Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e8fbea3d-6db9-367a-ab19-cf61441a0276.roa
File: e8fbea3d-6db9-367a-ab19-cf61441a0276.roa (raw, json)
Hash identifier: vGvg6+MfPBPcv4P3Co9uJa9nr/0+jZwsFUr0o2DLqMg=
Subject key identifier: 5C:91:5D:49:CF:5B:03:CE:47:70:55:AD:0C:64:B9:0F:E1:46:A0:CC
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E81B371A251435C896C0B
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e8fbea3d-6db9-367a-ab19-cf61441a0276.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.26.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:81:b3:71:a2:51:43:5c:89:6c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=d96e6794-db25-4e66-9b60-466a81e07660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:f6:cf:c4:d6:a2:02:17:d6:9b:00:85:ed:
49:d9:13:91:7d:07:ca:4d:b3:72:0c:cd:47:bf:b0:
30:28:75:4e:1e:3b:fa:b7:e6:b6:f9:7f:11:e9:ff:
80:b7:10:65:e4:fe:e0:72:3f:66:97:d0:02:0b:37:
9c:f9:de:90:e4:49:2d:d3:b9:48:8e:1c:af:25:38:
e2:fe:57:be:56:85:89:bc:4f:60:b6:f7:7e:a1:2f:
f0:60:ca:b1:c3:bd:8b:16:59:0f:48:cc:89:e0:50:
66:c6:e5:be:42:78:0e:b3:9f:7f:dd:ac:79:26:33:
c7:16:36:b5:e1:0b:b1:72:a4:79:90:b4:25:73:b8:
9c:b6:09:a7:48:f0:ed:a2:57:e9:2c:d2:4f:38:f7:
f4:6a:e1:14:ae:61:71:3d:b4:6c:07:ab:7c:c3:69:
e0:56:bc:9a:eb:4d:56:29:1d:5e:44:ef:d6:ca:17:
ec:f0:7f:05:98:32:11:b5:09:8b:bf:ac:19:33:89:
7c:52:dc:79:25:2d:87:3e:5a:ca:55:d9:ba:d9:36:
9c:fc:29:64:75:db:dd:af:9d:8d:09:6d:2f:1b:19:
6d:63:44:20:1d:79:40:0b:c4:0f:80:ba:26:ef:4f:
e1:f5:e2:02:2d:1d:1e:a2:1e:07:07:8e:14:fc:26:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:5D:49:CF:5B:03:CE:47:70:55:AD:0C:64:B9:0F:E1:46:A0:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e8fbea3d-6db9-367a-ab19-cf61441a0276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:da:b0:0f:21:04:07:8d:8d:d3:69:16:5d:91:6a:be:a7:64:
0e:c4:c3:d7:d6:bf:0f:ad:04:6d:28:d3:8a:ca:61:07:97:17:
09:2b:c7:46:69:4a:24:fb:5c:81:e2:45:23:87:d7:9c:23:b9:
3b:d1:41:68:0d:ea:aa:61:66:2e:22:28:8d:72:7f:65:84:99:
ec:65:ae:df:5d:21:4f:71:98:71:00:da:22:58:3a:c6:26:d2:
ef:54:fd:aa:03:50:53:d0:ab:46:ef:90:77:3d:cf:52:6e:b8:
14:83:d3:17:d4:1f:28:b4:54:31:cf:23:5d:19:d4:24:c1:2c:
54:4c:77:43:e2:e2:0f:cc:04:38:2d:2a:6f:02:06:d0:7d:ed:
72:e1:87:f5:4b:83:da:9c:a0:19:4d:9c:89:64:24:b9:44:f5:
01:ca:a3:09:f5:21:15:18:77:a1:f9:3d:ab:f8:a1:a6:03:c3:
84:29:47:f0:18:53:7b:f0:13:a5:89:7c:0a:8e:ae:ca:23:8d:
10:33:00:8f:00:56:4c:8a:0a:c2:ce:6b:b2:b2:ae:2b:22:e3:
c1:d7:e5:21:5d:d3:bd:07:d4:88:c8:20:09:41:e2:54:54:47:
3f:6f:ba:b2:7a:14:3f:60:3b:cb:40:eb:a6:2a:16:c5:31:b4:
09:5e:7f:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoGzcaJRQ1yJbAswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDk2ZTY3OTQtZGIyNS00ZTY2LTliNjAtNDY2YTgxZTA3NjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCb2z8TWogIX1psAhe1J2RORfQfKTbNyDM1H
v7AwKHVOHjv6t+a2+X8R6f+AtxBl5P7gcj9ml9ACCzec+d6Q5Ekt07lIjhyvJTji
/le+VoWJvE9gtvd+oS/wYMqxw72LFlkPSMyJ4FBmxuW+QngOs59/3ax5JjPHFja1
4QuxcqR5kLQlc7ictgmnSPDtolfpLNJPOPf0auEUrmFxPbRsB6t8w2ngVrya601W
KR1eRO/Wyhfs8H8FmDIRtQmLv6wZM4l8Utx5JS2HPlrKVdm62Tac/Clkddvdr52N
CW0vGxltY0QgHXlAC8QPgLom70/h9eICLR0eoh4HB44U/CazLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyRXUnPWwPOR3BVrQxkuQ/hRqDMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZThmYmVhM2QtNmRiOS0z
NjdhLWFiMTktY2Y2MTQ0MWEwMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvasA8hBAeNjdNpFl2Rar6nZA7Ew9fWvw+tBG0o04rKYQeXFwkrx0Zp
SiT7XIHiRSOH15wjuTvRQWgN6qphZi4iKI1yf2WEmexlrt9dIU9xmHEA2iJYOsYm
0u9U/aoDUFPQq0bvkHc9z1JuuBSD0xfUHyi0VDHPI10Z1CTBLFRMd0Pi4g/MBDgt
Km8CBtB97XLhh/VLg9qcoBlNnIlkJLlE9QHKown1IRUYd6H5Pav4oaYDw4QpR/AY
U3vwE6WJfAqOrsojjRAzAI8AVkyKCsLOa7Kyrisi48HX5SFd070H1IjIIAlB4lRU
Rz9vurJ6FD9gO8tA66YqFsUxtAlef+4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:15 2025 by rpki-client