Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa
File: d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa (raw, json)
Hash identifier: kMQ4wUq2AYoqVMcRCaqh6MHFthnq/6dNNYyhLBnzt5A=
Subject key identifier: EC:40:66:52:89:7F:DB:98:0C:93:1E:DE:39:75:74:DE:97:90:5F:62
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E80D75C9FD04E671F75E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 11442
IP address blocks: 152.14.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:d7:5c:9f:d0:4e:67:1f:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=ecf3d95a-29f4-4eb3-aa8e-ccd73a4ab1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c4:a2:d7:ff:18:4f:89:18:38:b2:18:df:80:
87:4e:fa:f3:88:68:da:a1:79:31:41:6b:19:a3:cd:
fb:96:cc:ef:39:a0:fc:fd:39:a0:da:1e:d7:ee:70:
5f:da:67:a4:82:58:fc:bf:4e:28:5b:5b:e6:e7:6a:
22:3b:74:05:32:fb:40:d2:04:06:30:b5:a5:a0:9d:
03:e1:f0:0a:e7:46:d3:25:f5:3a:30:0f:57:a7:09:
4b:0d:fe:bd:51:79:36:a5:3b:b5:4c:22:0f:1e:cd:
a8:57:b4:19:28:9b:13:76:6d:1f:76:bb:f5:a6:36:
88:70:4a:62:9f:b2:6d:aa:59:d0:d9:eb:e6:75:21:
ae:cd:14:b3:f1:70:c5:4d:d4:ce:da:70:46:1b:97:
6b:31:a7:19:c1:7e:8a:a2:71:d4:72:14:b0:17:bd:
66:53:f6:2b:61:42:4d:57:83:7c:02:20:89:03:58:
03:27:13:23:6a:76:4c:3c:33:7b:3f:89:f6:99:13:
8a:34:f2:ce:43:cb:1a:fe:8a:cd:57:29:28:3f:6d:
2a:b4:ef:2b:3d:b8:db:f6:a2:bd:f5:2e:54:a4:10:
53:97:d9:5b:c9:cf:59:38:27:5c:31:22:a5:aa:0e:
0e:7e:e5:34:46:2e:c7:e0:cd:eb:96:fd:78:8c:cf:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:66:52:89:7F:DB:98:0C:93:1E:DE:39:75:74:DE:97:90:5F:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b6:d4:f8:ab:49:3d:d2:e8:d7:1a:6b:1d:32:7f:7d:08:fd:
6e:4f:5e:0a:cb:fc:76:c0:cb:05:df:98:46:c3:32:89:0f:6c:
44:a8:95:50:e4:34:c6:cd:bb:28:a2:a4:b4:d0:12:8d:60:c8:
a6:57:e7:83:ca:de:a0:18:b5:2d:dc:5d:fb:ac:e9:49:17:ac:
7c:83:f8:16:cc:d6:1a:ca:f1:5f:8d:4c:2a:c2:68:98:85:c7:
59:f5:42:c5:71:8d:a8:cd:be:ad:44:61:2e:5b:10:ce:12:13:
19:9f:a7:f5:27:e6:68:ae:e3:6b:61:e4:48:72:71:f7:e5:cc:
4f:5e:57:b2:73:01:c0:24:f0:22:65:71:0e:b5:25:4b:4e:e1:
3f:e2:d8:b2:b7:61:9b:24:bc:5e:36:ec:c5:d4:a6:5c:d2:68:
6a:a8:71:4a:95:35:a0:38:66:b7:7c:7e:fc:df:09:7a:8c:eb:
22:70:95:f9:f6:53:45:38:1b:0f:0f:c5:7f:dd:f3:a4:28:69:
1e:59:19:cc:6a:37:c6:f5:c6:91:8e:ad:e4:ad:ae:1a:09:3f:
b6:a9:ef:86:2f:78:be:36:ff:49:d9:6b:4d:5e:8c:69:14:39:
4d:46:e5:73:8c:10:53:98:9e:c5:4a:18:71:b1:7c:44:ce:13:
a0:eb:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:15 2025 by rpki-client