Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e534673-9d2c-3b50-976a-a69f23cf178e.roa
File: 1e534673-9d2c-3b50-976a-a69f23cf178e.roa (raw, json)
Hash identifier: ajc1sJKfQ1QHUP+yq5476+GarWscG4lbzLzr3SNmWgE=
Subject key identifier: 71:42:C6:6D:7F:86:F3:39:BB:76:2E:C9:1E:09:6F:5A:9C:D1:3F:2E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C302E11A92486354E2EB0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e534673-9d2c-3b50-976a-a69f23cf178e.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.55.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:30:2e:11:a9:24:86:35:4e:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=4156a650-a8d0-4606-ad37-28449d91efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bd:a2:42:74:04:b3:47:0e:2c:87:8f:c3:d9:
56:db:9e:bd:a8:7c:ef:23:98:9c:47:63:43:5d:56:
60:e3:ea:9d:7a:5a:df:7d:2c:fc:9b:53:e0:89:8b:
80:e4:7c:72:d2:46:11:32:ce:6a:8b:b7:3f:1a:a3:
23:72:95:18:f0:80:54:e1:1b:99:ca:8a:f3:46:c7:
90:60:74:45:8a:93:09:84:6d:4a:a9:80:9d:6a:a2:
8c:b5:88:37:66:57:c6:25:b1:c8:b4:38:c1:49:24:
52:00:ec:c9:97:67:dd:02:ec:35:96:5e:83:ef:aa:
39:39:b3:b9:7b:e3:41:cb:b5:58:56:1e:9d:df:f8:
3a:9a:a4:27:b6:5e:03:e5:e1:4b:28:41:dc:f5:66:
8c:7e:fc:b5:17:2b:8e:19:a8:bc:ef:7b:25:08:a1:
82:24:73:fa:f2:f4:13:be:0a:f1:55:f2:a9:8c:0e:
99:1e:13:aa:49:18:3e:7f:c2:25:5a:3f:44:73:b3:
46:87:7c:10:76:6b:d6:a4:ea:dc:19:78:0d:a4:ee:
b6:01:2b:fb:82:25:5d:a8:dd:7f:5f:bb:3b:aa:11:
5c:c6:5e:39:1c:6d:ae:ed:cf:b0:ff:1d:86:e0:41:
8b:59:d7:81:57:51:4a:83:97:4d:bc:8e:ab:6a:d8:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:C6:6D:7F:86:F3:39:BB:76:2E:C9:1E:09:6F:5A:9C:D1:3F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e534673-9d2c-3b50-976a-a69f23cf178e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b4:bd:72:0b:d1:f2:80:56:c3:32:12:5f:07:79:c0:65:86:
cc:a9:7b:09:1c:b7:95:2e:28:bb:d3:41:ed:12:ae:c7:35:52:
d7:50:99:64:a8:e3:14:35:0b:4b:31:cb:bf:de:2f:12:94:34:
cc:cb:32:53:03:f9:65:03:9c:09:e3:1e:1c:1d:80:59:e4:83:
72:32:c5:f3:3a:7b:8c:90:75:16:97:3b:d6:07:23:77:71:09:
00:ce:16:6f:ec:d6:61:15:f1:0b:e6:df:82:97:2c:aa:9d:1b:
8b:da:13:c6:57:5f:69:fc:58:c9:90:18:e9:fd:9e:64:6c:ad:
35:4f:0a:11:7a:58:f0:da:08:da:4d:bc:26:69:a5:75:44:5a:
a7:9f:b3:fd:26:50:40:21:52:50:51:57:6d:a5:ab:ad:eb:f3:
91:fb:a5:e0:4f:5d:77:3f:a5:23:bd:be:f5:a8:1f:9b:9e:95:
a6:1e:d8:30:ab:ff:eb:56:d2:06:93:30:46:27:2f:31:dd:93:
05:95:55:f9:76:1b:4a:91:5f:fd:4b:52:a2:b2:bb:a5:09:a8:
42:e9:15:f9:3e:8c:ef:d2:92:30:10:6d:f5:a0:de:69:f2:65:
33:39:eb:93:c1:ff:ac:fe:af:7b:36:03:4c:54:72:0b:1d:78:
36:cd:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:55 2025 by rpki-client