Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa
File: 72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa (raw, json)
Hash identifier: Waq+VFACo5CHRxqdTjdAKYZgIDagqePclUjh0vsuh6U=
Subject key identifier: 35:61:FA:AD:EF:CE:1F:C0:65:0E:D9:16:D5:7D:5C:C1:A3:5C:71:2D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C30419CBF29B632DE7980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.60.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:30:41:9c:bf:29:b6:32:de:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=9e643ef2-e36f-4e26-a527-224e86361eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:bf:34:34:37:ba:3f:a0:0e:64:86:d6:fd:
63:0c:75:68:8e:a2:81:a1:7d:aa:a3:87:13:56:4c:
db:fd:9d:a5:a2:a6:0f:33:40:f0:ad:f3:83:9f:77:
ea:82:ce:a1:79:90:6a:fe:c6:fb:18:b7:19:b3:1f:
aa:ff:4a:90:4c:bf:1b:b2:e2:fc:84:68:a7:04:11:
43:85:e2:10:89:bf:fa:51:b9:a8:95:b2:c1:4e:e9:
6d:98:38:47:62:21:43:ac:cc:74:b8:c3:35:da:8a:
9f:3d:27:4f:c2:78:15:cc:f2:cd:80:ec:a0:67:84:
a4:1d:90:f5:09:62:65:7e:db:67:b3:e9:56:36:3a:
88:9f:5d:4a:47:74:05:39:12:17:3d:60:b3:35:c5:
1b:c2:93:cd:2a:f8:32:89:48:85:8f:bc:ed:71:c2:
66:70:f1:ef:65:31:c3:1e:9d:99:97:5f:cc:74:d0:
b1:e4:a5:3f:ec:43:32:cd:78:24:c9:9c:b6:1a:37:
4e:6b:d0:23:a8:67:09:77:94:f2:0f:1e:7c:fb:04:
2e:39:a8:34:81:5b:df:79:02:50:52:a6:d7:ab:f8:
e7:2f:48:02:b7:27:9f:8a:2a:45:37:5e:47:04:5c:
e1:29:af:7d:a4:de:6b:39:82:df:3a:d8:d5:72:42:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:FA:AD:EF:CE:1F:C0:65:0E:D9:16:D5:7D:5C:C1:A3:5C:71:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/72b5f4e8-85ca-370d-9d1a-e0f368eca922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.60.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:1b:42:ff:37:e0:e9:8f:2a:25:87:bd:08:0e:9a:f3:58:1f:
bc:7d:dd:ea:a2:4d:21:a6:ee:5f:f2:1f:5b:83:c4:09:3f:62:
75:4c:d1:94:8a:56:89:3f:9d:77:9c:65:8f:0d:ce:6a:06:c1:
03:8b:b9:e1:2a:7e:5c:d9:b8:47:77:9c:84:86:67:51:b6:12:
49:ad:f0:af:56:ef:97:8b:80:d3:42:77:6e:5f:b6:31:3d:74:
a2:01:18:7e:f6:27:69:3c:dc:84:c8:c8:22:5a:61:ae:81:fc:
63:e8:1e:86:36:58:77:4b:eb:ca:22:b5:0b:05:9f:a5:6c:52:
50:dd:22:a8:19:c8:09:70:57:f1:6f:47:41:97:ce:75:80:07:
3b:de:d0:f2:2b:af:a2:8b:6e:d6:6c:80:07:49:b9:5f:b3:7b:
a1:80:1f:44:09:8f:2d:79:99:8d:e2:0e:e3:f7:68:28:31:7a:
bd:ea:ce:ed:cc:d3:79:60:5a:bc:d0:e8:27:1e:65:67:3b:13:
7e:69:fb:89:80:b0:35:dc:e6:23:ed:71:0b:f1:ae:c9:7b:5a:
03:2a:da:fd:13:98:7a:b8:db:8d:9d:43:2a:f0:d0:8c:c9:50:
c2:ab:0c:81:f9:35:0e:5e:66:c9:9d:d5:06:3e:93:00:1c:2a:
c2:44:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:21:56 2025 by rpki-client