Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b542f274-895f-333f-b519-72977441aa1b.roa
File: b542f274-895f-333f-b519-72977441aa1b.roa (raw, json)
Hash identifier: nfCdkH/7xH83mOENdfXC+JxSeqYWOWjAufYMWeJvm6s=
Subject key identifier: 5F:EE:E1:B2:F0:8D:8C:CB:B5:B0:EE:58:1A:30:3C:89:D3:40:D3:2D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E836BA135DF6A0A7F30A8
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b542f274-895f-333f-b519-72977441aa1b.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.26.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:83:6b:a1:35:df:6a:0a:7f:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=c488b1a4-11c9-4fbb-aa2c-b04caf31b94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:4e:d8:43:fd:be:d3:95:c3:b6:dc:7a:90:
ca:2b:bb:70:2d:cb:15:2c:2f:2d:95:23:7e:c2:58:
9f:dc:ed:36:91:f8:d6:7b:99:37:21:78:19:78:f2:
ee:38:4c:c6:fa:8e:d0:2d:82:07:4d:4d:a4:cb:6f:
a4:be:68:1f:72:ba:d6:f2:7e:2f:89:15:6a:be:31:
e0:6e:b8:d7:84:5c:b5:79:0e:01:10:69:41:a7:5a:
d9:17:39:55:d2:4c:8c:d9:b6:6f:e7:3d:7c:61:27:
4e:0a:9b:9c:ed:5b:85:15:1c:96:5c:5f:50:20:6d:
1e:05:eb:0d:6c:3a:44:cc:5e:87:ed:85:49:26:d7:
17:22:ab:fd:35:fe:33:49:ec:14:80:92:49:8a:df:
12:b2:52:e5:8b:4b:f6:1d:c1:b3:ca:ce:b5:bd:16:
6c:8a:47:98:5c:b9:6e:1d:bc:5d:f4:1a:0f:73:20:
d6:2b:ad:07:ef:ec:cf:6a:43:de:aa:25:04:f7:ff:
78:ca:cd:f5:b5:c4:77:2c:a1:d4:46:52:ed:da:08:
db:68:eb:cf:c9:a5:87:5d:b1:b4:63:a3:3a:63:cd:
4d:43:49:b5:5b:56:e0:4b:ba:de:2c:67:af:19:74:
24:df:da:6d:9f:c1:97:dc:bd:37:84:ba:be:08:4d:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:E1:B2:F0:8D:8C:CB:B5:B0:EE:58:1A:30:3C:89:D3:40:D3:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b542f274-895f-333f-b519-72977441aa1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:6f:7c:a5:15:0e:5e:ac:1b:40:0f:60:c8:27:b6:b8:a4:4b:
7f:ba:f3:c7:b7:bb:47:b9:68:2e:d0:91:c3:33:f3:63:38:47:
b8:35:15:8d:ee:e1:cc:e3:1f:8a:94:a3:19:cb:65:9f:b5:fc:
69:47:e1:b4:cb:71:5f:a9:ff:2c:7b:19:a5:ce:5d:91:31:5f:
22:70:de:df:23:27:1e:46:52:18:dd:3b:d4:5d:91:d9:41:be:
22:d4:a1:3c:63:fd:d4:47:cf:af:06:26:7e:6c:6b:ec:06:0d:
e0:32:32:fe:2e:7a:ad:81:72:b0:0b:8d:ea:b8:5c:9f:49:38:
15:a5:74:d0:8b:28:cb:0f:f9:fa:56:38:c1:0f:ec:7f:8f:18:
cf:79:75:70:30:c1:40:ee:91:17:f6:57:0a:2d:af:45:74:52:
4d:df:eb:56:9b:30:ce:28:51:be:9a:55:65:7d:dd:20:2a:e6:
a4:c2:5e:4e:57:db:c0:ad:20:a3:b6:06:a9:16:b9:6a:b7:7d:
f4:71:1a:4a:6a:35:f6:3f:05:9a:9d:df:86:3c:ae:1e:e2:b3:
08:f5:3e:38:29:0b:53:b7:4e:e8:83:91:ff:66:20:25:d0:3e:
bb:d4:a6:0f:82:dc:01:8d:0c:f2:3e:eb:2c:97:74:bc:26:f2:
14:3a:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:13:24 2025 by rpki-client