Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6027062-92cc-321a-9419-c27173b42f4e.roa
File: a6027062-92cc-321a-9419-c27173b42f4e.roa (raw, json)
Hash identifier: i4QDwvXmgsKOX/Hl6Lw3SvVeL1skviKwR36ikoOwVxk=
Subject key identifier: C9:82:62:6C:C3:C7:AE:65:8C:59:73:4D:0D:A4:A4:B2:63:6D:D6:16
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3248EF34E68D315631C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6027062-92cc-321a-9419-c27173b42f4e.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 13371
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:48:ef:34:e6:8d:31:56:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=5e2a16cc-071b-4f79-b138-36342f8c6d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:76:7a:fa:aa:1f:53:37:c5:80:e2:a2:4f:
2f:f9:e8:28:0f:b0:f7:b6:d2:d4:d3:84:a6:70:44:
d3:73:cf:7b:87:10:fc:5d:d6:04:a0:50:c5:b5:19:
b1:0b:9f:a2:d0:07:71:3f:52:72:9e:31:27:62:0b:
3d:36:85:a2:19:33:14:56:d5:80:99:78:43:e3:a9:
ca:fd:c1:81:45:d6:76:37:fd:e5:b2:cb:a1:0c:85:
45:1e:70:46:a3:0f:80:34:da:e8:c2:0d:64:19:9a:
8c:86:a3:5c:7e:6b:20:ed:67:50:f8:11:db:8c:f6:
5e:f7:b5:31:c1:f4:b6:f3:aa:7f:ae:60:08:f8:e1:
d3:6d:aa:92:11:5e:1d:47:07:ce:89:01:d3:65:c4:
64:43:27:89:70:52:9c:a2:02:db:12:e2:1b:36:d1:
40:d7:76:c7:db:3e:b8:c1:41:28:2e:27:be:ff:72:
c8:af:57:5b:7e:7d:d8:4b:1f:c0:22:2b:02:c9:fe:
ca:8f:b3:78:da:81:c7:8d:82:33:33:8e:1b:3c:4e:
36:f6:e4:c6:91:81:be:8b:ac:46:77:ef:7f:a0:c8:
9b:9b:c7:a5:4f:27:2f:4c:44:6f:98:60:b8:af:ff:
e6:c7:b2:02:4f:53:e2:cd:e4:27:ff:e8:d2:c6:7e:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:82:62:6C:C3:C7:AE:65:8C:59:73:4D:0D:A4:A4:B2:63:6D:D6:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a6027062-92cc-321a-9419-c27173b42f4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:1b:a6:14:de:f3:00:21:c0:8d:39:e9:15:71:bd:da:4e:50:
8e:82:91:af:c7:f2:1e:ea:00:32:21:9d:c5:3d:0b:23:b9:d5:
4f:01:e4:a4:92:be:0e:d6:16:b4:26:35:93:08:29:e0:d7:42:
13:4b:b7:bc:0b:54:0d:80:26:26:10:6e:f7:15:86:23:a8:64:
43:91:39:2f:31:6f:0b:45:59:75:18:15:14:ea:a6:23:e3:57:
e8:d9:9d:b1:27:12:89:01:fa:a6:1f:04:d7:38:28:93:3e:e9:
cf:b9:c2:c4:ea:83:dd:1e:80:21:6e:50:ee:d2:11:5a:bc:35:
6e:86:82:93:7e:c6:69:d3:1a:53:a9:60:93:ff:b2:da:b0:cb:
ab:38:ff:c3:38:8a:30:be:35:86:8a:dc:ec:dc:be:22:de:28:
b3:f5:f4:ed:7d:ac:83:4d:cd:cb:36:b6:c9:8b:a4:9c:9f:ef:
d0:7a:2d:74:a3:38:21:0b:bc:ff:22:f9:2e:de:ca:8c:d9:09:
09:91:63:13:08:e6:38:ab:ac:33:52:74:0e:e9:9b:d1:5c:9a:
f4:21:0f:f2:15:1f:26:e2:c8:ea:d1:e2:4d:a6:1f:0e:59:37:
96:fa:b5:7c:ee:33:d5:92:a7:64:db:7e:ea:14:38:42:3a:0e:
8f:c9:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:47 2025 by rpki-client