Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a319c5bc-0285-393e-af3c-9a8a113480e6.roa
File: a319c5bc-0285-393e-af3c-9a8a113480e6.roa (raw, json)
Hash identifier: HnXJg8BF453bP+IC9ltvMFLeYIQ/1uG+SYIVkkWMNac=
Subject key identifier: D0:1C:C9:1B:2F:14:95:F6:05:A0:F6:0E:18:45:67:52:DB:3C:16:37
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C339E7227A9FB8BA129E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a319c5bc-0285-393e-af3c-9a8a113480e6.roa
Signing time: Mon 30 Dec 2024 18:10:33 +0000
ROA not before: Mon 30 Dec 2024 18:10:33 +0000
ROA not after: Sun 30 Mar 2025 17:10:33 +0000
asID: 81
IP address blocks: 152.26.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:33:9e:72:27:a9:fb:8b:a1:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:33 2024 GMT
Not After : Mar 30 17:10:33 2025 GMT
Subject: CN=121b97d0-de57-4728-b6ed-74b54e3be494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:a6:bf:fd:af:0a:cd:a7:55:55:7b:3d:2d:
b1:b7:8c:f1:2e:da:cf:ee:23:42:e4:da:d7:cb:43:
37:1a:3f:c5:b0:9e:25:97:f0:5c:b4:e8:ed:30:cb:
4a:a9:f9:8a:32:d4:32:7a:f2:f8:27:92:27:48:79:
2f:b2:9b:fb:c7:3f:54:2e:9f:10:97:3d:10:03:c9:
02:66:ee:a9:4a:96:69:2c:e6:2f:ae:75:e9:f8:b5:
3c:75:7b:bc:24:b3:94:40:57:06:bf:24:ce:77:3d:
41:9b:78:df:2a:87:e3:6d:cc:63:46:12:0a:7b:a4:
b4:7f:ec:7b:e7:03:7a:59:c9:1a:c4:f7:37:6f:72:
9e:25:56:a5:37:21:3a:de:5f:dc:93:a8:44:fa:f3:
42:58:10:c7:61:01:ae:c5:f3:bd:56:d8:df:7f:67:
e4:31:9e:9b:c6:c6:b9:e9:f2:08:a6:02:14:29:15:
a8:08:b0:d5:cf:f0:85:c2:d1:13:61:06:2d:74:71:
8f:99:a2:25:d8:b8:01:90:15:78:0b:a6:95:e7:77:
f8:60:89:db:0d:47:c3:e3:4f:cb:a0:5e:c9:69:35:
a8:ee:12:91:40:d6:5e:76:53:ba:11:0b:36:50:be:
bd:cc:98:ee:84:a0:12:98:68:27:e1:1b:0c:64:81:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1C:C9:1B:2F:14:95:F6:05:A0:F6:0E:18:45:67:52:DB:3C:16:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a319c5bc-0285-393e-af3c-9a8a113480e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.26.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:bb:c2:6e:db:14:b9:18:3d:75:cd:eb:67:25:0d:fd:e9:88:
77:ab:8e:ff:71:3f:b8:f9:4e:0f:83:82:e8:86:c5:a0:fb:35:
36:50:6e:30:7a:0a:3c:6d:9d:01:07:0a:f2:e2:d1:49:62:bb:
ed:f2:9c:85:c4:75:9d:b5:e6:4c:8d:87:92:b9:a8:de:1e:52:
e1:78:fb:17:4b:05:c1:88:49:13:2e:d8:ea:68:90:06:9e:30:
a5:da:c6:80:1f:e6:81:92:fb:30:bc:66:a5:44:c2:c0:8a:f8:
54:c1:65:27:96:d8:12:81:45:d3:1e:40:02:ba:ac:5c:3f:6a:
82:4d:89:3e:4f:c9:37:0c:65:5a:47:ae:63:79:e9:57:44:47:
8b:47:1f:73:2d:c4:28:f9:bb:b7:ba:f9:fa:cf:a0:8b:09:77:
38:c9:19:f4:35:70:60:2a:86:51:da:90:2a:a7:f6:ac:aa:01:
88:df:82:d9:ed:e0:c6:d0:89:bb:d5:40:bc:ba:27:2c:c8:f5:
8a:41:f4:27:aa:2b:ee:1a:42:6f:4c:ec:bb:11:b7:f7:d9:92:
e1:cc:ee:63:32:73:ba:9d:e4:4f:89:21:bb:43:7c:76:f9:92:
a5:3c:cd:b6:7c:d1:fe:3b:c2:74:94:d6:d8:22:97:72:cb:ec:
ab:c3:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:06 2025 by rpki-client