Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa
File: 662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa (raw, json)
Hash identifier: kv7thIkYn7DLHN8P9MdqBtjfW30hU+B/5IybcUDbEUM=
Subject key identifier: 49:88:BC:D9:42:2E:3C:52:58:90:49:9E:A4:68:F8:91:73:29:86:0D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C2FF41AAB0C76F5A08C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.48.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:2f:f4:1a:ab:0c:76:f5:a0:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=c1e1a778-ac22-4454-8e9a-f59277e99390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:1b:c6:0e:53:78:45:d1:df:10:91:46:fa:
d7:12:99:83:38:e5:77:72:39:29:49:0b:81:99:c7:
03:ab:e5:d4:1d:e7:a5:c0:bf:b4:65:6f:e0:02:66:
77:bf:52:5f:98:6a:de:8b:08:80:30:79:45:76:f5:
91:00:b8:ba:19:5a:8d:70:03:07:9e:0b:17:b9:41:
5d:84:76:cf:4c:16:57:d7:31:2f:2d:8b:27:0f:16:
d2:0d:68:79:60:58:e7:ac:95:3d:ff:c4:3d:8b:32:
19:49:f5:ca:b1:f1:8a:31:aa:02:40:fd:be:a9:5c:
70:70:cd:a6:f4:85:72:ab:27:04:e9:16:83:5a:da:
8b:30:c5:b2:d3:41:c5:4a:8d:82:2c:ad:8d:31:c0:
5f:48:23:1e:29:f4:5f:d8:70:e0:92:d4:51:65:30:
66:f5:92:4f:4c:cb:5a:ce:d4:55:2b:63:2d:4d:a7:
07:b8:8c:e4:aa:e0:6e:37:a1:15:7d:82:f9:5f:6e:
51:b7:e0:b2:cf:86:90:68:2a:94:10:48:06:4c:29:
52:46:63:29:ee:6a:d3:c7:eb:14:e5:35:b6:1e:47:
39:8b:64:cd:d3:66:af:53:11:47:6d:28:8e:ae:c0:
a4:f8:94:92:d8:f0:ed:32:5a:11:20:82:26:8d:da:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:BC:D9:42:2E:3C:52:58:90:49:9E:A4:68:F8:91:73:29:86:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/662bfff5-c1db-3e3e-bd69-6e04e67219f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:dd:28:a7:ab:4c:86:7c:30:d1:93:35:78:d7:ae:da:55:98:
d0:3a:f8:af:1b:3b:28:6c:21:82:0b:a3:0f:b7:9b:da:6d:6b:
b0:31:3a:99:25:a0:0f:45:a9:ca:ea:d3:0d:fc:bd:5d:b6:e6:
cc:a8:08:5a:e0:ba:f4:75:81:e1:68:aa:e3:38:5f:82:04:88:
17:40:1e:1b:5a:f4:53:36:fb:30:22:0b:25:c4:be:96:51:3b:
ed:9b:0d:07:df:2f:8b:d1:1e:6c:08:72:5e:50:3b:a1:bf:49:
ce:5a:97:e5:e4:08:59:48:e5:2f:c2:8d:35:aa:7f:9e:6c:1c:
22:86:87:c5:df:9c:17:88:63:ef:f1:10:ab:78:44:ed:52:dd:
b5:0f:72:7e:a3:1e:fb:14:c6:1e:1c:3d:84:69:e3:fc:79:71:
e5:e6:dd:dd:2f:94:1e:53:e4:49:89:e3:07:d6:b7:1f:45:b0:
22:05:62:02:9d:0f:fd:d0:88:f3:a2:da:fa:53:39:63:a2:e6:
67:4d:fa:28:ca:73:18:ca:64:8d:43:9a:9b:c6:07:f7:3d:14:
b1:c5:15:4b:41:f5:06:52:60:70:8f:9e:3e:6c:01:49:b3:d7:
e7:38:af:45:d3:0a:9e:1f:de:cb:9e:2e:ac:2f:42:a9:a5:14:
fc:28:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:05:05 2025 by rpki-client