Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa
File: 72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa (raw, json)
Hash identifier: YaGkhF4EEnriu7b2BEwuHgalqw5K9zGdO2+PQvcul+o=
Subject key identifier: B9:4E:ED:58:1E:47:6C:9C:C6:76:51:BA:30:94:7F:B1:89:12:A7:F8
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7ED23B3A4973ED35B600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.60.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7e:d2:3b:3a:49:73:ed:35:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=31bb2e5d-fd70-4a18-a72f-6df586abefa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:b7:96:08:f8:26:8d:f5:49:a0:0c:53:07:
9e:68:1e:25:68:37:35:2c:6f:4c:5b:17:6f:d3:5b:
1c:f4:fe:49:2a:d3:46:cf:14:26:7b:88:1a:a2:72:
37:0e:6c:0f:6d:4d:0a:e2:6d:c1:a7:b1:24:f1:4d:
54:34:55:11:34:5b:86:c9:10:ea:f9:59:bd:c9:76:
b8:1b:6e:e2:73:ac:85:cd:49:b5:96:8f:12:ae:2a:
ae:d7:a9:ea:37:5d:63:92:43:dd:96:7f:39:a7:75:
23:45:7a:36:5c:70:89:a0:82:72:b3:1f:64:37:59:
91:8b:c9:bc:10:45:ef:55:b4:a7:89:27:14:33:55:
08:40:42:7b:e3:31:83:16:f7:1a:78:0d:49:b6:ad:
ce:85:d8:77:51:2f:9e:f8:9c:4c:f1:db:7b:78:7a:
b8:e2:a8:a5:45:dc:fa:22:c2:eb:17:b8:ed:47:e4:
60:19:ed:af:fb:c4:3a:b5:3d:ee:ec:77:05:f5:dc:
35:e5:d4:33:fb:c9:ab:bf:16:54:88:67:b1:81:e3:
93:a2:6d:c4:6c:6d:43:f4:87:f1:71:f5:a8:9d:2b:
6b:5f:a2:e4:22:eb:92:79:6c:77:2a:07:46:4b:51:
3d:06:26:49:ce:93:92:97:c8:75:86:9b:b4:8d:df:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:ED:58:1E:47:6C:9C:C6:76:51:BA:30:94:7F:B1:89:12:A7:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.60.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:5f:4e:9e:70:e3:73:33:8a:b2:0f:a0:ed:ee:30:21:b7:b3:
14:07:d8:c4:dd:a2:3b:12:f0:48:de:db:95:6a:95:cb:42:cb:
5c:86:0b:93:51:ec:7a:5a:9f:d9:df:b8:bd:43:1d:6d:12:62:
e8:27:24:ca:90:f8:25:4c:aa:b9:ce:06:21:4a:63:67:cd:6b:
67:01:8e:31:7c:de:78:0f:a4:49:05:2c:8e:fe:9a:a2:f8:92:
4f:09:52:b5:47:db:26:43:06:24:df:fa:d0:05:e8:51:99:e8:
df:f0:04:32:4d:14:99:77:93:93:0e:c1:49:cb:c9:2f:6c:2b:
a8:6b:73:a8:f5:49:72:73:41:f7:72:63:d2:c3:51:fa:66:33:
02:b5:fe:4b:14:0c:a9:64:f4:ed:69:7a:b3:69:63:87:39:40:
0e:b9:ee:78:15:06:c5:f1:bd:e6:14:b6:18:18:d1:9a:db:52:
43:93:5e:59:f7:23:f7:f0:e3:fe:90:b1:0f:01:6f:b7:83:79:
f6:f1:52:f6:c7:0e:c8:93:9c:84:61:d3:ea:35:d5:00:d2:e8:
84:ca:08:a3:f4:59:ba:5f:ab:40:d5:3d:c0:1a:b0:3e:cc:77:
f9:6b:5a:41:a4:cb:84:fa:b5:6a:63:16:56:04:88:94:74:10:
2b:dd:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:07 2025 by rpki-client