Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa
File: d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa (raw, json)
Hash identifier: j7IF08WJ2xR4QaYHHIqa4AIH2XMgFEytvuh20U1TFZI=
Subject key identifier: A5:23:56:BA:A1:72:D6:C6:A6:3E:92:7B:A0:40:6F:17:FD:54:07:DE
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C330FE238DDB0351FAB00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa
Signing time: Mon 30 Dec 2024 18:10:33 +0000
ROA not before: Mon 30 Dec 2024 18:10:33 +0000
ROA not after: Sun 30 Mar 2025 17:10:33 +0000
asID: 81
IP address blocks: 152.22.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:33:0f:e2:38:dd:b0:35:1f:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:33 2024 GMT
Not After : Mar 30 17:10:33 2025 GMT
Subject: CN=3f6b6c5e-450a-40b5-bd86-ccedbc258d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:5e:cd:43:f4:ee:b2:e4:68:49:db:05:1c:
54:09:60:0b:0c:88:75:ff:6b:7d:f6:bc:70:de:f3:
3f:fc:77:34:2e:e5:fb:89:e2:a5:33:56:77:b3:08:
88:90:f5:c6:ec:5b:ae:30:60:af:d1:95:4e:9b:4f:
50:bd:54:6f:c0:b5:64:53:04:88:b0:db:23:8f:32:
d4:64:26:6b:b2:31:58:6f:dc:da:ff:2d:c5:5a:bd:
3d:4b:44:d7:8c:33:91:63:66:1e:b6:8b:a6:b2:c0:
8a:87:bb:41:84:61:0c:08:13:03:1a:96:55:3f:b4:
26:5b:22:bb:88:6b:50:a8:94:4a:8a:0d:10:93:33:
18:bd:38:11:e6:aa:f1:2c:f1:91:dd:8f:fa:dd:af:
7c:a8:f4:ee:4c:ca:93:4d:6c:3b:d9:ca:cd:a0:71:
de:b8:46:df:a7:f0:a4:7a:d0:3e:bd:29:46:25:5e:
41:8c:b8:c0:13:49:bd:66:88:fa:37:fc:b8:58:bc:
30:80:08:af:44:c8:45:d2:04:26:3d:22:d6:f3:29:
cf:61:b4:8a:af:d2:23:c6:8f:d2:d9:47:8c:67:9a:
27:8f:c7:e2:b8:15:10:06:4d:23:b8:1c:74:5c:70:
fc:76:2e:34:65:f6:99:1e:b8:bc:2a:1b:f6:01:05:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:56:BA:A1:72:D6:C6:A6:3E:92:7B:A0:40:6F:17:FD:54:07:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14840dd-ce17-3fa0-a965-bc48be71d6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f2:e2:12:27:fd:bf:c9:00:bf:25:41:06:c4:a8:b1:61:e0:
7c:c8:73:0c:1b:eb:b1:89:8b:ec:8b:20:12:89:2c:4a:4c:57:
cc:f4:ca:8c:a4:77:5a:70:28:df:5f:28:84:99:a6:2a:0e:74:
9a:57:78:53:20:3b:a2:8c:2e:5a:c2:93:7e:82:04:5e:99:55:
63:cf:19:a2:2e:f8:12:22:7c:71:4e:af:e2:5d:ac:8c:d0:ba:
51:3e:b8:75:c4:c4:fb:2b:d4:22:7e:9a:44:dd:4d:3f:ff:8b:
86:1f:e8:4e:44:b3:c7:ea:0d:71:1d:8a:d7:b5:ba:f2:32:dd:
dd:fc:46:30:34:b2:28:f7:b8:50:d5:55:b3:ab:e3:6f:20:f6:
fe:2a:51:88:90:68:ea:53:d5:24:85:21:85:cd:f9:5a:58:7a:
ef:32:76:99:99:b7:6b:fb:ab:38:93:16:d3:41:40:51:8f:53:
01:27:e9:38:10:b6:1b:4d:0d:b5:0b:47:83:f0:01:ee:c9:bf:
2d:51:f6:16:da:40:25:0c:66:20:e0:9c:f7:09:9d:19:c9:a4:
dd:f9:72:64:62:3e:5b:9c:a6:6b:12:e6:16:26:b2:cc:6d:0e:
4c:0e:38:ac:02:a2:81:77:16:ae:e3:cc:dc:6c:05:a5:7a:cc:
23:be:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:10 2025 by rpki-client