Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89e5e646-98fc-300d-845f-268c6ae278d4.roa
File: 89e5e646-98fc-300d-845f-268c6ae278d4.roa (raw, json)
Hash identifier: J3xJ7Avb6RFd6Qva4jdoWW+OO0cGpUZUxjGnfDvJxoA=
Subject key identifier: 48:95:39:69:28:C7:8E:6F:80:BB:DE:C7:1D:4D:CE:80:F2:8A:AE:C2
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E85CB56BFE55E712CA060
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89e5e646-98fc-300d-845f-268c6ae278d4.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:85:cb:56:bf:e5:5e:71:2c:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=19612791-12f5-40d0-92d3-f4d4bb7a3fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:6e:65:3a:09:3a:0a:1e:30:2b:ab:34:54:
52:c5:90:3f:26:e0:0b:0a:12:db:ec:43:53:d5:b3:
01:42:17:27:f6:0b:dc:2f:28:22:cc:33:f9:6e:df:
22:64:86:ed:84:ef:68:03:81:78:56:c5:85:7f:51:
df:4d:a5:b2:de:f4:95:c0:72:76:c9:07:78:0c:e6:
d7:de:20:af:8a:3c:54:41:a9:76:e5:27:d3:d6:99:
9a:59:61:2f:92:2e:0c:76:eb:7b:28:24:eb:5f:5a:
d3:b6:65:24:f2:89:6f:30:0c:00:c0:77:ad:1f:70:
3a:d4:ba:75:5a:44:ff:dd:5a:c2:c1:9d:10:c5:f1:
c0:1c:ab:5d:e9:42:c6:52:68:78:c6:63:5e:a1:5e:
75:c5:9a:47:6b:6b:17:54:b5:94:f1:51:39:3a:3b:
79:2e:30:4e:3f:5c:db:86:c4:dd:74:12:ef:91:f3:
bc:a0:4c:4c:6c:73:63:1e:b6:15:b1:36:58:42:ba:
f8:e2:0b:b5:b8:f5:45:46:17:99:c8:e7:da:f3:f4:
52:a5:3b:ea:6d:b9:6c:ad:47:ad:23:d5:6d:13:32:
85:ef:ea:1c:05:d7:df:e6:ad:da:70:ca:a5:ee:4d:
5d:b6:76:0c:8d:18:b8:82:9c:cd:0f:06:fb:25:b2:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:39:69:28:C7:8E:6F:80:BB:DE:C7:1D:4D:CE:80:F2:8A:AE:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89e5e646-98fc-300d-845f-268c6ae278d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:e2:9b:f4:77:06:02:71:ec:f4:11:c6:66:1b:9d:a4:2a:81:
f9:94:1c:5c:bc:57:c5:2b:26:85:cd:2b:28:10:87:60:67:6a:
fb:15:b0:fd:94:47:0d:80:c2:bf:22:c0:2e:5f:7b:6e:63:10:
f0:5f:e9:df:28:b4:dc:ad:30:c5:39:da:d0:06:15:04:06:12:
01:b2:ce:9d:fd:2c:2c:41:0e:bb:fd:47:3f:f4:3f:b4:87:58:
bd:81:ff:74:d7:74:e0:26:cc:0a:c4:7e:69:18:0b:8d:b6:c2:
4f:68:13:ec:f5:98:5c:ac:e4:5d:b3:e5:10:e5:40:b3:44:c5:
fb:9c:59:07:49:fd:cb:49:31:6b:96:4b:b9:30:cb:61:93:a5:
bd:c5:0f:1c:04:7c:a3:99:03:92:33:df:68:ba:cd:a3:7a:de:
d5:b4:50:6a:dd:13:b0:60:72:24:d3:c5:cf:a1:6a:20:e3:60:
f3:cd:7b:0a:04:13:20:90:6b:f8:7d:45:0b:26:d0:ca:52:5a:
2a:ae:5b:ba:c6:3b:94:76:7b:1b:65:e5:1a:8a:ea:6b:a0:f8:
15:63:39:3d:a2:52:ee:51:21:c0:9c:8f:37:ad:e4:4c:7d:10:
0d:2a:c3:83:d0:0b:8f:3e:ee:69:d4:4f:81:29:e6:6b:19:aa:
34:7a:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:34 2025 by rpki-client