Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5867d60-e434-30f1-998a-c9c427b13083.roa
File: a5867d60-e434-30f1-998a-c9c427b13083.roa (raw, json)
Hash identifier: HuMBgjC6G7J77pY6nsIgD3aINquetPAKTa/T2g88yak=
Subject key identifier: 2D:C8:CF:7C:91:7D:51:B0:B3:7F:CD:5B:F7:DA:D9:9F:AF:40:88:1B
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C371E0612754C6F344700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5867d60-e434-30f1-998a-c9c427b13083.roa
Signing time: Mon 30 Dec 2024 18:10:35 +0000
ROA not before: Mon 30 Dec 2024 18:10:35 +0000
ROA not after: Sun 30 Mar 2025 17:10:35 +0000
asID: 81
IP address blocks: 152.45.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:37:1e:06:12:75:4c:6f:34:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:35 2024 GMT
Not After : Mar 30 17:10:35 2025 GMT
Subject: CN=611f4774-53f3-4112-bf0b-b3d7a76fdb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:3b:34:c3:a0:2c:43:7a:bb:ff:27:7a:64:
aa:3c:4a:74:1c:a8:11:92:58:4c:7d:bf:e5:29:0c:
fe:05:f5:10:77:86:6c:ca:99:e9:81:01:34:e3:5e:
c1:04:5b:40:36:85:72:df:ef:d4:41:8f:88:cc:60:
8f:69:be:6e:a3:67:5c:15:75:a3:95:3f:d8:81:a6:
7a:0a:ee:82:cb:87:5d:63:bb:f2:f9:41:be:f2:bc:
f8:15:7c:32:f3:c1:e1:b2:2d:14:a1:81:0f:cd:85:
7c:bb:9f:30:02:cb:94:cb:3e:bc:83:c1:b6:4c:61:
82:c8:40:23:9a:9a:6d:58:b5:a3:ff:80:d4:74:66:
0b:94:d3:02:56:f8:06:77:34:82:53:5d:f8:79:a0:
a5:9c:84:16:8e:4c:53:a6:52:ca:9a:63:a6:66:dd:
ca:23:b8:df:48:6f:cd:40:dd:23:f1:5f:17:a0:b2:
93:e0:0e:df:0a:f8:cd:4e:ea:b4:c0:21:8d:d3:81:
c4:e9:4d:bb:2a:f6:95:5b:86:c4:9d:73:33:9e:98:
07:96:d6:f6:57:dd:ff:02:91:ba:e0:e3:ca:16:5e:
64:7e:3c:7b:9c:7b:aa:e3:98:89:30:4d:e3:86:68:
ae:17:8f:b1:1a:64:31:ef:92:d6:6f:35:25:1b:3c:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:CF:7C:91:7D:51:B0:B3:7F:CD:5B:F7:DA:D9:9F:AF:40:88:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a5867d60-e434-30f1-998a-c9c427b13083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.45.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:19:7a:d8:fd:d5:d2:37:28:e0:37:07:8a:48:fc:57:fb:bc:
eb:5b:a7:35:b4:fb:f5:c9:0a:6c:7a:79:d7:54:e6:d6:d4:23:
86:06:7c:5f:b3:b9:00:04:00:27:a2:11:c7:35:de:07:e2:0c:
6c:fc:ff:46:05:20:d5:97:fc:28:2e:b9:7b:b5:75:1b:b7:ff:
94:b7:17:d9:8e:5a:6f:ab:db:22:85:98:2e:37:8d:1e:ca:32:
11:99:b8:03:f4:c9:3f:b3:cc:96:50:b6:31:f3:29:60:30:cf:
4e:f0:c7:37:44:5d:68:f1:1b:02:b8:2f:94:3c:00:21:ad:ed:
1d:ff:49:47:7a:6a:1a:c8:f9:34:45:fc:73:25:48:8b:6f:89:
df:25:9e:da:5f:1a:fb:14:2a:98:c4:f1:fe:b6:2b:71:85:8b:
e7:60:b6:61:bb:0f:5d:83:ce:c9:45:b9:3b:e4:8b:e8:97:f3:
74:14:c8:dc:0d:82:50:f7:b0:53:fa:29:dd:85:3e:53:f6:91:
74:ed:72:43:25:78:e0:d3:21:21:86:de:ff:ab:95:ff:5e:6d:
c8:5c:f2:ab:72:79:65:5c:10:f0:d3:3a:d3:31:93:71:72:54:
c9:fa:10:dd:19:58:0d:7b:d9:24:88:ab:5a:24:cf:80:42:3a:
3c:63:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:41 2025 by rpki-client