Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e23c99f5-a4fe-3dc2-b03c-7a74d23d11ec.roa
File: e23c99f5-a4fe-3dc2-b03c-7a74d23d11ec.roa (raw, json)
Hash identifier: GHGrba0NRDQh/E8+XQMXd5DR1Jsm3naYm7jey+MBIdY=
Subject key identifier: DF:71:87:AF:98:70:60:B9:5B:4F:15:85:33:93:7A:B5:6D:7F:63:10
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C2F7F8DE3243EFDBB8280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e23c99f5-a4fe-3dc2-b03c-7a74d23d11ec.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.31.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:2f:7f:8d:e3:24:3e:fd:bb:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=4c1663ee-8b03-48a4-853b-8ee71594b184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:24:b9:9d:66:72:84:77:09:8f:c4:12:32:
45:8f:26:05:4d:8f:bb:d3:86:fc:5d:1d:6b:29:0f:
3a:34:92:93:fd:f7:c5:54:c3:4e:af:5a:7f:f4:c4:
56:0c:47:17:5a:be:d6:f3:c0:0b:de:30:db:fb:dd:
b0:8e:97:d3:f1:53:36:b1:1f:63:59:88:03:ce:c6:
55:6d:79:5a:b6:64:c5:5c:c9:ec:88:4c:93:da:3b:
3f:26:26:2a:1d:bf:84:4d:27:c2:ed:f3:08:02:42:
2e:e9:26:f1:f1:fb:91:fd:89:15:44:39:56:a0:1a:
df:9f:7e:26:83:f0:03:78:f2:ff:e5:3c:b7:4a:99:
1f:da:33:10:30:c8:9e:f4:97:c1:1d:10:e0:3a:a9:
99:ba:09:a0:6d:db:d6:b4:b3:f3:3b:e6:1d:45:2a:
d8:6b:88:ac:ef:cd:ba:89:fc:f5:a6:bd:08:d7:d2:
3a:1e:c0:1f:bc:2d:c9:1c:b9:15:80:f8:f4:dc:a8:
d0:00:20:18:d2:82:fa:a4:64:a6:74:10:88:18:bf:
15:75:69:9b:b4:28:80:d6:89:ee:c2:e4:e5:e2:c9:
c0:6e:f7:6a:af:74:58:d6:a8:39:13:32:55:6f:ee:
a4:1c:10:1f:e7:54:9a:81:f6:b8:ff:5d:93:db:ba:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:71:87:AF:98:70:60:B9:5B:4F:15:85:33:93:7A:B5:6D:7F:63:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e23c99f5-a4fe-3dc2-b03c-7a74d23d11ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:44:e9:5d:92:a2:40:03:f1:21:d8:ed:a7:f8:57:43:09:3d:
65:ac:53:e2:c9:ad:70:8d:c0:95:5d:13:ec:f4:dd:a9:0a:25:
8e:0c:65:01:bf:37:bb:5b:3e:4f:c1:2c:b3:f2:f5:01:fa:e8:
f9:77:7c:56:15:a1:cb:51:ca:f8:bf:b6:f4:0d:3d:69:36:b2:
9f:a1:70:f3:f5:dc:e0:56:55:89:09:60:14:47:be:85:28:22:
0f:08:e5:fb:02:d0:a2:02:49:5a:9a:93:bd:8a:1f:5f:66:50:
a1:ae:09:0c:8a:14:2d:bd:5a:bd:c2:09:a1:d0:57:d2:30:ac:
da:bf:cc:53:91:bb:80:8b:8b:2e:4e:e0:b7:b8:be:be:75:78:
9c:d9:44:02:3f:b2:76:26:4e:21:c9:3d:e2:c5:0b:92:93:ac:
e1:1b:b6:b8:86:ec:0e:c6:90:f9:3d:66:b2:74:9f:ff:13:7f:
5c:b3:e3:66:6c:8b:ae:a4:b9:17:44:be:6c:8f:c3:d9:bc:3c:
44:da:d1:ae:32:1c:b8:ce:1f:84:00:d4:96:0d:60:59:55:45:
2d:9c:2b:60:5d:1c:69:0e:a3:c9:77:77:d0:a5:e9:07:df:bd:
0e:61:f2:75:63:3e:fd:9f:12:24:fc:0c:b3:3c:9b:70:89:5a:
00:02:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:34 2025 by rpki-client