Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7836e46d-3de0-31cf-850d-bd1752491782.roa
File: 7836e46d-3de0-31cf-850d-bd1752491782.roa (raw, json)
Hash identifier: 1ZyUa5kbEEikh26+2N/ME6JaHYpylWWZYRjg7nvdJsg=
Subject key identifier: 0A:9E:EB:43:D6:3D:C9:E8:4F:3E:58:B3:EF:A7:E5:87:39:06:D0:35
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C35F7A06914EC47A68910
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7836e46d-3de0-31cf-850d-bd1752491782.roa
Signing time: Mon 30 Dec 2024 18:10:34 +0000
ROA not before: Mon 30 Dec 2024 18:10:34 +0000
ROA not after: Sun 30 Mar 2025 17:10:34 +0000
asID: 6559
IP address blocks: 152.28.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:35:f7:a0:69:14:ec:47:a6:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:34 2024 GMT
Not After : Mar 30 17:10:34 2025 GMT
Subject: CN=876305df-a36b-4300-8a93-13bb7325a465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:c4:c7:f4:3e:03:69:18:85:c2:57:6c:b3:
fe:a2:01:38:58:db:0d:82:2d:a2:fe:61:20:85:0d:
be:aa:d6:50:15:06:b7:1a:0d:9e:4b:2a:34:97:c1:
5d:9b:95:72:54:82:1c:e0:64:25:5d:f4:7d:4b:d9:
ad:90:1e:55:14:33:28:93:85:0a:81:8f:98:43:f4:
a8:9b:9b:95:54:85:04:a6:9d:86:08:53:04:3f:d5:
cf:75:d5:79:9e:96:7d:b3:e7:98:73:79:70:63:8f:
38:52:28:e2:6a:c4:c9:0b:8b:0e:3d:f1:85:97:e4:
68:68:89:1e:a0:38:95:8d:7b:e0:0d:67:b5:67:87:
16:e6:6f:ac:92:96:0b:40:b1:1f:31:e2:5e:c2:3d:
3f:21:ab:81:76:dc:c0:ae:60:ad:fb:04:09:dd:eb:
6b:38:9c:c6:5e:b4:be:56:79:0f:ac:76:d0:8b:9d:
27:b2:62:64:58:0c:92:97:b5:c6:e5:43:f6:a4:f0:
fc:dc:41:ef:f6:2f:92:c0:b9:72:c7:df:22:cd:74:
02:51:e8:c4:c8:e1:90:64:a0:0c:4a:49:25:48:00:
ba:0d:b5:82:4b:02:b6:ef:bf:4e:dc:73:44:2f:63:
bf:36:5e:d8:03:09:80:5b:19:6b:3f:03:19:f0:58:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9E:EB:43:D6:3D:C9:E8:4F:3E:58:B3:EF:A7:E5:87:39:06:D0:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7836e46d-3de0-31cf-850d-bd1752491782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.28.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:84:6a:ec:f0:40:e1:8e:b7:7e:81:b3:1a:37:47:d4:80:7e:
ec:30:b9:73:0e:ca:64:51:90:d5:45:ed:5d:06:b0:c7:8d:bc:
66:13:6b:2a:de:91:f0:1c:9d:75:48:4c:61:87:c5:bb:b9:e6:
f5:63:1d:8a:92:44:87:48:e5:cc:76:6a:ed:56:91:ad:68:15:
bd:f0:c1:f3:0c:2a:70:b8:ae:4c:2c:e8:aa:11:5f:fd:95:74:
b8:3f:28:ba:d8:ec:72:f6:d7:3a:16:ad:6c:22:97:78:b3:08:
1f:53:38:dd:3e:69:f2:6e:77:8f:b6:62:0b:20:7a:b9:98:2e:
b7:86:62:bc:be:7d:4b:4d:f8:b3:f7:7a:9f:f9:af:02:0a:d8:
94:97:7e:31:f0:a9:0b:26:93:b7:f9:2b:79:6e:7a:47:9e:6d:
f0:09:b0:c5:df:b9:6b:0c:e3:74:19:73:5a:07:12:41:c1:2f:
05:0a:4a:02:66:ae:5b:87:a3:25:20:71:7c:e0:ba:f7:87:9b:
43:93:f8:df:c3:62:00:76:f5:ec:79:ef:3a:da:60:1a:7a:b4:
bf:3f:95:e6:6a:fd:e9:e6:4b:3c:9a:0a:6b:ef:c0:d6:78:05:
98:b2:30:52:ac:c7:30:12:87:7a:fd:9a:d6:d7:e6:75:db:46:
a6:cc:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:54 2025 by rpki-client