Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b3d9694-9366-3f5c-b8e1-e91a806b19e9.roa
File: 5b3d9694-9366-3f5c-b8e1-e91a806b19e9.roa (raw, json)
Hash identifier: 7JawF7oigPFyV3O4fJITmqRLsSIIiMLYGyfRnMyVBNM=
Subject key identifier: 9B:AA:28:90:E6:89:69:03:FC:28:BB:BF:44:D5:58:76:28:9E:46:40
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E85808A23A382253B2BC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b3d9694-9366-3f5c-b8e1-e91a806b19e9.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:85:80:8a:23:a3:82:25:3b:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=09014c88-8207-4c5d-9e33-a24eef19fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:a3:a1:48:57:69:88:0a:c9:68:27:cd:aa:
34:ec:38:34:40:01:10:84:d1:e3:8b:19:38:8f:f3:
01:69:ca:d4:de:af:1f:2c:82:78:ea:13:ee:73:8e:
ff:54:ce:ce:66:e0:dc:73:bc:df:b4:07:d5:b2:17:
14:6e:f0:6e:8e:91:51:34:f0:1c:13:ce:d3:63:cd:
82:52:99:e6:9c:a4:20:e7:a2:2d:84:dc:0c:36:92:
ab:90:f2:c6:31:f3:f8:53:08:35:67:4c:43:09:07:
e7:8f:5b:d8:e6:e9:90:bf:c3:98:b7:4f:50:c3:b4:
c5:6f:35:99:ba:ad:1d:ae:40:1b:7b:f9:c9:d5:97:
a1:68:16:99:74:d5:b5:15:20:ab:84:28:19:1a:32:
46:11:0f:12:97:0c:f3:21:34:d3:73:8b:5f:85:0d:
22:77:16:f6:ad:33:1f:7f:ba:fe:fa:d2:a9:35:c0:
32:32:36:8b:8b:3e:e5:c3:9a:6d:73:27:92:61:ec:
ee:c2:46:e0:97:77:04:5b:dc:f5:0b:6a:8c:49:6f:
f8:41:32:e9:28:92:4a:52:89:3e:54:23:cc:39:83:
b2:de:38:06:c9:32:de:c5:7c:21:5a:37:42:1e:d9:
c8:9f:e4:43:ad:d7:47:c2:51:cd:54:1a:8d:b7:e2:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:28:90:E6:89:69:03:FC:28:BB:BF:44:D5:58:76:28:9E:46:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b3d9694-9366-3f5c-b8e1-e91a806b19e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:bb:b0:cc:6e:37:dc:4c:a7:46:f1:1c:ef:f7:d5:99:9f:25:
c0:9c:31:38:e7:0f:9c:72:3f:7d:f3:79:be:14:61:79:ec:e5:
89:c8:5a:68:81:9b:d0:8f:e4:db:31:ce:39:f9:71:07:14:bc:
e9:04:8e:c6:6f:6b:e9:95:cd:03:35:3b:56:50:13:09:e0:56:
22:2b:b5:15:29:5d:9b:f2:44:58:7e:9d:ea:d1:d2:06:7f:cd:
7c:c7:d2:81:a4:4e:da:95:05:60:3e:48:65:7c:89:98:86:7d:
22:ed:47:b5:7e:0a:aa:e9:4c:9e:ed:b1:37:39:e2:f0:cb:35:
f2:68:1e:0f:81:05:44:6c:36:f4:d1:a2:3a:89:e5:05:11:0f:
53:59:b3:13:ec:3a:0e:f7:eb:1e:4c:51:41:cf:99:96:1a:f9:
a4:1e:ef:0b:06:5c:a0:ad:58:f0:50:a6:88:66:8e:9d:fa:61:
2d:3f:92:9a:9f:3b:f6:87:1c:8f:ba:e6:d0:4b:b9:8b:21:73:
7d:3d:4d:fb:17:b0:64:e5:41:20:a2:97:5d:b0:0f:e1:85:5c:
db:28:aa:1c:84:6f:8a:6a:06:a9:26:a8:08:60:0c:13:96:6e:
70:36:b9:7a:27:f4:ea:2a:00:e1:ed:f1:51:66:bd:b5:9d:07:
cc:2d:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:36 2025 by rpki-client