Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7b93e6d-51bb-3af3-9333-3f58ebbbed22.roa
File: a7b93e6d-51bb-3af3-9333-3f58ebbbed22.roa (raw, json)
Hash identifier: YwCq5xAeTztEaOhociBWGajTHTwGYu0lcOQNXpCGui0=
Subject key identifier: C9:D2:44:88:4F:5B:C2:72:8B:CD:AA:91:7B:67:E4:93:38:EE:E7:13
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C39DEB93F24AFFE5745B0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7b93e6d-51bb-3af3-9333-3f58ebbbed22.roa
Signing time: Mon 30 Dec 2024 18:10:36 +0000
ROA not before: Mon 30 Dec 2024 18:10:36 +0000
ROA not after: Sun 30 Mar 2025 17:10:36 +0000
asID: 81
IP address blocks: 152.46.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:39:de:b9:3f:24:af:fe:57:45:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:36 2024 GMT
Not After : Mar 30 17:10:36 2025 GMT
Subject: CN=66e1f8fc-a7a4-4e31-8e29-74ceec67445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:22:f7:70:92:88:5e:15:20:02:f0:9d:d0:
32:04:3d:cf:c3:64:dc:7b:fe:c0:94:05:d4:08:8e:
2c:04:a2:bd:1b:e1:09:33:64:22:3b:87:69:4e:74:
b1:7e:1f:d1:d7:25:cb:ae:d8:7d:a9:d4:39:b3:39:
f7:45:da:09:eb:d4:44:1a:f8:41:65:81:a4:9f:45:
84:0d:99:e5:0a:fe:c0:85:b6:d6:49:55:0e:12:c1:
a0:c5:0a:52:80:4d:66:b9:3b:6d:94:a0:76:5d:33:
29:20:9a:6b:bd:d2:e1:5d:36:b2:e0:e8:cd:a7:3f:
bb:0c:8b:25:5b:86:35:ff:be:fd:bb:92:e2:a1:52:
5b:37:1e:4d:90:2b:e2:12:06:0b:5d:99:2f:c9:0f:
59:5f:ba:66:93:0c:00:10:1c:f9:de:b2:2f:87:8e:
ba:16:86:43:c7:34:4d:f1:bc:1d:b9:32:3d:31:3d:
a4:40:59:76:22:c2:49:ec:30:b7:5e:68:83:7b:6e:
8a:a3:c3:a5:4e:13:1e:9d:6d:3f:f4:81:ac:0c:48:
04:7c:3c:1d:c5:47:7a:78:ba:93:21:37:c5:63:13:
50:bf:bc:af:45:9f:06:fe:f6:97:3a:c3:0f:cb:ef:
fc:b4:cb:b3:25:80:3b:7d:83:03:29:02:86:62:85:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D2:44:88:4F:5B:C2:72:8B:CD:AA:91:7B:67:E4:93:38:EE:E7:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7b93e6d-51bb-3af3-9333-3f58ebbbed22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d4:5e:c7:8d:96:21:92:ab:68:ab:56:19:69:be:43:46:27:
a3:46:97:c1:78:ab:3a:6a:b1:20:d9:27:db:b7:b7:7b:db:ef:
00:1f:49:6b:f2:78:9e:e3:60:d1:36:26:2e:c7:2a:77:f2:9c:
66:67:2a:7a:8d:d9:ed:2b:eb:c2:fd:26:bf:58:3d:4e:11:3c:
76:06:5d:9d:25:fd:66:d3:07:69:c2:a4:30:ef:d4:5d:a4:31:
dc:9c:60:d1:79:08:fd:48:68:66:10:e4:6c:30:82:7f:1b:dd:
38:e1:fc:ce:cb:bb:c6:e9:52:33:89:34:08:86:c3:fe:ca:12:
16:41:ff:8e:8d:89:16:aa:91:eb:8c:b6:a4:30:03:d0:22:98:
4f:97:30:7a:c7:5c:7c:fa:29:4c:fd:60:9a:9f:a1:e4:73:a0:
f9:36:95:49:09:30:fd:02:9b:0a:cd:ad:28:a9:ee:bc:26:aa:
bb:91:48:83:55:f6:ee:de:d4:9c:c6:b5:24:1d:f3:e6:18:fb:
f0:97:e2:e1:e5:96:d2:e8:52:8e:2a:0f:15:5d:d0:cf:fa:80:
b7:fe:b7:61:3d:2b:8f:80:c9:7d:86:9c:84:2e:15:84:a5:20:
5c:f7:be:f4:ef:13:f1:66:d9:2c:20:2b:90:6c:b6:6c:87:34:
47:9e:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:54 2025 by rpki-client