Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d825f175-1095-3b13-8d4a-ab5944930247.roa
File: d825f175-1095-3b13-8d4a-ab5944930247.roa (raw, json)
Hash identifier: Dev56ghp/ooTa+yEGtaqrpR9FEh6TFpL9yPv/z/twyE=
Subject key identifier: 37:C4:7B:EC:66:CC:DB:60:4B:A1:36:97:44:73:36:B8:50:EF:2E:21
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E810BF412A032E23DFF80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d825f175-1095-3b13-8d4a-ab5944930247.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.22.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:81:0b:f4:12:a0:32:e2:3d:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=2620f8c9-389d-4d5d-afe3-54a3269b7524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:5a:ab:05:a3:d3:bf:98:63:4e:79:34:8b:
17:0d:a7:04:d7:6d:d6:95:26:71:80:1a:64:5b:25:
ff:b9:15:6c:91:e1:ea:32:5a:a3:7e:af:34:49:bd:
a7:b9:e6:37:07:15:dc:d0:76:2b:d7:84:de:e1:7c:
83:0d:0a:b4:79:3e:f0:f7:cb:86:d6:aa:d9:ab:8a:
ca:6c:71:e7:9c:b8:0b:9a:99:5e:eb:50:61:a1:46:
56:3c:54:c2:11:aa:dc:0f:c9:fa:19:18:a7:7c:4b:
1e:b5:14:de:09:4a:8b:be:44:86:08:4d:84:43:d7:
2b:e3:28:79:5b:55:30:3b:1a:44:be:a0:02:f6:2d:
c0:9f:a6:67:d1:06:3d:97:b8:7c:fd:1c:d0:00:8d:
3e:bd:4b:ec:f1:2b:3f:7e:7f:54:91:6a:f8:50:99:
c2:d7:0f:6f:8e:49:96:ca:5d:ad:1d:73:d9:30:ec:
c9:86:45:51:5f:8c:40:4f:fd:68:86:bf:61:50:77:
f6:88:bc:c4:b0:82:6f:9f:d5:3e:91:f8:1f:88:6e:
2b:b6:81:3a:d1:ad:af:39:30:88:ed:ad:1f:f8:40:
d1:c3:ff:4b:c9:bf:a4:f4:c5:54:3b:26:04:d6:81:
f5:63:82:4a:74:2f:4e:67:bf:eb:e3:7c:69:0b:c2:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:7B:EC:66:CC:DB:60:4B:A1:36:97:44:73:36:B8:50:EF:2E:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d825f175-1095-3b13-8d4a-ab5944930247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:58:e3:14:c5:c4:d0:35:77:45:cb:9a:a8:dd:11:e9:62:fb:
86:e8:bf:d0:a2:06:bd:f1:81:cf:3c:97:c0:40:36:2d:a1:2d:
cb:09:cc:0c:8e:61:be:14:a0:f2:48:5a:85:58:ae:12:c2:8d:
dd:27:9d:de:a4:78:65:2d:f2:81:0a:18:70:92:4d:a0:06:0c:
f0:75:2c:11:c1:64:00:0b:7c:ae:fe:bb:67:64:e3:d4:7d:56:
46:70:aa:49:27:db:6f:65:5a:3e:ab:d5:b9:6a:89:7e:59:73:
66:e3:45:c6:a1:18:53:95:6b:77:23:2a:67:60:bd:a6:6b:56:
e5:0a:d3:d9:6c:aa:bb:0e:89:d5:03:1c:69:d3:28:ee:c4:8c:
a9:50:f9:8b:b1:ad:09:e1:6f:e4:e8:5e:f3:17:c2:80:4c:da:
80:2d:55:64:f8:58:b4:e4:53:7f:91:03:86:da:98:80:7b:31:
b7:45:8d:15:89:50:b7:b9:99:0f:45:28:af:13:aa:d9:39:13:
20:a6:e3:7a:7a:e8:a1:8b:6f:28:ca:13:a4:f3:a5:3f:f2:e6:
db:e6:34:c7:70:02:69:b3:53:8c:2f:06:10:73:d7:6f:66:3a:
da:76:a5:33:1a:70:0c:8b:ae:cb:fd:39:45:b2:91:16:2c:e5:
41:ad:dc:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoEL9BKgMuI9/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MjYyMGY4YzktMzg5ZC00ZDVkLWFmZTMtNTRhMzI2OWI3NTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjJaqwWj07+YY055NIsXDacE123WlSZxgBpk
WyX/uRVskeHqMlqjfq80Sb2nueY3BxXc0HYr14Te4XyDDQq0eT7w98uG1qrZq4rK
bHHnnLgLmple61BhoUZWPFTCEarcD8n6GRinfEsetRTeCUqLvkSGCE2EQ9cr4yh5
W1UwOxpEvqAC9i3An6Zn0QY9l7h8/RzQAI0+vUvs8Ss/fn9UkWr4UJnC1w9vjkmW
yl2tHXPZMOzJhkVRX4xAT/1ohr9hUHf2iLzEsIJvn9U+kfgfiG4rtoE60a2vOTCI
7a0f+EDRw/9Lyb+k9MVUOyYE1oH1Y4JKdC9OZ7/r43xpC8Lw2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfEe+xmzNtgS6E2l0RzNrhQ7y4hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDgyNWYxNzUtMTA5NS0z
YjEzLThkNGEtYWI1OTQ0OTMwMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJY4xTFxNA1d0XLmqjdEeli+4bov9CiBr3xgc88l8BANi2hLcsJzAyO
Yb4UoPJIWoVYrhLCjd0nnd6keGUt8oEKGHCSTaAGDPB1LBHBZAALfK7+u2dk49R9
VkZwqkkn229lWj6r1blqiX5Zc2bjRcahGFOVa3cjKmdgvaZrVuUK09lsqrsOidUD
HGnTKO7EjKlQ+YuxrQnhb+ToXvMXwoBM2oAtVWT4WLTkU3+RA4bamIB7MbdFjRWJ
ULe5mQ9FKK8Tqtk5EyCm43p66KGLbyjKE6TzpT/y5tvmNMdwAmmzU4wvBhBz129m
Otp2pTMacAyLrsv9OUWykRYs5UGt3Ho=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:56:16 2025 by rpki-client