Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa
File: 662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa (raw, json)
Hash identifier: G4bokk6GQjsiUbCW8shK26K5buWDaCw6d6cHRZuoqBY=
Subject key identifier: C8:63:F0:85:28:62:96:15:81:69:41:58:61:58:02:0D:0F:BF:33:6D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7E8542BFFBEDE8E56E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.48.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7e:85:42:bf:fb:ed:e8:e5:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=136bf84d-3d8d-4c67-a311-b836eb03585b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:d9:69:79:7a:c8:df:2f:6a:22:cf:47:72:
25:52:f8:67:f3:82:95:a4:49:d9:7c:3b:48:0a:9f:
e0:57:bb:62:51:3e:52:51:f9:c5:db:17:63:c1:3b:
f4:d6:15:f6:77:b5:0b:49:a6:54:88:99:09:d6:72:
b7:62:8d:6e:b3:74:1b:8b:ab:37:ae:a7:9c:92:62:
6a:72:44:a6:42:96:3d:76:57:b7:bc:9b:e9:08:1d:
fc:4e:12:d5:e3:c0:f9:74:3a:9c:1d:6c:fa:bb:14:
40:cf:6d:f7:94:57:74:d6:46:6a:97:2e:fd:b7:4f:
72:d0:92:ff:96:4f:8f:c7:94:ab:e1:c0:8c:87:64:
75:98:e7:13:09:1b:d4:89:7f:39:14:32:e7:2b:25:
34:ad:c3:74:ff:6b:ff:61:49:b1:c2:7a:0b:9d:70:
73:0a:3c:11:15:26:2b:da:32:74:cc:00:79:f2:03:
0f:12:bb:69:9b:bc:12:17:d2:ee:2c:a8:ce:b8:0c:
68:12:48:b1:1b:1e:75:2e:e9:2b:68:54:e2:43:22:
ff:18:f9:38:42:dd:ac:69:15:06:79:40:82:7d:4f:
11:a8:6c:92:97:49:be:2c:ce:42:95:9a:1d:69:4b:
cd:6a:b2:37:93:4e:7a:9f:96:00:d5:5b:42:5e:25:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:F0:85:28:62:96:15:81:69:41:58:61:58:02:0D:0F:BF:33:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:4e:ff:47:f5:df:bc:56:75:02:4e:5c:f7:92:89:46:44:2c:
b4:af:5b:fb:1c:bc:3c:12:5f:3d:aa:d4:69:25:7d:79:b1:47:
18:3e:c6:b2:2b:54:5b:67:55:75:c0:c1:39:8b:2f:85:53:46:
36:a2:13:68:8b:7e:13:4a:93:8d:6e:2b:a3:f8:e8:61:11:d8:
e0:8d:59:76:61:ee:bf:49:34:16:20:bd:2f:8f:75:5f:c8:81:
7e:66:f8:5b:1a:8e:43:57:2e:f3:fe:0a:0d:e4:d3:05:f6:f2:
67:b0:3a:29:94:27:96:51:94:d9:51:cf:62:46:78:54:37:3c:
37:cb:57:6f:ac:16:54:1e:cd:f1:d4:2b:54:10:7a:47:f0:f3:
7b:98:a7:ef:fb:79:f0:86:cd:e6:03:f5:b3:72:55:76:1a:73:
88:79:a0:03:d6:4a:e8:75:b4:46:f4:f8:7d:4c:56:21:59:0b:
ad:25:5b:27:01:17:63:f5:ab:2b:de:45:a2:a6:b5:72:a7:dd:
b8:2a:19:b6:3a:44:de:58:ee:c4:b6:f3:7f:9f:53:2c:8a:f1:
b6:15:e4:e1:62:3a:81:83:7c:80:fb:1e:01:b4:28:90:13:88:
1f:ed:ea:02:da:bf:89:f4:4c:13:91:43:a1:69:d1:e3:ad:fa:
1c:29:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:14 2025 by rpki-client