Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/720e57c1-1dec-32df-be63-ff05d7d55450.roa
File: 720e57c1-1dec-32df-be63-ff05d7d55450.roa (raw, json)
Hash identifier: 4W/s46L0JpN6+mdp9LYUeSm1AskStwCQ6aY2ryrFzZ0=
Subject key identifier: 69:5C:53:4A:77:E1:62:B2:0D:72:7F:0F:72:B8:78:36:17:8E:FD:3A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E852AE84AF16086037D80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/720e57c1-1dec-32df-be63-ff05d7d55450.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.45.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:85:2a:e8:4a:f1:60:86:03:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=a3b3fea1-6970-4644-872a-6a7a8c60a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:91:e8:2c:06:93:0a:33:d3:d6:8c:c1:98:1a:
15:b9:99:60:2a:79:cf:ff:70:f5:9f:7b:21:bd:61:
82:4a:ef:00:f2:b3:f3:af:61:1d:ea:1c:3f:cb:92:
8d:59:9a:11:5d:fd:2b:c0:70:0c:f3:12:ae:1d:ae:
66:9a:87:cd:6d:be:fb:09:f4:61:95:32:ea:46:cf:
05:a5:b6:49:74:bc:bf:d1:2c:45:10:6a:44:98:6b:
c6:68:d4:2b:41:3f:3c:e0:b3:d7:96:a2:96:ad:70:
bb:36:ee:11:b8:0a:1e:83:94:5f:40:9c:43:e4:32:
7e:93:c1:c6:7c:23:40:99:21:93:e1:3a:e0:6b:43:
8b:f7:a3:33:78:55:7d:57:03:a0:3e:ee:e3:cc:07:
9e:72:0a:48:00:b9:24:1a:61:de:ea:8d:6d:00:bc:
1d:97:9d:5e:d0:c9:d6:7a:2c:ad:ff:a0:cf:63:c4:
33:ea:ee:93:5b:5c:d8:2e:46:44:6b:2c:07:db:ba:
f4:df:91:22:71:81:64:eb:e7:1c:fc:1c:a2:ac:3d:
f5:87:30:06:14:67:2d:9c:4f:6a:bb:f0:72:54:9d:
d2:a6:c1:43:d9:f9:c0:e8:9a:82:ce:64:93:9c:04:
54:4a:3a:04:04:e6:22:a2:3c:ca:5e:c7:2c:c3:ad:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5C:53:4A:77:E1:62:B2:0D:72:7F:0F:72:B8:78:36:17:8E:FD:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/720e57c1-1dec-32df-be63-ff05d7d55450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e5:d7:04:84:9f:c4:13:1c:7e:05:6d:ab:17:dd:fc:29:ac:
f6:8d:f8:db:d1:9b:4e:c8:68:d7:f8:73:58:a7:cf:8a:df:23:
dc:16:d8:96:18:0f:08:e5:56:5e:93:3b:4f:3d:20:db:d4:6d:
59:66:36:e2:5b:c9:49:11:76:c2:2e:ed:1a:73:f3:98:3f:ef:
74:74:0d:61:53:ad:62:f2:51:2d:cb:a4:20:35:c9:13:cb:f9:
e8:c0:4e:39:2e:12:00:46:52:be:6d:b8:b9:8f:a0:25:2c:80:
7d:0a:f8:9d:5e:01:27:a8:69:d6:3d:2a:9b:d1:99:4f:e5:be:
00:5c:5d:4b:76:a6:df:e8:6e:d2:22:69:53:06:a5:40:48:71:
d6:f3:b2:c7:19:2e:fb:24:8b:be:3a:e5:9f:36:53:fe:bb:8c:
3a:15:2f:3b:9a:24:2a:63:c3:ae:aa:22:8b:01:a9:57:f1:31:
1e:9d:fe:00:0a:dc:44:04:41:b9:f2:92:08:2d:31:fe:12:ea:
13:6c:b1:57:21:5d:90:aa:1a:51:45:65:7f:1e:66:08:e0:24:
2b:f2:43:2f:48:0e:12:dc:7d:df:b8:0c:c1:f8:fa:e3:fc:7a:
12:de:70:85:c7:ed:2c:4b:53:3e:b4:46:12:1c:8b:f1:c3:98:
70:fa:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:30 2025 by rpki-client