Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad1a588f-4ef4-3699-93b6-8909596dbada.roa
File: ad1a588f-4ef4-3699-93b6-8909596dbada.roa (raw, json)
Hash identifier: /8Y3oPTf0QVQYO2EAxKZAix5aIOzgt47QjyeF4qf14w=
Subject key identifier: 50:F4:68:B9:0B:03:9D:C5:69:50:C9:D4:49:23:0C:83:94:1D:C2:F6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C2F6BFE55B436796B0BC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad1a588f-4ef4-3699-93b6-8909596dbada.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.29.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:2f:6b:fe:55:b4:36:79:6b:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=7b602881-6715-4228-aa06-e77a5da00f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:40:df:38:1b:ed:05:72:1a:0b:12:57:d8:83:
6c:0e:26:81:a6:56:07:7d:a3:b7:d5:e0:80:00:0c:
04:ee:2c:4a:d6:08:78:1c:01:34:d1:83:9b:fe:8d:
ca:02:06:9b:b0:93:58:18:45:4a:a5:b2:03:1c:33:
ad:b5:e4:1c:e5:38:52:21:7d:a1:6f:5a:e8:32:fe:
43:4e:42:5d:77:e6:cc:c1:72:cb:de:1a:6c:90:02:
2d:85:a6:a9:fb:f2:63:fa:71:a8:fa:38:a2:82:85:
ff:45:f3:90:44:78:5b:7f:77:49:de:80:39:56:6f:
42:f5:16:6a:d5:04:17:d0:c5:21:45:15:4a:67:4a:
ac:b2:aa:6a:25:57:91:96:4f:22:73:4c:a2:c3:54:
4b:01:cc:a2:5f:bb:93:f3:4b:6e:16:db:a8:2e:15:
5c:4a:15:db:0a:ca:2c:d8:89:63:e6:28:f1:e8:6d:
7e:e4:8d:4a:8a:48:a5:da:5e:4a:2e:4d:b0:a5:7c:
b4:1d:74:34:e5:59:65:52:dc:40:f8:7e:c9:94:e7:
92:16:59:13:93:34:91:a4:22:cc:75:d5:80:3f:05:
99:f2:4d:88:40:b8:7c:bc:01:07:de:f7:5f:14:26:
5e:3a:eb:9d:09:a5:fb:be:df:94:00:fc:33:01:22:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F4:68:B9:0B:03:9D:C5:69:50:C9:D4:49:23:0C:83:94:1D:C2:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad1a588f-4ef4-3699-93b6-8909596dbada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:42:3c:73:0b:39:9c:78:41:3a:9d:17:0b:2a:c8:e6:df:9f:
17:89:c4:ba:a7:4f:c1:54:22:18:d8:eb:35:e4:87:b1:f2:2e:
27:be:21:ac:74:ef:bb:0d:4e:b7:63:8d:39:59:22:d1:3c:92:
b5:a9:cf:f7:77:f9:0f:61:db:a2:43:5d:8a:b4:ea:84:ea:64:
86:c0:e6:02:05:a8:09:50:93:5f:66:a6:6e:03:ec:e3:c9:4b:
56:f2:cf:1d:ba:9f:64:7c:64:3e:71:c6:59:36:01:bb:1c:0e:
60:e1:65:06:93:3a:fc:e5:29:4b:82:8d:9d:f8:c5:e0:46:05:
2b:b7:4d:18:08:f4:51:28:0c:1d:a7:30:e2:87:51:5c:fc:6e:
5d:30:b1:60:b8:7c:67:48:d7:68:d6:a6:eb:dd:89:d1:04:84:
7e:dd:16:10:18:69:6e:6f:5d:92:6b:ac:ed:57:15:35:9b:ea:
87:fd:68:e5:93:79:f6:dd:13:38:11:57:66:ec:ac:31:fe:9f:
2b:db:e0:5f:8e:36:75:98:fb:19:6c:8e:1c:f8:ac:27:99:d6:
b9:36:8c:16:c3:2e:5d:c0:cc:c1:bf:39:0c:04:d6:79:f8:31:
b6:77:7b:a9:a5:8d:06:d5:3f:69:72:76:f5:bb:09:87:c0:06:
ff:37:0d:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhhfC9r/lW0NnlrC8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzMVoXDTI1MDMzMDE3MTAzMVowLzEtMCsGA1UEAxMk
N2I2MDI4ODEtNjcxNS00MjI4LWFhMDYtZTc3YTVkYTAwZjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkDfOBvtBXIaCxJX2INsDiaBplYHfaO31eCA
AAwE7ixK1gh4HAE00YOb/o3KAgabsJNYGEVKpbIDHDOtteQc5ThSIX2hb1roMv5D
TkJdd+bMwXLL3hpskAIthaap+/Jj+nGo+jiigoX/RfOQRHhbf3dJ3oA5Vm9C9RZq
1QQX0MUhRRVKZ0qssqpqJVeRlk8ic0yiw1RLAcyiX7uT80tuFtuoLhVcShXbCsos
2Ilj5ijx6G1+5I1Kikil2l5KLk2wpXy0HXQ05VllUtxA+H7JlOeSFlkTkzSRpCLM
ddWAPwWZ8k2IQLh8vAEH3vdfFCZeOuudCaX7vt+UAPwzASI4MwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFD0aLkLA53FaVDJ1EkjDIOUHcL2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWQxYTU4OGYtNGVmNC0z
Njk5LTkzYjYtODkwOTU5NmRiYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGEI8cws5nHhBOp0XCyrI5t+fF4nEuqdPwVQiGNjrNeSHsfIuJ74hrHTv
uw1Ot2ONOVki0TyStanP93f5D2HbokNdirTqhOpkhsDmAgWoCVCTX2ambgPs48lL
VvLPHbqfZHxkPnHGWTYBuxwOYOFlBpM6/OUpS4KNnfjF4EYFK7dNGAj0USgMHacw
4odRXPxuXTCxYLh8Z0jXaNam692J0QSEft0WEBhpbm9dkmus7VcVNZvqh/1o5ZN5
9t0TOBFXZuysMf6fK9vgX442dZj7GWyOHPisJ5nWuTaMFsMuXcDMwb85DATWefgx
tnd7qaWNBtU/aXJ29bsJh8AG/zcNug==
-----END CERTIFICATE-----
Generated at Sun May 11 23:45:13 2025 by rpki-client