Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f2256385-a436-3bb7-96ea-13cb3c9503b3.roa
File: f2256385-a436-3bb7-96ea-13cb3c9503b3.roa (raw, json)
Hash identifier: OLYEeu7hYp6A5zCKfAqzajLGvLTbke46KvG5BweMUhU=
Subject key identifier: 54:7A:97:83:3B:54:08:B1:77:0E:6C:10:A1:85:3E:D0:9D:6A:01:18
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7E73DC83589B2014C47C
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f2256385-a436-3bb7-96ea-13cb3c9503b3.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.47.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7e:73:dc:83:58:9b:20:14:c4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=e4081503-8532-47af-9c98-3c85b03d4696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:25:bd:1a:62:9d:f2:cf:49:72:ba:2e:02:
9a:20:f9:93:d8:79:f7:3e:bb:4c:ae:4b:81:93:5a:
b0:49:02:6f:3b:96:0d:d8:48:4e:4e:24:31:88:5c:
83:85:9b:7c:9d:44:9c:31:ff:6a:ff:db:2e:90:9d:
95:4a:45:a0:2b:8f:42:ac:69:6a:56:61:87:cd:31:
c3:e7:7b:be:f2:73:b9:b3:64:1a:8a:e4:a1:b1:99:
b2:32:1c:f9:0c:35:10:fa:4a:f5:0b:cd:e0:b3:b2:
84:75:49:39:41:b8:36:54:25:8f:ba:c6:c2:45:91:
8f:76:89:ca:88:ce:b7:2b:ce:aa:97:1c:f6:b8:d9:
b7:f7:cd:b2:1d:13:23:8a:bd:b3:5a:a2:29:d4:99:
e6:9c:3b:18:0d:b4:38:97:d2:03:55:fc:52:15:fa:
27:13:e3:25:fd:41:71:37:cf:36:49:7e:60:b5:7e:
e4:5e:2e:b4:02:df:00:6a:1a:11:47:ba:8d:31:6f:
8c:ea:21:43:e8:de:82:b4:1d:9e:7b:f4:03:ca:22:
15:9a:40:68:b3:25:d9:ea:12:a5:10:7e:98:d4:3c:
ba:6b:f4:3c:35:c7:6b:42:05:be:0c:97:f1:b6:e1:
17:b7:69:83:e7:1c:82:0c:ab:d4:6e:42:c9:ce:28:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:97:83:3B:54:08:B1:77:0E:6C:10:A1:85:3E:D0:9D:6A:01:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f2256385-a436-3bb7-96ea-13cb3c9503b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:35:2a:4c:94:88:db:1a:3f:73:66:dd:98:21:02:bf:3b:04:
64:18:06:93:47:a3:fb:88:84:60:3b:cd:fd:07:2b:b1:9b:f0:
d6:88:90:23:63:0d:86:1e:67:2d:64:1d:de:4d:ab:26:21:94:
9d:8d:54:df:90:db:43:f0:25:ab:cf:26:4f:10:b1:9c:ea:88:
ed:d5:b8:61:80:f6:38:16:25:ee:6c:e3:f1:35:0e:d3:d3:18:
b0:81:ba:77:08:a5:9f:25:ba:20:dc:f2:48:22:20:93:92:28:
8a:da:da:7b:98:92:55:d5:fd:99:1c:f0:1f:03:19:9e:f1:c8:
c9:9f:ae:a9:ad:82:80:e1:80:ec:ae:32:d5:fc:47:47:06:e7:
18:16:4a:bc:ee:5f:65:e2:30:2f:09:05:7a:0c:25:b0:f6:91:
41:65:ac:5e:ee:47:cb:60:e6:8c:a2:eb:bd:03:88:f8:00:40:
50:f1:c9:f1:93:01:e6:4c:31:6c:62:a1:b2:89:fe:83:03:38:
82:71:13:d1:90:f9:d0:f2:20:df:94:88:0e:d8:ef:d8:08:4f:
ea:75:66:72:f3:5f:51:0a:bc:7e:a7:68:f4:1b:04:a4:f8:a3:
c9:64:04:75:39:e5:0e:b0:25:10:f2:53:d2:92:fb:26:15:5f:
02:5b:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:52 2025 by rpki-client