Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa
File: d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa (raw, json)
Hash identifier: QbiymfBR/DJ05WPrv2HYMCoL2D54EQBuhUjSem8MzxI=
Subject key identifier: 66:61:0B:97:A8:59:0B:9B:36:0C:19:67:A5:95:41:1B:B2:34:E5:99
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E819FEFE696F7EFAB9120
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.22.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:81:9f:ef:e6:96:f7:ef:ab:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=868c22e6-08f7-4106-b8de-ba8b6ff1c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:d0:e0:1a:3b:5b:04:56:0e:cd:17:0e:cd:
66:ab:a8:3d:6b:22:4d:f8:68:36:78:85:f2:a9:c2:
d8:82:0b:a3:ff:56:1a:dc:cb:1c:df:8e:35:86:1e:
7d:e0:88:7c:3c:70:0c:54:69:86:09:80:b7:ce:90:
48:9a:b7:0c:23:a7:26:67:21:7b:6b:fa:9c:66:e4:
08:e1:88:42:20:63:91:90:4f:e4:5e:35:cc:a3:5d:
7f:1b:f1:57:99:1b:75:b6:71:22:25:75:e2:ce:9c:
e1:0c:8f:59:55:af:75:84:8f:d0:3e:8e:ce:9c:a8:
ce:a9:f5:c1:f7:5e:e4:a8:8d:2e:ca:a1:94:22:ce:
02:49:5c:b7:af:28:be:f9:71:a2:34:38:74:e3:81:
fd:8f:ac:1d:4f:c0:82:e9:3f:12:f5:3c:a3:3d:53:
e7:14:19:2d:03:d9:b3:51:05:4e:db:96:70:fd:c7:
a9:93:a3:9f:a3:c9:b4:49:e4:a6:63:68:dd:42:f4:
4b:8f:8f:37:c4:32:d6:ff:55:35:ce:43:c6:94:66:
d9:2e:3d:d1:c1:d1:30:b8:4e:f9:2d:64:90:aa:6d:
40:65:f0:fa:16:fe:4d:71:d6:4f:b3:75:3e:0f:d3:
a3:96:a5:b2:73:22:79:37:d7:f6:a8:56:77:99:8a:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:61:0B:97:A8:59:0B:9B:36:0C:19:67:A5:95:41:1B:B2:34:E5:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:e9:80:12:8b:c6:83:fa:28:73:5c:ea:35:7e:67:1e:10:24:
0c:9b:f5:96:92:45:86:ef:4b:07:9f:75:37:4e:ad:e6:c1:74:
d8:78:c5:29:ff:87:2a:5e:58:e5:0f:de:35:fd:4a:f7:c4:7b:
14:15:f9:f4:47:80:6e:90:5f:13:ec:a2:4c:22:c4:89:46:30:
42:a3:cf:ee:08:06:23:ab:27:05:6c:29:00:6b:01:ce:6b:b9:
38:e3:15:bd:75:89:e9:dc:2d:f3:9d:55:36:66:4f:d4:4c:0e:
b3:c8:e5:43:14:44:e1:f6:1e:f4:f0:6f:f4:74:b5:6e:1b:d0:
e6:ef:7a:06:4c:0b:84:8f:f8:c6:63:b3:84:3d:a4:69:55:25:
0f:7d:6b:98:da:50:13:f5:bc:ee:83:d8:d2:2e:21:f0:dc:99:
f3:28:ad:89:fc:9f:12:00:87:6a:19:4e:5c:ad:a5:08:99:68:
8c:cb:27:ea:c0:cc:67:ab:18:f0:e4:8f:65:af:34:af:aa:47:
f5:5e:d3:f3:5a:64:8a:40:24:f6:ee:0e:ce:c2:2e:4f:23:92:
e5:d4:4c:26:27:e0:da:46:85:c1:4a:8c:1b:30:db:da:bf:26:
7c:15:f8:03:3d:3e:9d:60:5f:d6:c4:ca:b9:7d:e1:7c:bb:8a:
44:6c:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:33 2025 by rpki-client