Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6ee8957-9f29-39c0-9831-00b4e9fbae7d.roa
File: d6ee8957-9f29-39c0-9831-00b4e9fbae7d.roa (raw, json)
Hash identifier: dLrnPrah8UMM0WqirnJIZa5XI4cVsuuN+amahPKPwMY=
Subject key identifier: 94:13:D5:00:CF:97:3B:FF:44:26:00:4E:9A:B9:52:D7:5F:A3:32:66
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E82FC8D6DF03C01DA2480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6ee8957-9f29-39c0-9831-00b4e9fbae7d.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.26.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:82:fc:8d:6d:f0:3c:01:da:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=d2b8398e-e4d3-49e5-a821-c2bc4cc83b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:e2:94:83:66:7d:b3:7a:3e:53:e3:7c:6f:
bf:30:55:6d:9e:34:67:7c:7d:c0:d5:d0:2d:66:9a:
bb:a6:13:3f:8b:fc:86:cb:84:ae:6c:40:91:0c:53:
05:71:bd:92:1d:43:89:7c:79:2e:df:f8:be:88:89:
67:f1:17:77:77:e1:76:39:a5:85:e7:a5:e4:89:a7:
c4:7d:1f:29:ab:df:4c:19:ce:b6:4c:46:cf:28:d9:
8a:16:b6:2f:d6:fa:2a:35:7a:a6:02:66:c9:6f:02:
c5:0d:95:ec:b1:67:82:ad:4a:50:d8:3b:67:e5:d5:
ce:ca:d9:5b:6c:0a:ef:0b:fb:93:9e:e2:fc:de:ed:
63:2b:f9:e4:ed:6d:b4:7b:c1:3c:90:95:9f:d5:74:
d6:d0:8d:05:1f:5f:b9:65:3f:4f:54:0f:86:1d:55:
b3:86:57:1f:67:09:c7:1c:1c:f5:19:51:9d:6c:8c:
7f:b3:6b:a2:3c:96:92:db:2f:b9:28:fc:f8:42:b5:
04:30:d6:9d:55:af:df:42:b8:1d:44:4d:b3:17:db:
e7:4a:ee:0c:37:f8:75:9e:7a:b8:7e:4b:bd:31:fa:
83:0d:8d:25:5c:a2:90:2e:dc:52:1d:06:9a:2a:f4:
2a:55:dc:93:de:0c:2f:9b:20:b5:56:64:b4:8a:35:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:D5:00:CF:97:3B:FF:44:26:00:4E:9A:B9:52:D7:5F:A3:32:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6ee8957-9f29-39c0-9831-00b4e9fbae7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d7:f5:3e:74:8c:ba:89:93:9a:99:34:a0:22:54:25:5c:f1:
f8:cd:ed:01:6b:4a:08:8c:f2:a4:c0:0f:4e:50:5e:0c:cf:3c:
9e:ac:60:80:b5:2a:fb:1e:c9:c3:ab:95:49:59:e4:c5:50:be:
5e:68:aa:0c:f3:dc:46:08:68:c1:50:d3:4f:5c:32:9d:cf:28:
3f:2c:4f:a1:94:75:1a:04:40:40:4d:21:65:7f:b5:fc:c6:e2:
fc:14:9f:9b:9c:4f:c2:ca:48:5c:3e:e7:13:b5:ec:aa:73:b1:
f1:62:c5:c6:2b:b9:3a:db:de:99:14:23:56:9d:d9:fb:4c:96:
a9:e4:75:07:75:37:fe:2a:fa:8f:4b:11:25:c7:53:65:92:1a:
7e:c1:bf:bd:26:cd:87:9e:af:f5:14:8e:df:5f:a9:db:21:2d:
17:de:98:9c:d2:ad:15:95:75:34:a1:ab:99:10:77:fc:f5:ed:
1b:12:4f:46:99:3d:37:8c:bf:25:c8:55:3d:60:34:11:a5:31:
d1:87:d7:f4:dc:99:3f:79:df:1c:37:85:61:4b:36:8b:1e:ad:
a2:ff:d6:11:f8:71:37:03:38:4c:ad:3c:c7:5b:9a:e5:8e:05:
c9:b5:68:e1:32:1e:73:1b:a5:2e:52:75:e0:32:7f:96:83:fe:
7d:49:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:09 2025 by rpki-client