Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a0d4737c-9520-3ee2-a8f7-8268de1b0402.roa
File: a0d4737c-9520-3ee2-a8f7-8268de1b0402.roa (raw, json)
Hash identifier: bx0O9mZDaVbohKOxzjFs/bdHk7ab48LJFPFqhbAEm6I=
Subject key identifier: 06:04:63:C3:2D:13:B3:8B:3B:1F:36:19:47:7B:FA:D9:14:E2:8C:54
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7E2B4101B7298AAEA800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a0d4737c-9520-3ee2-a8f7-8268de1b0402.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.34.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7e:2b:41:01:b7:29:8a:ae:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=0fcb1bc6-c23c-4b49-bc19-ab00191a8f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:7a:b8:57:4d:aa:99:1e:6f:44:fa:13:50:
fa:22:f1:16:aa:41:cf:9a:85:70:96:ba:dc:e8:1d:
a3:ee:68:82:26:13:59:d2:fc:42:ed:f7:f0:3e:bf:
dd:3a:39:30:37:a0:3d:e5:78:5f:d7:8b:a2:eb:25:
b3:14:01:b6:0d:44:aa:44:5e:de:5d:40:2a:72:03:
1f:1a:c5:e5:44:3a:e6:64:80:0a:42:67:b2:61:40:
b0:26:50:13:68:7d:bb:98:32:c2:4d:8e:62:47:92:
05:e6:85:b6:be:5c:5b:63:57:93:f5:ef:db:44:b4:
8b:d8:64:39:f5:c5:a0:a5:b5:69:c0:22:f8:4e:0f:
1a:a9:b5:06:f8:35:98:14:85:3f:da:69:31:52:f1:
30:e4:1d:ac:17:e5:b4:18:97:c1:0d:c4:cd:e9:bb:
9f:34:e6:54:1f:2f:a1:63:ba:f7:50:de:95:f2:a6:
26:9c:21:77:40:ee:07:0d:6e:77:28:d2:d2:74:3f:
20:fb:81:17:ee:f2:3c:95:55:2f:28:ed:87:2f:10:
6d:82:5f:9a:72:5c:a1:7d:39:11:36:5b:a6:5b:ef:
fc:0b:79:7f:bb:7d:b2:8c:4d:0d:3b:a5:47:95:33:
4d:9d:a2:e1:19:b9:3a:34:9a:c3:a7:97:87:35:9e:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:63:C3:2D:13:B3:8B:3B:1F:36:19:47:7B:FA:D9:14:E2:8C:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a0d4737c-9520-3ee2-a8f7-8268de1b0402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.34.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:70:82:1c:43:61:81:78:39:df:8c:d9:3a:9c:a7:f9:7f:39:
93:e9:49:61:10:05:4a:62:4f:fd:e9:1d:b3:a7:db:29:f7:02:
09:76:1b:b9:9e:a5:17:f5:7c:09:e2:3a:6f:13:72:c0:e1:71:
0b:1e:f8:d0:79:a6:bd:34:c4:ee:c7:07:aa:be:cb:32:58:28:
8f:68:a0:6d:27:3f:91:fa:c9:2b:f5:cb:6a:b4:44:8e:a9:9f:
20:7f:a5:d3:fc:62:1a:f5:3c:10:00:f9:34:5f:c4:1c:60:43:
42:5b:cb:99:e6:50:5c:d7:6f:75:2a:aa:c6:d1:52:9d:e6:33:
61:20:ca:8f:3a:8a:b5:83:b6:e0:a8:f6:f6:12:a0:0b:ba:68:
14:50:44:d9:1b:5b:5d:22:a2:e3:91:61:1c:57:ae:cb:71:62:
da:fe:13:5a:42:3a:06:3b:90:c5:14:f4:7c:7e:ec:5a:1a:ee:
94:d6:12:fc:92:6e:5f:b8:2c:a4:fc:46:95:1c:48:c1:a4:a5:
0c:db:5f:c5:9e:6a:eb:f8:c6:dd:f3:e8:e8:06:70:1e:24:38:
e7:83:28:08:9c:ed:e9:7f:58:8e:b5:9b:c7:e5:46:1a:71:de:
60:35:2f:ee:0c:b1:56:3d:b4:d7:5e:06:5a:de:89:47:da:54:
78:bc:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:24 2025 by rpki-client