Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa
File: a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa (raw, json)
Hash identifier: kgQ7TjsMK/cjRoZfZcUIuKX5G1/GgHNlh23yPAZoXZs=
Subject key identifier: 36:E7:AF:92:D8:FC:25:AE:44:A2:20:0C:88:2A:C1:FE:35:F2:BB:DA
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C35E2838ADF24005EA880
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa
Signing time: Mon 30 Dec 2024 18:10:34 +0000
ROA not before: Mon 30 Dec 2024 18:10:34 +0000
ROA not after: Sun 30 Mar 2025 17:10:34 +0000
asID: 81
IP address blocks: 152.28.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:35:e2:83:8a:df:24:00:5e:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:34 2024 GMT
Not After : Mar 30 17:10:34 2025 GMT
Subject: CN=47fb1f55-cba1-45b7-8334-535fa845a703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:c7:7c:a5:2d:be:92:95:44:a6:17:b8:58:
4c:81:eb:d1:3f:06:c6:b1:4e:2f:06:ac:52:62:dc:
b6:7e:c4:d5:a5:fd:28:d6:a5:45:f3:e9:e3:26:e5:
0e:db:5a:9a:f4:06:99:ac:bb:85:bf:30:22:fd:27:
69:f6:27:00:e3:23:b8:80:2d:4d:7c:7c:5d:27:a5:
64:39:b3:6b:a5:89:96:40:c9:c5:a3:f9:9a:42:2b:
1a:dd:3d:79:46:00:e2:53:34:61:0f:19:82:5b:34:
1d:f0:71:2c:ef:9e:25:9d:96:03:96:42:37:d6:32:
46:7b:b4:fc:fb:e2:8c:f8:eb:31:13:94:07:8b:81:
61:05:e8:90:11:7e:35:ef:46:3b:49:4f:1b:7d:dd:
c5:11:14:82:b8:99:3a:e8:12:2b:4f:d7:9d:1e:26:
52:44:95:37:36:e9:21:5c:3c:8f:ea:c7:56:dc:38:
08:5b:6b:67:f3:94:79:e5:73:dd:3a:c6:18:c3:25:
06:67:5a:e5:a5:b4:67:4e:73:49:c5:c7:76:9f:13:
b0:ed:49:0f:30:53:df:bd:f7:0d:d4:0c:ea:b0:9f:
98:f2:c3:c0:84:db:cf:bd:34:ba:2c:f2:a5:ae:92:
f5:74:46:5d:ed:2f:70:98:fd:08:84:b0:de:a4:1f:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:AF:92:D8:FC:25:AE:44:A2:20:0C:88:2A:C1:FE:35:F2:BB:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7ea9f86-9a81-3464-97ba-a5ad1216701b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.28.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:84:31:ee:d3:62:5a:20:6e:e6:a5:b3:cc:3a:17:21:d5:69:
3c:f4:54:f9:b5:7a:15:70:a0:ff:32:78:c1:e2:e0:93:fe:31:
9d:42:89:76:28:13:61:db:82:8d:58:a3:2f:cc:75:65:a1:b9:
a0:0a:68:dc:ba:61:7a:fa:b7:10:90:7f:3c:cc:6c:14:16:d2:
48:97:77:40:fe:b7:55:34:49:fe:c5:67:78:1d:bb:ce:fd:2d:
e1:90:9c:4e:6c:0d:e3:84:58:44:58:a4:e1:f4:1d:d1:cb:31:
58:a5:42:52:8b:1f:d8:c2:12:f2:39:7c:b2:bf:2c:07:29:ce:
38:3a:4a:b0:40:85:13:7b:99:9c:d1:0c:77:4c:ca:a5:ff:2b:
51:c0:d6:fc:b6:f7:d5:72:2a:19:42:0e:bc:2e:2f:f4:19:d9:
dc:24:92:f8:f1:5e:c7:e2:29:6e:40:c3:9f:a0:fe:e4:4e:98:
d6:61:e5:92:25:4a:5c:57:01:0f:b8:03:93:a2:db:91:10:20:
a5:51:75:fb:0e:29:99:52:16:2f:08:6a:9d:d1:f8:55:a9:32:
06:41:06:cd:b9:7d:4c:bd:7d:13:7c:a7:a8:54:6b:26:01:04:
01:7c:e0:84:08:73:77:6b:59:02:71:99:1b:57:34:17:3c:0b:
25:cc:20:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhhfDXig4rfJABeqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzNFoXDTI1MDMzMDE3MTAzNFowLzEtMCsGA1UEAxMk
NDdmYjFmNTUtY2JhMS00NWI3LTgzMzQtNTM1ZmE4NDVhNzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscnHfKUtvpKVRKYXuFhMgevRPwbGsU4vBqxS
Yty2fsTVpf0o1qVF8+njJuUO21qa9AaZrLuFvzAi/Sdp9icA4yO4gC1NfHxdJ6Vk
ObNrpYmWQMnFo/maQisa3T15RgDiUzRhDxmCWzQd8HEs754lnZYDlkI31jJGe7T8
++KM+OsxE5QHi4FhBeiQEX4170Y7SU8bfd3FERSCuJk66BIrT9edHiZSRJU3Nukh
XDyP6sdW3DgIW2tn85R55XPdOsYYwyUGZ1rlpbRnTnNJxcd2nxOw7UkPMFPfvfcN
1AzqsJ+Y8sPAhNvPvTS6LPKlrpL1dEZd7S9wmP0IhLDepB9dTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbnr5LY/CWuRKIgDIgqwf418rvaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTdlYTlmODYtOWE4MS0z
NDY0LTk3YmEtYTVhZDEyMTY3MDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBwBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWEMe7TYlogbuals8w6FyHVaTz0VPm1ehVwoP8yeMHi4JP+MZ1CiXYo
E2Hbgo1Yoy/MdWWhuaAKaNy6YXr6txCQfzzMbBQW0kiXd0D+t1U0Sf7FZ3gdu879
LeGQnE5sDeOEWERYpOH0HdHLMVilQlKLH9jCEvI5fLK/LAcpzjg6SrBAhRN7mZzR
DHdMyqX/K1HA1vy299VyKhlCDrwuL/QZ2dwkkvjxXsfiKW5Aw5+g/uROmNZh5ZIl
SlxXAQ+4A5Oi25EQIKVRdfsOKZlSFi8Iap3R+FWpMgZBBs25fUy9fRN8p6hUayYB
BAF84IQIc3drWQJxmRtXNBc8CyXMIP8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:55 2025 by rpki-client