Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a81853b8-4a4e-30b1-8794-18e24812d4f3.roa
File: a81853b8-4a4e-30b1-8794-18e24812d4f3.roa (raw, json)
Hash identifier: uQweJzm28PAKOJvVmUcIY2WFOdioRxfLaAnjQcc7V30=
Subject key identifier: FA:FC:25:52:2C:18:23:F5:98:AB:5B:28:68:EB:48:8E:79:32:97:30
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3A36063AB1EDA49386C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a81853b8-4a4e-30b1-8794-18e24812d4f3.roa
Signing time: Mon 30 Dec 2024 18:10:36 +0000
ROA not before: Mon 30 Dec 2024 18:10:36 +0000
ROA not after: Sun 30 Mar 2025 17:10:36 +0000
asID: 81
IP address blocks: 152.46.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3a:36:06:3a:b1:ed:a4:93:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:36 2024 GMT
Not After : Mar 30 17:10:36 2025 GMT
Subject: CN=3ab12f9d-cacf-48e5-a5ec-2a5ab9427a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:59:46:2f:11:0b:b3:6b:4a:4c:54:b7:2e:
b4:a5:db:61:5e:a9:fa:63:8d:41:0a:6a:94:f4:38:
05:7b:72:2a:21:bd:97:85:37:5a:ae:92:c0:06:3a:
6e:ba:4f:e2:e9:17:dc:4d:3f:61:33:47:a7:ab:9c:
18:db:8d:ce:51:aa:39:22:9d:6a:25:14:1e:2e:c4:
9a:fd:22:fa:ae:1a:9a:96:31:a8:27:4e:c7:96:50:
69:1e:0d:84:06:25:23:89:91:a9:18:27:42:f0:52:
f4:eb:29:df:9e:2c:d7:a0:f5:de:05:7c:2d:98:18:
f4:12:5c:6c:c2:ef:59:e4:57:77:86:06:88:49:76:
a0:5d:5f:cd:21:65:1f:0c:5d:65:18:bb:b9:7d:f9:
3b:da:37:40:43:3e:b3:f6:2f:f0:c8:3d:17:35:af:
d4:54:a3:3e:af:c7:7f:c7:f4:b8:cc:98:9e:ba:17:
34:cf:38:61:b1:ea:c0:f3:2e:6c:db:19:81:3f:eb:
53:81:0d:92:6a:21:05:50:87:af:69:ff:70:e1:f8:
1c:3a:de:76:08:42:c0:5d:97:87:3a:b0:14:09:19:
82:ed:45:b2:b1:0d:33:67:fa:dc:56:d7:b5:fb:5e:
7c:8d:c9:a6:a7:67:c8:6e:6a:fd:43:65:70:f4:2a:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:25:52:2C:18:23:F5:98:AB:5B:28:68:EB:48:8E:79:32:97:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a81853b8-4a4e-30b1-8794-18e24812d4f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:81:8b:e6:77:e9:9c:ab:37:fe:8e:09:42:41:88:59:2d:d4:
b6:78:18:1e:d3:81:79:3f:e0:ed:d8:c8:5d:77:10:b1:ef:94:
d1:0c:aa:19:9f:bd:1c:58:63:d7:aa:11:dd:1a:18:a5:d8:70:
64:84:9c:73:70:57:25:fe:f4:7a:dd:ce:86:db:cf:87:de:31:
c7:7b:cb:fd:fe:fe:13:68:a1:23:86:c5:12:e9:f6:85:63:ff:
1e:28:6a:05:81:6b:ea:6d:79:b1:9c:41:01:8f:66:b3:c3:d3:
43:60:79:4c:cb:f2:dc:7d:78:56:fb:9e:d5:51:bf:45:89:bb:
31:3b:e9:9f:94:b0:e7:ab:73:e6:8b:86:f2:b7:9b:1a:3c:56:
99:bb:61:0f:dd:20:ec:77:55:8b:65:fe:1b:ca:7d:6a:5f:9b:
d5:5b:05:31:d1:4c:b1:12:38:bd:54:48:2d:5d:46:e9:36:63:
fd:c5:91:14:d1:50:4a:81:c4:07:28:ea:d7:bb:e2:e1:27:2a:
f4:50:d4:c6:b3:3c:58:29:b1:66:9a:aa:32:4b:29:c4:46:ac:
22:5c:e8:fc:01:93:86:63:ae:cd:09:88:af:74:f4:61:45:e6:
9e:8f:d1:3e:6d:b9:79:6f:f8:6d:4e:6b:32:7d:1b:b6:65:e9:
51:e3:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:06 2025 by rpki-client