Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bb71d2e6-d8ff-35ec-a7ee-a71c74b66948.roa
File: bb71d2e6-d8ff-35ec-a7ee-a71c74b66948.roa (raw, json)
Hash identifier: d56ONC5pN0PkGUjN5NKIKiQkA2/5lJe+C8bKv0gN8qY=
Subject key identifier: 21:D9:1E:21:E4:FA:C1:DE:98:E3:7C:05:25:E0:93:1F:0C:08:8A:95
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C2F1D6AE44BEA73D46B80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bb71d2e6-d8ff-35ec-a7ee-a71c74b66948.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.22.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:2f:1d:6a:e4:4b:ea:73:d4:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=d6535b46-5253-45ad-83e5-8528937964d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:33:da:4a:6b:41:2a:16:8d:b2:19:af:7e:
64:b1:0a:35:4c:fb:e1:61:2a:f4:d1:11:96:ca:ff:
30:3b:44:28:af:4f:ea:1c:96:99:b2:ae:69:e5:9f:
bc:3a:42:46:10:82:4d:b1:00:f6:52:60:d2:5d:8a:
5f:24:0d:a0:0e:12:38:c9:4a:98:f4:c0:96:9a:e6:
51:11:8c:d9:1b:55:b7:82:24:bc:02:98:09:f1:7d:
5a:ec:ae:3a:db:45:b6:9e:8e:8a:b9:96:57:ff:fa:
e6:e7:8a:5a:6c:1e:15:3c:40:5d:2f:11:91:8d:2d:
d1:4e:95:d8:73:1b:96:84:f5:9e:80:a9:99:5d:4a:
e1:af:f5:bd:38:3a:89:c2:22:b4:61:ac:8a:b1:8c:
df:b8:7a:a3:8b:98:59:c6:bb:9c:85:7b:94:32:09:
e6:17:7c:1a:97:a3:6a:0d:be:42:0f:14:fa:b2:9e:
a6:80:9f:47:d8:57:8e:8f:2a:2c:78:de:cc:17:a6:
e5:22:c2:de:65:18:4b:22:4b:2e:b9:40:19:99:0a:
40:cb:93:a2:9a:7e:08:fa:88:40:08:e9:19:86:7a:
4b:14:87:80:41:3f:99:5f:54:49:91:f2:16:fe:a3:
87:20:14:6b:9c:54:09:fb:b9:ca:fc:e4:99:b4:7d:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:1E:21:E4:FA:C1:DE:98:E3:7C:05:25:E0:93:1F:0C:08:8A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/bb71d2e6-d8ff-35ec-a7ee-a71c74b66948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:0c:8e:f6:27:cb:a9:55:32:d2:88:03:8f:0e:a2:81:c3:63:
b5:45:ab:c6:8c:9a:d8:43:f3:73:ba:c2:6a:56:ab:03:32:27:
7b:dc:b3:be:24:98:83:93:34:2b:60:8f:56:a3:0f:9d:8e:98:
40:e2:5e:99:82:68:6a:85:70:8c:a4:13:4c:4f:ea:31:0e:85:
4d:ac:5e:0b:d2:aa:95:38:88:5c:b1:4f:d4:c7:f1:ca:d5:b4:
c7:4d:cc:5d:23:aa:d7:92:62:89:45:e3:39:5e:b7:00:03:78:
b2:a7:ed:e5:60:db:39:38:40:4e:af:97:b1:44:36:e7:57:4f:
20:5a:a5:bc:78:bb:6e:62:ca:60:fb:63:c6:55:4b:94:30:2b:
8d:ad:83:89:b3:b9:be:07:8a:45:e5:71:93:2c:65:6a:10:22:
33:99:2d:fa:0d:8d:14:b1:e1:59:ba:e9:33:4c:d3:af:15:a7:
9d:93:54:85:2a:32:b1:05:a1:d0:e6:b2:76:b0:75:38:8b:9e:
51:b0:c4:47:2d:b3:a6:69:40:c9:5e:5f:46:92:eb:53:ef:77:
a7:03:59:60:30:ed:7b:08:f5:f1:9e:e0:fa:f2:98:53:86:68:
5c:5b:f7:c2:16:8e:96:31:30:70:61:f2:c2:30:c2:62:83:f6:
03:f7:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:40 2025 by rpki-client