Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9609498-6a7a-34b7-bb29-72aceed2b99f.roa
File: f9609498-6a7a-34b7-bb29-72aceed2b99f.roa (raw, json)
Hash identifier: 30grPAqIqYrzRAcH+x99btJi06v1rikJjykCxXNYDLE=
Subject key identifier: 85:0B:CF:06:09:FD:F1:61:7E:F1:50:00:82:64:E0:2E:98:E9:02:F5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7E9AE5EB263A0A570C40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9609498-6a7a-34b7-bb29-72aceed2b99f.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.49.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7e:9a:e5:eb:26:3a:0a:57:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=486fccef-0b58-441d-953e-1845b7bd84e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:a7:c0:e0:8e:a5:93:e5:42:d0:b3:a5:77:
74:6d:55:fb:b0:f7:4e:f7:31:eb:d9:39:95:ee:d7:
95:a5:a3:bd:4d:61:6a:13:97:5b:71:c3:5b:d6:a9:
da:7b:9a:7c:54:cf:16:9c:54:8e:d5:92:cc:2e:62:
db:81:09:4a:3f:17:11:b9:82:46:75:32:f9:77:5e:
9d:66:21:43:0b:40:9a:bc:00:9d:16:b6:51:7e:3f:
3e:74:1f:d5:aa:26:be:a2:38:7e:02:6d:e7:cf:52:
58:67:bf:80:21:bd:3e:8a:6e:51:18:71:a5:34:8a:
61:6e:69:2f:8c:d1:28:2e:f9:7b:71:57:46:ca:ab:
95:b4:d3:b5:a9:b2:26:22:30:70:20:10:5f:0a:22:
f0:25:1e:3e:17:69:0d:a7:5f:98:6d:1a:6e:53:1e:
f8:61:35:ef:85:d6:4c:16:37:a6:c1:5b:08:75:e5:
eb:15:3e:74:92:8d:26:84:c6:32:2d:6a:6c:07:47:
38:05:cc:1a:15:91:77:89:ac:a1:fa:87:a3:70:c7:
4e:66:59:f8:01:19:17:18:5a:4d:e8:1e:fe:98:95:
b8:6b:f3:37:63:ec:fc:44:7c:5c:5b:59:c6:f4:e7:
3f:98:62:7f:05:fd:67:b4:5f:ea:21:7e:9d:73:7a:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:CF:06:09:FD:F1:61:7E:F1:50:00:82:64:E0:2E:98:E9:02:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9609498-6a7a-34b7-bb29-72aceed2b99f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d7:7c:df:20:48:f4:b3:ff:9c:2f:36:c3:00:6a:15:e2:09:
50:00:a6:96:e1:96:49:b8:9a:83:f8:d9:72:14:26:3f:61:ac:
f7:a2:77:46:88:11:64:d4:2e:09:87:12:9f:fe:9e:46:2c:c4:
5d:26:b8:cb:54:de:68:b4:17:62:78:eb:27:f7:d7:34:84:7e:
9a:b6:77:92:d3:81:7c:d4:38:00:99:31:71:3d:46:2d:ac:dd:
67:cc:d6:d1:76:18:cd:0e:df:6d:17:1d:ad:15:e2:ce:33:5e:
4e:b9:b4:54:fd:e1:d9:e4:0b:ad:80:1a:e5:be:e4:73:42:ce:
d3:37:ae:e8:2b:44:1d:66:a5:3c:4e:ca:71:96:6b:a4:15:ff:
52:65:50:2a:cc:58:14:88:56:e5:34:29:73:6e:ec:02:35:cc:
10:6d:4b:4f:de:6e:18:52:93:70:4d:dd:1b:98:3c:f9:37:5e:
59:ae:36:b4:59:82:e0:58:66:38:2b:e0:07:df:c1:34:b2:e8:
6e:bb:21:a6:26:95:16:4e:57:47:10:60:20:ff:7b:2d:ec:fc:
c3:b3:54:7e:42:6a:55:fe:b6:e0:3b:02:79:9f:b4:47:03:57:
de:20:66:36:28:b8:5c:64:a6:47:db:9b:9e:3e:4f:1e:0c:0d:
a2:96:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:56 2025 by rpki-client