Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5ae2f5f8-f7df-3cfa-9371-d869809c2e88.roa
File: 5ae2f5f8-f7df-3cfa-9371-d869809c2e88.roa (raw, json)
Hash identifier: TQY0V7X5NmcADymRlMte3XdidYigigbDAQnqHsmTTQg=
Subject key identifier: AF:3C:43:DE:B9:7A:04:DD:BF:2D:4A:AB:0B:07:C6:DD:3C:BB:C5:F6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E87D2ACE21041981A6E40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5ae2f5f8-f7df-3cfa-9371-d869809c2e88.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.60.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:87:d2:ac:e2:10:41:98:1a:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=a9667a5f-7d98-4a29-8746-a9a46bfddf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:11:8d:87:67:70:63:be:76:03:68:c4:48:
85:d8:cc:69:0c:fa:56:fc:fd:c7:90:1c:55:d5:2e:
59:1b:64:14:2c:61:a6:af:10:98:20:74:fb:fa:43:
78:ec:36:db:e6:e2:fc:11:10:c2:38:5c:29:67:82:
98:47:a1:24:5a:b8:53:d1:34:a6:09:55:0f:3e:22:
5e:46:0d:c7:f6:c1:01:64:e8:18:34:5a:df:f1:06:
18:12:8b:36:1b:97:02:c2:1e:91:8d:03:82:53:71:
18:39:61:31:01:00:c6:8e:6f:0b:cc:a2:2d:5a:0e:
73:b6:0e:4e:53:75:b2:10:a7:f9:72:46:c0:c3:85:
95:95:d2:3a:14:bb:22:19:b0:ea:3c:26:84:00:37:
c4:f7:e4:d6:6f:d0:4b:48:a4:ac:38:c7:8b:12:d6:
b0:29:01:3b:e3:b3:f2:82:9d:73:a3:40:38:30:9f:
21:74:c7:92:0b:23:2e:8f:ad:9b:fe:76:2b:0f:ed:
08:75:05:ee:43:37:80:2f:f8:51:d5:84:97:b2:80:
80:6a:d5:0b:49:31:e6:bf:7d:dd:3d:7e:43:c5:59:
75:ef:52:da:27:df:f4:71:9e:91:04:31:8b:89:8d:
df:59:f1:e7:eb:56:bd:92:6d:00:fd:15:ee:b1:72:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:43:DE:B9:7A:04:DD:BF:2D:4A:AB:0B:07:C6:DD:3C:BB:C5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5ae2f5f8-f7df-3cfa-9371-d869809c2e88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.60.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e4:23:59:c9:8c:7a:eb:84:b7:94:68:a0:0a:ab:17:3e:3d:
8e:ef:ab:ff:90:ec:a0:88:c3:55:55:51:9d:59:55:75:dc:1d:
34:73:7d:45:35:8b:a8:f9:7a:c4:39:d0:10:1a:dd:13:d6:03:
60:a4:e9:4a:3a:80:3f:03:6b:81:3e:c5:c9:55:e9:40:5d:4b:
65:d1:56:d8:8b:b0:41:40:b2:5a:18:a4:8c:2d:81:ef:0a:a7:
a7:17:43:e5:61:97:64:c1:d5:43:26:68:d5:21:a3:e7:50:e2:
b4:74:66:3d:eb:5b:1c:54:d4:d9:8d:0b:fa:dc:1a:83:5f:cd:
b7:e7:e4:65:1b:5c:7b:e4:78:ee:4a:56:82:a7:ae:66:ac:80:
ed:09:62:cc:6a:0c:b1:a9:b4:a9:32:76:55:f0:fc:89:ad:d6:
df:da:51:31:db:d0:da:34:61:a9:00:af:c9:dd:8b:1b:5d:85:
8c:95:44:2c:c2:61:51:7b:cf:1b:04:72:7c:40:84:b5:96:ba:
45:38:90:d8:f9:70:63:49:bb:48:2e:d3:12:06:72:d9:90:ab:
f7:00:1d:6c:d3:4f:e3:c6:d2:89:97:0d:65:7c:86:9d:bb:c9:
7c:50:78:57:2d:5f:c4:dc:28:80:f9:7a:8c:70:14:41:43:98:
80:b0:77:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnofSrOIQQZgabkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YTk2NjdhNWYtN2Q5OC00YTI5LTg3NDYtYTlhNDZiZmRkZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaIRjYdncGO+dgNoxEiF2MxpDPpW/P3HkBxV
1S5ZG2QULGGmrxCYIHT7+kN47Dbb5uL8ERDCOFwpZ4KYR6EkWrhT0TSmCVUPPiJe
Rg3H9sEBZOgYNFrf8QYYEos2G5cCwh6RjQOCU3EYOWExAQDGjm8LzKItWg5ztg5O
U3WyEKf5ckbAw4WVldI6FLsiGbDqPCaEADfE9+TWb9BLSKSsOMeLEtawKQE747Py
gp1zo0A4MJ8hdMeSCyMuj62b/nYrD+0IdQXuQzeAL/hR1YSXsoCAatULSTHmv33d
PX5DxVl171LaJ9/0cZ6RBDGLiY3fWfHn61a9km0A/RXusXIPOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK88Q965egTdvy1KqwsHxt08u8X2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWFlMmY1ZjgtZjdkZi0z
Y2ZhLTkzNzEtZDg2OTgwOWMyZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmDwEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnkI1nJjHrrhLeUaKAKqxc+PY7vq/+Q7KCIw1VVUZ1ZVXXcHTRzfUU1
i6j5esQ50BAa3RPWA2Ck6Uo6gD8Da4E+xclV6UBdS2XRVtiLsEFAsloYpIwtge8K
p6cXQ+Vhl2TB1UMmaNUho+dQ4rR0Zj3rWxxU1NmNC/rcGoNfzbfn5GUbXHvkeO5K
VoKnrmasgO0JYsxqDLGptKkydlXw/Imt1t/aUTHb0No0YakAr8ndixtdhYyVRCzC
YVF7zxsEcnxAhLWWukU4kNj5cGNJu0gu0xIGctmQq/cAHWzTT+PG0omXDWV8hp27
yXxQeFctX8TcKID5eoxwFEFDmICwdzg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:48 2025 by rpki-client