Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa
File: 781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa (raw, json)
Hash identifier: wLn4c6RJLhZXXzsxf0R98+vC5TBsiiyRERDwBxgIvHE=
Subject key identifier: E6:0E:03:FC:54:D7:15:1C:67:67:82:63:1B:9A:05:50:21:02:36:57
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C325C70FDD97785EC3DC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 17031
IP address blocks: 152.22.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:5c:70:fd:d9:77:85:ec:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=19778487-23dc-4e3d-8936-6d069c6b3049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4a:97:b9:27:21:dd:2c:81:70:f9:9d:67:95:
57:f7:d2:57:bd:09:7a:f5:f3:0c:79:02:cb:aa:b3:
0c:cd:f7:11:c9:12:b5:ff:97:97:1c:a7:3f:6c:46:
5f:bb:65:1d:cb:7a:47:4f:89:0b:84:8f:eb:54:9a:
32:47:57:4b:70:da:35:08:77:ec:7b:bf:7e:cd:00:
6a:71:b2:3b:2e:b0:98:24:6e:95:2e:a5:21:95:69:
b7:4c:2f:97:45:24:af:4f:9b:55:e4:9a:8c:ec:f9:
19:96:31:63:4a:10:7e:de:ee:75:c9:de:9a:88:3c:
e7:97:09:b7:33:c0:b8:3f:26:89:6c:f5:4b:19:14:
a3:8e:cf:0d:fc:87:46:bc:e6:c3:ae:aa:85:e9:79:
81:86:0b:a4:e3:28:53:d1:9f:c8:50:e3:62:b0:dd:
eb:87:9f:7d:49:25:89:33:a8:05:ac:d8:dd:8b:7c:
fa:a3:e2:2d:7c:ef:80:5a:de:8c:67:ce:42:cd:88:
8f:ee:45:dd:8f:d5:34:48:1e:a5:b7:08:8e:17:bc:
a6:aa:3b:c2:2b:c1:96:1f:c8:39:bf:39:1e:93:c1:
9b:7d:6e:6f:17:da:47:cf:3f:d7:c0:6e:9a:5b:a6:
9c:41:1b:74:b5:e5:12:ba:e0:21:0c:ac:bf:48:20:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:03:FC:54:D7:15:1C:67:67:82:63:1B:9A:05:50:21:02:36:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/781ce3e2-fc0c-35c9-a26a-2a114d3df413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e3:cf:28:70:16:0e:73:c1:d4:c2:c9:ef:16:fe:47:fe:19:
5b:b4:19:a8:b8:f4:7b:93:48:97:f7:e8:15:5e:8f:03:fd:df:
b5:4c:94:74:d1:e2:df:b3:13:91:89:2a:08:9a:a1:f3:8c:ec:
61:7b:0c:7e:a0:02:62:28:de:54:66:0b:37:14:55:ef:6c:b3:
82:47:ff:6a:1d:5c:41:ec:12:a0:41:68:05:49:a9:af:3f:5b:
cb:ab:c3:aa:be:c0:78:40:59:73:38:02:ff:40:63:3e:cb:2c:
71:be:66:1e:75:57:8b:7f:13:49:8b:f2:78:65:fa:0d:2e:9c:
52:f5:1b:fd:62:03:d0:91:ea:2b:69:4d:8e:c9:2f:1d:7f:f6:
6e:43:d7:34:2a:51:2a:e3:ee:52:46:5a:69:54:db:c7:a1:59:
97:16:ad:0f:00:5f:44:17:27:1f:b7:ae:2b:1f:1c:87:8c:a8:
51:82:67:fe:45:7d:fd:4e:bf:cf:d3:e3:e4:3b:73:0a:a6:06:
6e:0b:75:d8:af:eb:6d:d8:1d:3a:eb:31:8a:2b:34:47:10:be:
58:3c:0f:ca:6d:46:8a:06:da:73:b6:81:4c:53:01:af:31:95:
46:e2:f6:53:a9:06:eb:ae:cc:cf:da:c1:12:f9:d4:65:8a:49:
07:b2:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:13 2025 by rpki-client