Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89c9d43f-2741-37c9-aa5d-8bba133cb709.roa
File: 89c9d43f-2741-37c9-aa5d-8bba133cb709.roa (raw, json)
Hash identifier: f9bdPQnaIPFtU/kc5BHw4asEkLVcndzy21Mmi7YkAeI=
Subject key identifier: A0:42:92:D8:EB:5C:54:8A:7F:AA:29:EA:3F:C8:7A:95:9D:34:76:22
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C369C7653112EA658B400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89c9d43f-2741-37c9-aa5d-8bba133cb709.roa
Signing time: Mon 30 Dec 2024 18:10:34 +0000
ROA not before: Mon 30 Dec 2024 18:10:34 +0000
ROA not after: Sun 30 Mar 2025 17:10:34 +0000
asID: 81
IP address blocks: 152.45.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:36:9c:76:53:11:2e:a6:58:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:34 2024 GMT
Not After : Mar 30 17:10:34 2025 GMT
Subject: CN=e8741e80-8946-412f-8753-3026a202fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:aa:44:7e:ea:3c:99:42:a2:79:66:20:5d:96:
b2:9f:6f:a3:e6:5a:84:10:16:b3:31:17:77:0d:83:
6a:3d:43:e3:c2:91:99:e4:0c:5b:b7:31:69:54:f9:
f3:9e:71:75:16:c9:ba:ae:68:d8:60:eb:59:49:c4:
09:ad:94:6a:62:1b:54:30:9a:22:cc:fa:9c:4a:8d:
a8:84:ed:e0:b8:ff:d7:c6:0e:fa:ff:ad:17:5a:72:
03:3d:23:ab:cb:6f:3e:a8:2e:ea:44:57:23:a6:61:
8a:d3:09:23:0d:10:28:ec:3c:80:3a:72:49:1a:25:
05:ca:ee:2f:06:5b:92:65:f5:4e:14:20:6b:7f:69:
49:ce:ed:06:65:46:de:72:b8:27:ed:44:42:f5:6f:
a9:45:fa:ed:d5:a1:f4:57:64:94:3e:56:ba:6f:fd:
e1:5f:8d:dc:d6:2a:a5:09:23:55:21:a1:46:ef:9d:
e1:62:be:e4:a0:80:15:c5:83:1b:23:b4:44:47:30:
a0:54:cb:db:39:dc:4e:84:3c:0f:ca:e8:cd:74:1f:
61:6a:1c:3b:8d:52:d7:4d:d6:c7:95:e4:b4:07:3a:
3d:b0:0e:ed:f3:16:8f:ed:83:3a:b3:ee:60:8d:31:
ef:9c:be:e7:ff:7b:9c:c9:49:27:ad:36:18:61:33:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:42:92:D8:EB:5C:54:8A:7F:AA:29:EA:3F:C8:7A:95:9D:34:76:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/89c9d43f-2741-37c9-aa5d-8bba133cb709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:c8:bf:71:a5:02:6d:3e:d0:ce:29:92:75:0c:23:3d:f4:5b:
85:cf:c7:2b:4e:de:11:24:f7:ec:25:c7:1a:83:77:0f:00:ee:
d1:a9:52:09:40:f0:b1:88:6d:a0:de:12:c2:94:9a:45:b8:ad:
5b:b3:8d:36:e0:7c:34:25:65:10:a3:96:4f:5c:9e:51:d1:d6:
59:58:ec:02:56:b7:33:6d:cd:3d:45:e8:d6:a0:ad:08:6c:ce:
19:cf:ea:a8:d1:88:80:2d:ce:1f:5d:5d:22:19:b4:b7:dc:55:
57:93:b4:a2:61:a0:06:96:1c:09:64:99:3f:0b:66:c1:24:e8:
ad:f1:2d:26:8e:88:26:87:9b:1a:66:87:29:21:ca:9d:01:be:
b2:ee:0f:50:03:20:cf:3b:34:93:32:54:18:fd:5d:4d:c3:57:
4b:d8:59:5a:d6:cd:07:39:fe:2f:92:e5:97:eb:19:36:61:a5:
74:12:b0:f9:5c:e4:f8:d4:af:8f:c3:fa:20:6e:f0:df:76:2c:
34:74:d5:f1:70:d1:e0:2c:8b:aa:d4:69:49:73:27:cf:e6:43:
2b:a9:6a:5d:2b:07:0b:05:44:d6:eb:e9:84:78:ab:33:ba:43:
00:61:9c:f0:e6:5c:b4:7f:a3:a4:ca:9b:9e:10:58:98:fa:ec:
33:71:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:41 2025 by rpki-client