Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9eb4e2d0-28b1-37d9-88dc-3816ca1d5102.roa
File: 9eb4e2d0-28b1-37d9-88dc-3816ca1d5102.roa (raw, json)
Hash identifier: Lh/XZhNDb/BmJb2JHVGYRsIxLoB+dygIxXG2pmCtu48=
Subject key identifier: 15:D1:38:A0:C1:C0:C0:1E:44:3A:0C:4D:43:90:BF:B6:B9:D2:98:B8
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7F3BE9807089F84855C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9eb4e2d0-28b1-37d9-88dc-3816ca1d5102.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 192.154.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7f:3b:e9:80:70:89:f8:48:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=bb10c1da-d336-436a-b7eb-1b795f72360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:cd:48:37:47:fc:62:68:50:6b:87:52:53:
a9:c7:d0:09:b3:fe:ec:2a:9c:91:f7:c2:a5:36:10:
f0:84:a4:eb:67:20:6e:e2:33:cd:77:5c:d4:90:58:
8a:3c:78:13:4f:50:79:b8:b3:24:4d:cb:76:c2:41:
64:d3:09:dd:89:d7:25:d8:14:ef:16:06:90:50:3e:
55:7e:ce:9e:23:5e:55:2d:c0:3c:b0:53:02:39:9e:
68:05:20:64:80:20:05:b4:a5:fc:cc:04:08:a6:34:
4d:ea:48:bd:ba:c3:1e:e6:ec:c4:c3:dd:aa:b2:71:
31:be:d7:7e:e6:67:50:f0:02:7e:fa:2c:0c:be:e9:
8f:fa:71:d6:cc:c3:0f:fe:b2:3e:e4:a7:d8:1e:80:
6a:a2:e2:5c:2a:6f:54:ff:be:88:7b:ac:68:d5:c2:
4d:25:78:91:c6:96:13:56:7c:b8:c7:32:c1:b6:1f:
8c:1f:f8:28:a1:77:11:3a:ad:5b:6a:48:1c:0c:39:
2e:0e:80:c9:28:88:10:30:6f:96:50:f5:ed:8d:63:
36:e2:a0:c0:11:69:a7:0c:17:a7:45:4a:64:48:3c:
09:a8:7c:00:a3:24:45:d1:c0:a6:57:38:69:75:89:
94:2e:42:13:4d:b2:dd:65:db:92:35:e8:9c:4a:e0:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:38:A0:C1:C0:C0:1E:44:3A:0C:4D:43:90:BF:B6:B9:D2:98:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9eb4e2d0-28b1-37d9-88dc-3816ca1d5102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:34:2d:69:a7:02:45:bd:3b:23:d3:02:dc:35:3c:2b:81:20:
43:b0:e3:3d:28:1f:fe:28:af:7b:49:de:75:96:4b:ac:cd:73:
5f:4d:cd:2b:73:d9:26:bf:9d:39:ae:1b:3d:0f:f8:c8:63:96:
bc:30:41:f3:a8:91:05:4f:8a:54:86:a8:b8:b6:40:f6:0f:4d:
0b:bf:1d:16:af:81:0a:43:69:33:89:16:10:8e:1b:d3:ab:b5:
e3:b1:66:91:07:83:73:0f:38:43:fe:83:11:04:8c:55:7f:65:
fb:13:57:48:6f:c7:f5:9a:d1:d2:80:c0:27:de:8f:0b:ca:6a:
d2:dc:ca:9d:be:49:0e:71:dc:8a:04:4e:8c:8f:08:59:51:3c:
a5:cf:08:09:25:99:07:c4:6b:22:25:23:c7:5f:17:b2:ee:31:
d3:fd:1f:0e:bb:24:80:f7:dc:09:88:1e:12:ce:51:11:c7:66:
06:e5:4b:fb:c4:56:13:21:de:3e:a5:86:bc:79:3b:a7:1c:76:
f6:61:04:87:a5:ca:54:7b:c4:bc:a4:43:1b:bb:ac:b1:fd:11:
0e:29:26:04:2a:95:ca:17:13:bc:7e:44:7a:58:92:a7:af:16:
ea:e1:80:98:7e:73:c7:23:76:ab:fd:da:20:f9:5b:fe:c1:6e:
32:18:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:38 2025 by rpki-client