Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af3854d1-410c-3831-8e00-b9a8ada3ab59.roa
File: af3854d1-410c-3831-8e00-b9a8ada3ab59.roa (raw, json)
Hash identifier: XOTJE3X3t25KzymU/eX5AeLTc1FbRbqG0Bov1U2ymuc=
Subject key identifier: 21:D2:0F:C5:C1:4C:D0:F7:14:83:A5:EB:27:62:68:E6:1D:3C:F7:26
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C328402E7121E9D48C3C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af3854d1-410c-3831-8e00-b9a8ada3ab59.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 152.22.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:84:02:e7:12:1e:9d:48:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=3cb4fd44-ae30-4768-8bf9-1e10d1aeb48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:3d:0c:de:25:39:51:7c:01:c8:6e:86:ba:
2c:33:3e:12:a8:e2:ca:7f:e2:a9:79:16:6a:3c:05:
03:dc:77:f4:ec:0c:6a:c2:ac:47:42:23:49:3e:fe:
8a:8d:45:b8:1e:af:59:ac:dc:14:f6:9d:8b:1b:51:
4b:73:1c:53:ed:47:5e:21:8c:a6:8c:66:bb:48:03:
37:a1:f8:1c:af:39:51:8c:6f:d5:00:33:82:58:95:
03:94:4e:5f:8c:2a:54:eb:59:35:20:82:4c:29:29:
02:0d:10:64:20:5c:c0:ed:54:af:63:03:5b:0d:05:
6a:9d:f0:38:f2:b7:d3:7b:ea:d2:c2:1b:6b:4d:69:
18:21:0c:13:c8:fd:f2:ae:9d:c1:70:f1:ed:a7:d3:
3a:50:f6:98:a1:df:d5:3a:6c:46:6c:ae:81:ec:e9:
5c:46:26:e3:17:4f:a8:d2:99:25:ee:c2:75:4e:45:
22:43:e5:de:67:55:74:f7:ec:83:14:04:ba:0d:b3:
ed:ed:f9:fa:0f:1a:40:55:17:0f:74:1a:19:1b:48:
e4:ae:63:57:4e:20:ba:8e:89:db:cc:06:75:81:56:
74:4a:55:01:c5:4b:30:1b:fb:06:ee:8e:9e:7b:7b:
28:18:31:f9:ad:1c:f8:36:df:a1:f5:4c:51:9f:37:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:0F:C5:C1:4C:D0:F7:14:83:A5:EB:27:62:68:E6:1D:3C:F7:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af3854d1-410c-3831-8e00-b9a8ada3ab59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4a:80:40:ef:3d:f9:26:64:e0:6d:66:46:7a:1e:f0:a7:28:
c0:f3:26:26:b3:38:c4:6d:53:88:cc:51:fc:f0:c4:02:c3:49:
14:12:8a:8d:3d:fb:58:fc:35:ae:10:b9:f5:9f:38:d5:e2:7c:
af:ac:72:28:04:2a:3a:79:5a:77:31:76:49:02:a3:a1:70:23:
1a:16:f3:9d:92:c5:7e:5f:a9:52:39:41:42:be:72:0d:cf:05:
97:2b:8e:12:90:94:52:cc:87:52:5b:9d:01:c0:43:27:0d:9e:
f5:e0:32:82:f5:30:33:f6:3d:0e:f9:0f:1f:3a:7e:a2:f0:06:
ba:d7:af:a1:be:3a:05:2c:7c:fc:49:d9:b3:f6:b1:5f:95:1f:
4d:f4:45:be:3a:48:b5:f9:78:84:f2:8a:2c:8d:f3:ed:7d:ed:
17:6f:8a:48:36:06:c4:61:47:96:07:ef:c9:d6:b2:f0:19:b5:
d9:d3:d6:f3:f3:c6:97:c0:4f:5c:47:b4:5c:f6:16:c3:19:1e:
bc:3f:18:82:78:e1:91:63:c4:19:22:6a:19:75:c1:e2:d1:b3:
d8:c1:b1:6d:29:0e:2b:8d:ec:73:b4:d7:b8:f0:a3:cd:43:c5:
e3:19:12:2b:c2:9f:d3:f1:44:aa:96:e6:0f:52:7f:24:96:88:
53:5c:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:33 2025 by rpki-client