Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e60d0db2-d5d8-3fa2-8a0c-38bfae453aad.roa
File: e60d0db2-d5d8-3fa2-8a0c-38bfae453aad.roa (raw, json)
Hash identifier: 1pjngBvIinwJRihJg+CAbs2OxAj+SNlh7oYoIGWls08=
Subject key identifier: D7:78:94:E9:19:D8:D9:05:5D:B0:E0:40:EB:EB:10:51:61:37:0D:08
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C32D33096871A5EB60D00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e60d0db2-d5d8-3fa2-8a0c-38bfae453aad.roa
Signing time: Mon 30 Dec 2024 18:10:33 +0000
ROA not before: Mon 30 Dec 2024 18:10:33 +0000
ROA not after: Sun 30 Mar 2025 17:10:33 +0000
asID: 81
IP address blocks: 152.22.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:d3:30:96:87:1a:5e:b6:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:33 2024 GMT
Not After : Mar 30 17:10:33 2025 GMT
Subject: CN=d9ae7250-1739-47ae-a6a9-ac86b19a4d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:2c:08:1b:e2:c2:47:93:30:27:35:4b:d3:
eb:40:de:c6:1f:4a:61:68:6f:c6:7f:28:79:3d:68:
00:78:25:4e:2d:62:72:3f:83:d0:8b:34:72:12:ca:
a2:5f:6f:9b:8c:9c:c4:e7:bd:32:2a:0d:c9:1d:be:
45:89:ab:12:c7:75:f7:fc:a1:55:a7:4c:f0:a6:7c:
2b:7c:11:fa:1c:78:b0:6b:49:cf:18:fe:18:46:b9:
2f:b6:1a:47:25:3b:9f:8f:b5:db:f9:43:71:57:34:
9b:27:0d:36:c5:30:99:fa:f7:16:f9:32:24:10:22:
fd:63:2f:e2:cb:cd:61:bd:6e:2d:30:6c:cb:70:70:
88:7a:f2:41:3f:c9:c9:a3:18:01:3f:a1:60:b8:a0:
f4:cb:d8:28:d7:a8:71:8f:12:6e:d6:c0:6c:85:d6:
d4:c0:b4:b1:fd:91:e1:64:48:78:d7:2b:6a:fe:e6:
cf:c7:3e:61:ce:9a:6c:9b:ea:3f:eb:a3:39:0f:30:
10:f6:b0:1e:42:ab:26:67:bf:94:72:57:c9:4e:66:
24:d7:61:ee:c9:b4:20:93:15:c2:77:d9:03:09:7d:
0c:fb:c4:40:c7:00:33:3d:cb:63:ec:a1:c9:68:61:
ec:5a:8e:53:96:f9:63:0c:17:d1:8e:0b:8f:b2:e5:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:94:E9:19:D8:D9:05:5D:B0:E0:40:EB:EB:10:51:61:37:0D:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e60d0db2-d5d8-3fa2-8a0c-38bfae453aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:51:3e:99:8d:3d:11:6c:ed:19:96:90:31:ce:7c:a9:27:45:
7c:50:80:d2:38:85:76:69:db:d0:97:f9:47:9e:01:2f:d7:d2:
88:c2:3c:58:bd:48:56:e6:fa:76:a7:e4:6b:c0:4a:88:7f:01:
c7:b4:0e:7d:1a:3e:09:1b:67:0c:ab:b3:26:05:97:43:98:8a:
2b:08:0d:58:52:cb:49:6e:df:f0:41:55:f8:cf:bb:43:25:e4:
c8:8b:42:41:87:00:5f:b9:e8:04:e1:ac:13:ea:f6:f0:08:62:
b6:87:ae:57:cc:0c:7d:a6:ab:2b:6f:90:c8:3f:07:6d:fa:c5:
dd:26:57:da:4d:b5:7a:1a:1b:20:41:8e:98:05:a5:21:c8:c4:
0a:7a:29:9c:95:34:67:d5:c6:a4:0d:02:e3:34:60:7c:03:e2:
cb:fc:ae:4e:83:61:18:c7:23:83:c3:6c:47:21:35:0a:86:02:
6a:2e:b2:35:39:09:b1:09:66:7d:2c:87:9e:66:82:51:08:c9:
7d:be:42:84:4f:5a:87:70:d1:a6:04:c2:7c:1c:b0:86:f5:bb:
ec:ce:63:85:76:21:ca:24:b2:88:1e:68:20:2c:66:ba:b1:85:
6c:94:b2:15:82:82:c2:01:39:25:23:a3:ab:d2:0d:dd:d6:1a:
54:53:9d:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhhfDLTMJaHGl62DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzM1oXDTI1MDMzMDE3MTAzM1owLzEtMCsGA1UEAxMk
ZDlhZTcyNTAtMTczOS00N2FlLWE2YTktYWM4NmIxOWE0ZDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXMsCBviwkeTMCc1S9PrQN7GH0phaG/Gfyh5
PWgAeCVOLWJyP4PQizRyEsqiX2+bjJzE570yKg3JHb5FiasSx3X3/KFVp0zwpnwr
fBH6HHiwa0nPGP4YRrkvthpHJTufj7Xb+UNxVzSbJw02xTCZ+vcW+TIkECL9Yy/i
y81hvW4tMGzLcHCIevJBP8nJoxgBP6FguKD0y9go16hxjxJu1sBshdbUwLSx/ZHh
ZEh41ytq/ubPxz5hzppsm+o/66M5DzAQ9rAeQqsmZ7+UclfJTmYk12HuybQgkxXC
d9kDCX0M+8RAxwAzPctj7KHJaGHsWo5TlvljDBfRjguPsuU3AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNd4lOkZ2NkFXbDgQOvrEFFhNw0IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTYwZDBkYjItZDVkOC0z
ZmEyLThhMGMtMzhiZmFlNDUzYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpRPpmNPRFs7RmWkDHOfKknRXxQgNI4hXZp29CX+UeeAS/X0ojCPFi9
SFbm+nan5GvASoh/Ace0Dn0aPgkbZwyrsyYFl0OYiisIDVhSy0lu3/BBVfjPu0Ml
5MiLQkGHAF+56AThrBPq9vAIYraHrlfMDH2mqytvkMg/B236xd0mV9pNtXoaGyBB
jpgFpSHIxAp6KZyVNGfVxqQNAuM0YHwD4sv8rk6DYRjHI4PDbEchNQqGAmousjU5
CbEJZn0sh55mglEIyX2+QoRPWodw0aYEwnwcsIb1u+zOY4V2IcoksogeaCAsZrqx
hWyUshWCgsIBOSUjo6vSDd3WGlRTnRY=
-----END CERTIFICATE-----
Generated at Wed May 7 12:04:49 2025 by rpki-client