Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa
File: 53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa (raw, json)
Hash identifier: l6onWyVgA61fL26bZuHie7Zry2BcTl3Z1BKoIZx3FGw=
Subject key identifier: 7A:8D:C6:7E:1D:64:92:45:ED:5E:68:15:8C:66:31:4A:8D:30:9A:F6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C32FB48B7E01097591780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa
Signing time: Mon 30 Dec 2024 18:10:33 +0000
ROA not before: Mon 30 Dec 2024 18:10:33 +0000
ROA not after: Sun 30 Mar 2025 17:10:33 +0000
asID: 81
IP address blocks: 152.22.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:fb:48:b7:e0:10:97:59:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:33 2024 GMT
Not After : Mar 30 17:10:33 2025 GMT
Subject: CN=9d9592f1-bcb8-4b3e-8b38-57fa47ae3b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:70:b7:59:72:09:6c:93:96:07:f5:42:0d:
4b:52:a1:41:03:cb:fd:6b:2b:9a:d5:d3:85:be:53:
d8:dc:2a:19:cc:12:66:5e:7b:22:fc:39:fc:44:91:
6d:ee:53:49:03:a7:c3:b1:ae:11:0c:fd:79:2e:e4:
f9:56:21:4d:fd:87:56:41:c3:4a:b4:c0:2b:a8:8a:
dd:db:3a:77:a8:e3:94:76:2d:3b:39:4f:e3:a6:a3:
cb:19:1e:d0:a8:d0:9c:38:a4:8d:59:58:0c:32:59:
87:46:61:42:07:e7:28:34:31:ad:f5:32:96:e3:f7:
19:c3:e5:27:69:af:84:f6:ee:c4:d1:28:df:89:b3:
4a:cb:bc:4e:26:60:0d:44:02:5a:03:c9:b6:aa:fe:
8b:b5:f3:f0:2c:09:bf:2f:ba:07:2c:fb:97:fc:39:
0d:51:52:21:d9:42:ae:d7:00:ec:66:d6:75:92:15:
d2:ea:1f:11:27:75:f7:be:b8:c8:b5:e1:57:d0:db:
ed:22:fe:ad:60:55:c7:04:84:89:72:b2:1b:3b:8a:
fd:db:e6:6e:62:53:13:c7:b7:8f:d7:36:8b:43:f7:
08:09:87:93:07:3a:ba:da:cf:ef:54:d7:c2:6a:a4:
56:a0:01:49:72:b0:d6:3a:ac:2e:e5:17:6d:20:f2:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:C6:7E:1D:64:92:45:ED:5E:68:15:8C:66:31:4A:8D:30:9A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53cddef9-6e6e-3931-807e-4fd5e7e343c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:8d:9f:bb:66:c4:5f:1b:d8:ff:22:e6:93:ce:c9:2e:ea:dd:
b2:31:01:9d:60:63:f1:46:3e:4f:f7:1f:f6:93:fd:58:c4:19:
3c:1f:1e:a3:67:79:66:6a:df:f9:90:5d:38:12:44:68:88:f0:
5b:45:05:dd:ce:21:44:30:6c:cf:74:e7:f4:65:86:ab:a4:bb:
0d:0e:e2:13:26:28:51:27:da:20:a2:3c:40:fd:a1:84:54:73:
d0:6b:89:24:ae:8e:89:7c:dc:eb:85:c8:b3:7e:c8:21:04:af:
ef:4d:d2:ff:ba:ae:3d:c3:4f:2c:34:4f:88:c9:e4:de:ac:37:
64:54:57:66:81:01:a7:28:9b:5c:0d:bf:18:82:5d:bc:69:95:
dd:b4:3b:d7:b5:2f:fd:f7:02:6e:e7:3e:b1:46:ce:49:fb:ce:
ee:96:ad:b8:a0:f2:a9:a2:37:a8:5e:09:f7:53:73:40:ad:e5:
20:81:25:1c:d1:b5:c8:75:9a:e6:1b:5b:7b:5d:8f:d3:25:77:
19:25:0c:ce:f1:5b:51:22:7d:16:02:79:b6:d1:9a:e0:72:a9:
04:c3:33:12:84:f1:0d:21:fd:2f:fb:d6:b4:19:df:69:dc:a5:
97:c5:1f:77:64:02:7c:93:ca:92:37:bd:17:7a:3c:18:cb:33:
40:82:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:57 2025 by rpki-client