07:b1:25:08:26:8e:db:03:f1:c3:
fc:1d:d1:ec:82:2b:c5:48:1d:29:b6:6a:0e:92:56:
7f:80:43:07:be:96:24:79:95:b4:90:a7:08:58:82:
e9:9d:c9:f0:66:6f:a8:4e:3d:f9:9b:25:3f:49:38:
78:39:36:ef:a6:df:f1:83:f1:2c:9c:fb:08:a2:d2:
d8:b5:0e:70:ee:bd:e0:d7:27:4a:d6:8e:71:1c:fd:
09:7b:ae:c6:9c:61:2d:63:1f:bc:6d:f2:1f:14:f6:
f7:c8:31:78:fc:ec:2b:d0:5d:51:03:95:01:50:95:
ce:4f:0f:2d:a2:69:2f:23:6b:f0:4a:09:19:14:ca:
45:e5:4e:02:e9:e9:a9:d5:ca:0e:b0:10:b4:a2:94:
b8:07:cd:03:a3:e1:85:ea:54:5b:b1:4c:21:e3:31:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:5C:0F:DE:2B:88:AB:00:75:BB:D4:35:DC:53:52:E0:8A:67:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5935768a-8409-3d54-8b1f-dbf094eca3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:6a:62:cf:e2:80:09:40:a0:35:c4:32:bf:4b:f0:2b:a0:a7:
5c:41:d6:60:8d:f6:07:d1:e2:b7:3b:f6:44:f5:12:f0:37:4e:
f0:f7:38:51:24:93:fa:45:f2:12:35:3b:88:f5:41:b5:0a:1c:
06:40:91:d2:6e:6d:c5:6f:56:f5:9d:c3:b9:26:4f:4a:e0:7e:
f4:8c:f4:75:35:2c:4b:52:7e:e2:b9:3b:04:77:f7:d8:23:ba:
52:9e:88:01:9a:0d:29:96:57:94:73:24:67:a4:7e:26:65:a1:
f6:e8:66:bd:81:36:2c:ec:ab:bd:09:50:f8:64:7b:f5:82:33:
86:34:8b:cf:c0:8f:9a:07:c3:1b:68:2c:78:03:a1:66:fa:ae:
0b:d4:93:25:13:b6:86:e8:d0:47:fd:96:52:2a:48:c7:0e:7e:
d6:2a:a7:9a:1a:ab:2d:bd:51:ac:cf:60:d8:60:33:78:0d:ff:
08:2b:e8:c0:90:3d:08:87:50:eb:32:8a:0b:f9:25:5f:8e:d1:
a7:1d:61:6d:5f:a6:bc:39:ba:e8:54:8f:ff:b3:a8:39:39:91:
25:94:63:a1:75:e1:cd:97:9e:45:47:a0:c9:bf:5c:81:26:f9:
b6:fc:2c:18:2c:93:a3:77:85:a6:1c:f2:8d:cd:43:b8:92:e9:
3c:6a:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:25 2025 by rpki-client