Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9db08dac-d336-301e-ab06-a9155c1e3e9c.roa
File: 9db08dac-d336-301e-ab06-a9155c1e3e9c.roa (raw, json)
Hash identifier: 84qA32T1efqwZUAX7N2vPMSf/hbEEtDz0yEg6zWw77w=
Subject key identifier: E5:E2:6C:18:CB:1F:18:E4:B2:BD:C5:6D:EC:1A:86:E6:16:A1:2F:EB
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C2FA6086798806F430980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9db08dac-d336-301e-ab06-a9155c1e3e9c.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.40.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:2f:a6:08:67:98:80:6f:43:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=e3208f3e-b7ea-495b-a410-502e1fa895bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:3a:73:6f:96:40:2c:40:18:00:e9:b0:b0:
62:d9:b9:6f:0a:b6:25:62:ac:47:8a:5e:97:6e:73:
0a:99:84:cc:f1:6d:63:2f:47:62:cf:b7:e3:de:5f:
cf:8f:11:df:c8:24:97:ed:63:96:c6:63:aa:05:f1:
32:01:ec:45:cf:79:fc:1a:cf:dc:0c:f9:6e:ba:32:
0c:38:67:61:f0:a4:7f:8f:04:a2:a5:56:4a:68:1b:
84:30:45:91:c4:83:38:6a:5c:a4:47:15:0f:7e:c0:
98:2b:cd:7d:1c:43:8e:02:f0:d5:46:4d:ff:3a:8b:
d7:cc:9f:eb:41:ff:7d:70:47:c3:fc:69:a7:0d:99:
01:62:99:43:b4:fb:0b:c0:0c:8f:3b:4c:b0:8c:f4:
32:3f:ad:78:03:1e:e0:30:83:6f:89:73:79:71:1e:
cc:c6:0d:84:9f:1b:4b:43:d2:04:5f:d9:64:e0:7c:
37:c8:11:a2:bb:82:10:c2:91:63:19:0a:7f:f4:5c:
56:fd:c7:b8:7b:d9:71:2b:e2:68:d9:4b:e2:04:93:
f3:d3:8b:e1:3e:cf:0a:31:24:a8:b0:d4:4f:fc:55:
b9:3d:9b:b1:ef:64:ec:cf:c8:65:80:7e:a2:fa:5e:
6b:29:ac:57:5b:24:47:e0:e2:70:e1:e9:bf:c8:cd:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:6C:18:CB:1F:18:E4:B2:BD:C5:6D:EC:1A:86:E6:16:A1:2F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9db08dac-d336-301e-ab06-a9155c1e3e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:cd:7e:2a:b4:bc:4b:4c:23:fc:68:2f:e6:24:88:62:13:95:
b0:31:f4:f4:ed:d3:a9:1d:df:a8:e4:a2:d6:3c:4c:21:00:ba:
5e:3b:0b:02:33:e4:42:e6:cd:51:0e:50:ac:bd:01:b6:b5:4b:
df:19:a1:5e:ae:6e:bf:5e:65:0c:a7:12:98:f2:b1:6b:56:b8:
82:4e:6f:af:67:1a:30:62:4b:4f:9e:40:2f:1c:7e:f8:b4:09:
f4:35:90:c3:a5:ac:f9:3b:94:8b:2a:28:6d:a9:c9:e4:f1:d2:
76:01:3b:91:ef:87:d4:00:35:53:eb:62:b9:56:e8:61:e0:f7:
98:21:e9:4a:09:00:1f:48:12:e7:10:48:d7:6f:2a:13:e9:e5:
19:41:cb:f0:e7:58:fc:5d:52:91:9d:bf:31:fc:bc:20:51:fb:
38:37:bf:dc:f0:68:5c:ea:6a:7e:8e:85:bf:88:97:62:2d:6e:
9c:d3:32:a0:0d:a3:25:bc:f6:0f:96:5d:4d:81:64:64:8d:f3:
9b:05:e8:12:31:4c:29:35:90:df:15:8c:43:e0:fd:30:6f:e0:
05:31:66:e8:20:09:fa:c6:ce:35:c1:98:d8:52:e5:08:1a:03:
29:92:d8:ee:16:92:6f:13:9d:ac:a9:11:2b:e2:f1:1b:a1:5f:
e2:32:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:19:12 2025 by rpki-client