Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa
File: 2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa (raw, json)
Hash identifier: EAL6r/mLCXMX5+RIqFq++hy/+ff4AfLOym5RVewL5q8=
Subject key identifier: 55:2C:D9:55:BD:C9:AB:CF:4C:EC:64:A8:67:0A:9E:EA:DC:D4:AD:B0
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C395CA0E8A42A20FCD700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa
Signing time: Mon 30 Dec 2024 18:10:36 +0000
ROA not before: Mon 30 Dec 2024 18:10:36 +0000
ROA not after: Sun 30 Mar 2025 17:10:36 +0000
asID: 81
IP address blocks: 152.46.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:39:5c:a0:e8:a4:2a:20:fc:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:36 2024 GMT
Not After : Mar 30 17:10:36 2025 GMT
Subject: CN=12aaa20c-00ba-4376-b23e-fa6f7974d730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:b4:56:63:53:0b:f4:bb:a8:f9:de:ed:27:
a4:a0:76:74:92:eb:c1:2c:7a:99:15:30:1f:55:ce:
94:99:32:e9:5d:dd:cf:96:21:41:0b:14:9d:a8:b1:
9b:ef:09:52:32:d5:10:7c:36:1f:2a:07:6e:16:96:
cc:36:31:1d:aa:ac:ea:6a:a9:7b:cf:0a:d0:18:08:
62:5a:1b:54:47:9f:9b:0f:0e:af:96:75:65:88:b7:
92:00:51:12:65:34:41:70:94:4e:e5:48:52:57:b8:
d3:d8:a7:94:cb:98:47:38:3c:ad:4f:53:fc:b6:66:
ea:73:1b:8b:40:a0:30:46:3d:58:c7:5d:c8:03:40:
4a:be:8e:37:79:a1:96:6c:e5:e9:5e:ce:ff:00:71:
75:c5:be:d4:0e:b1:16:ba:58:55:82:c4:26:52:41:
b6:53:9f:8f:83:50:11:14:6b:eb:ab:93:d1:76:f0:
e2:04:d2:03:aa:46:a1:d7:3c:d6:9f:79:11:7c:47:
cd:d0:51:7e:c0:26:f8:31:d4:09:3d:7e:c6:ff:4b:
c8:b5:e3:1b:bf:f3:f3:02:5e:00:32:26:19:61:9f:
7e:90:2d:94:cd:87:e6:6f:43:24:ce:bb:6a:70:01:
bb:76:87:0a:ea:1a:e4:18:d2:5b:5b:32:4b:db:4c:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:D9:55:BD:C9:AB:CF:4C:EC:64:A8:67:0A:9E:EA:DC:D4:AD:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2fd99d1c-5f85-3871-8985-b7fd46efddc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b9:ed:81:7d:c5:4f:42:d9:a4:63:a3:61:59:23:dd:80:ac:
08:50:f8:29:a3:1c:17:9c:aa:a7:26:93:3f:86:82:98:d0:0e:
3b:58:12:23:1e:1b:9f:ad:b2:7f:58:a3:3a:7e:36:eb:b2:d1:
47:46:78:db:ba:dd:cd:a1:9d:ea:2f:68:c5:4b:51:b6:f6:10:
62:81:c5:40:69:46:db:a3:23:c0:be:10:72:ad:06:b1:2e:5c:
49:37:96:09:c7:1a:05:66:ce:ab:c8:2d:d9:78:56:ec:0b:22:
fb:9a:57:d1:14:d0:22:a4:f8:23:b2:fc:92:5b:06:86:18:d1:
3b:ba:e1:5d:39:21:91:9b:3c:04:fc:ec:d8:04:1f:79:08:46:
a1:42:db:04:60:ff:f1:f3:0d:41:96:ff:cf:4d:c9:be:e2:19:
8d:71:14:2b:7d:d8:6a:0a:cc:7c:55:b5:a6:0b:26:98:94:ea:
91:e9:19:c1:9b:ea:97:00:f2:43:d2:5d:68:69:03:ee:66:07:
49:e6:86:2e:d2:55:bd:e4:ab:79:51:85:38:5a:a8:94:0c:34:
56:c9:a3:1e:6a:50:a1:93:4f:64:ed:5f:25:94:3b:ec:01:0c:
e7:dd:5c:20:4b:e4:9a:b3:fb:c7:f9:a4:22:57:45:87:95:88:
f4:9e:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:36:04 2025 by rpki-client