Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfd2b43b-aac2-3836-b314-41bf7277a3fc.roa
File: dfd2b43b-aac2-3836-b314-41bf7277a3fc.roa (raw, json)
Hash identifier: 7Awy/tnq+80LNIso1dArCs2hue5FzYVYHPnY/7jUp7A=
Subject key identifier: 2D:F1:60:B5:1B:06:E2:21:79:04:D0:DF:37:E2:3C:9C:50:76:94:63
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E86373DE7F4C8C6668C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfd2b43b-aac2-3836-b314-41bf7277a3fc.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:86:37:3d:e7:f4:c8:c6:66:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=1199741b-e090-4965-8f67-57061648eef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:96:45:a4:38:40:bb:c1:31:b2:dd:6d:21:29:
97:11:29:45:bc:c1:87:2d:ad:e1:c1:b6:13:64:1f:
cd:71:8a:a5:68:f2:08:bb:75:e9:fd:c8:f2:4d:b9:
45:1b:4e:17:59:59:53:32:b0:dc:80:46:9d:44:d9:
78:f2:66:26:58:93:99:94:28:eb:6a:ba:d3:2e:c8:
57:47:5a:18:2a:9f:13:17:2e:30:96:a7:70:6f:68:
0c:37:ea:9b:dd:83:7a:aa:4b:cf:d6:ea:6a:88:91:
7d:e4:de:4b:25:77:d7:2e:3e:37:58:1f:e3:81:53:
3c:23:82:42:85:4c:cb:13:90:b8:3d:bb:e0:8a:31:
a1:73:73:09:ff:f0:fb:5f:20:70:86:a9:48:e7:f8:
60:01:91:40:19:27:d8:a8:ca:94:f8:b5:ca:02:03:
17:5b:ef:16:0a:45:25:fb:53:dc:c9:fb:90:1d:39:
49:4b:70:ce:8b:8b:c3:4a:27:58:c9:fc:34:42:f1:
a0:15:be:8c:e9:85:da:5c:b6:10:5c:12:7a:6f:0d:
2b:33:04:5c:86:56:91:e7:68:8d:73:5a:13:ae:89:
db:67:25:44:3b:50:be:db:ee:42:56:3a:34:8c:e1:
4f:5b:82:b1:87:54:01:dc:23:96:d1:90:db:1f:24:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:60:B5:1B:06:E2:21:79:04:D0:DF:37:E2:3C:9C:50:76:94:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfd2b43b-aac2-3836-b314-41bf7277a3fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:9f:11:2a:54:91:1f:b6:75:4a:7f:b3:69:fb:31:db:9f:c0:
f2:ea:94:1e:53:b1:ff:58:bd:a2:10:e8:eb:0d:fa:db:9c:ff:
dc:35:bc:4f:32:84:4e:1a:e7:62:3f:2e:39:b9:d9:d5:a6:76:
0f:f2:f7:e9:ef:b6:54:af:12:d0:84:a5:3a:e7:8e:d0:bd:f4:
ef:bc:84:dd:e1:7b:7b:a5:ee:fc:07:40:96:a6:3c:a0:7f:f6:
a5:17:31:6c:6d:66:34:0e:2b:bc:f4:6b:b6:ff:97:c7:db:0d:
e6:58:55:4d:69:f8:d5:a8:4c:dc:d9:76:9f:a7:06:7d:39:3a:
b7:bc:47:fc:70:d0:e6:d3:19:7e:40:a7:e9:63:2b:77:99:30:
c2:3c:a3:fa:d2:b9:fc:7d:02:cd:59:32:60:41:41:c8:27:ac:
6e:2b:ff:9d:e4:db:9c:c0:62:55:50:b4:15:55:c0:89:e1:9b:
db:fc:1c:8d:17:04:61:a6:86:78:1d:45:e2:fd:00:a3:9a:4b:
0c:5c:68:5e:4a:fd:c6:6c:2a:28:dc:27:36:b6:29:9c:cf:c0:
0f:46:9f:70:f1:0c:84:08:ef:0d:95:9c:c2:5b:fe:84:a6:5d:
de:70:4a:d9:3c:d7:9d:91:6e:0a:5c:af:0f:2a:3b:91:84:a2:
7e:38:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:44 2025 by rpki-client