Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6fe04ebb-4108-3daa-bae1-2dcb6a7eafcd.roa
File: 6fe04ebb-4108-3daa-bae1-2dcb6a7eafcd.roa (raw, json)
Hash identifier: xIjmOkTMIdm/UuTIlDvQ+LvmKebKMtSaRF6Bb7mLcRs=
Subject key identifier: D4:37:64:DD:4A:29:CA:67:9C:1C:79:06:17:E0:52:0A:F5:B7:15:42
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E844736FDA8748DE75480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6fe04ebb-4108-3daa-bae1-2dcb6a7eafcd.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 6559
IP address blocks: 152.34.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:84:47:36:fd:a8:74:8d:e7:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=c2eba0fd-f60a-40d9-88d8-c34b20eeb509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:6b:ae:93:55:1c:8b:e9:be:b1:89:5a:e2:
ab:f1:9c:e0:77:5b:58:14:0d:11:b2:82:f1:23:85:
71:c3:ff:e3:2c:51:8f:cd:27:90:ad:79:70:11:07:
7d:2b:4a:9a:7f:5d:79:55:0a:c5:b2:87:30:4f:fb:
57:88:73:dc:43:55:48:a6:c8:29:d8:1b:fe:5a:cf:
51:fd:f5:f2:87:fd:b0:1b:8b:95:72:b8:e1:db:b1:
cc:bc:b1:5a:b9:18:48:39:9e:c1:e3:7c:6d:3d:aa:
86:2b:d3:d0:7a:5f:50:e8:c2:9e:94:e6:3a:5a:65:
0b:34:fa:51:0e:3f:05:39:dd:b0:77:54:cb:5b:40:
de:a8:f6:a4:4e:af:0d:50:3e:73:cf:4c:d7:a7:bd:
64:02:16:00:ec:f5:c7:36:9b:80:0b:c2:cb:59:c5:
5b:93:c4:41:03:1e:6d:17:48:e1:0b:a8:be:9d:6b:
43:16:5a:94:59:c9:db:a1:24:9e:6d:d0:5f:99:7d:
59:ce:90:60:6b:4a:46:9c:fe:05:00:ba:7e:fe:33:
84:18:3e:7d:ba:58:92:0d:f2:94:5d:5a:44:d7:d4:
c0:ca:3e:0f:d7:18:19:a6:c7:95:16:e4:32:40:53:
dc:b1:7a:a8:f3:77:b6:a5:ca:9c:3b:05:6b:1c:57:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:64:DD:4A:29:CA:67:9C:1C:79:06:17:E0:52:0A:F5:B7:15:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6fe04ebb-4108-3daa-bae1-2dcb6a7eafcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:7d:36:5e:9b:8b:ae:f4:5c:5c:a2:55:77:09:55:c1:d6:6c:
8e:a9:a7:a8:fe:4e:4b:d5:c4:58:5a:4a:e0:9f:8b:50:40:65:
9c:c9:26:fb:e7:f5:46:0a:4a:ab:d7:2e:b8:22:78:df:22:44:
c8:c5:52:33:5b:e3:7a:50:c6:b9:fe:aa:27:e8:07:72:78:0d:
e9:7d:56:f5:c5:d0:f9:30:1c:70:9f:f6:42:1e:d5:a4:07:df:
6b:18:7e:0a:aa:8b:00:74:3f:3c:19:0e:a2:66:64:f8:cf:a6:
0d:3b:08:8a:f4:eb:65:70:b7:57:be:9a:f0:6b:25:10:4a:be:
db:38:d8:14:46:04:1b:e9:14:a6:cd:f2:c3:9b:b9:e5:20:e6:
ec:69:ef:8e:f9:f2:66:b8:0d:0d:be:bd:8d:71:0e:c6:c1:f1:
fe:f6:15:89:30:36:37:1f:44:3c:63:9e:43:13:78:c6:2f:db:
a4:27:f1:0a:99:ba:7c:00:3f:a6:45:f9:0f:74:b0:a7:ad:b3:
a2:97:c7:1c:58:13:db:69:6e:68:9a:3a:26:de:6b:ab:50:4e:
7e:3c:0e:fe:ba:9e:00:6a:45:8c:16:33:a6:78:26:a4:49:a0:
be:ac:92:d9:6d:64:3b:3e:2e:de:c8:68:03:22:65:f2:74:dc:
a5:56:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:52:18 2025 by rpki-client