Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/029177d3-5b6c-30c5-8900-901144c2770c.roa
File: 029177d3-5b6c-30c5-8900-901144c2770c.roa (raw, json)
Hash identifier: Az3VudfE6uALDcSyPF3ei86YS20/7oPFtCVWpchiPqM=
Subject key identifier: 2D:91:C8:61:7B:CB:2E:AC:BA:21:24:6D:26:64:E9:8D:1A:8D:FA:65
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EB54B4FC57110E2EC340
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/029177d3-5b6c-30c5-8900-901144c2770c.roa
Signing time: Mon 07 Apr 2025 16:33:11 +0000
ROA not before: Mon 07 Apr 2025 16:33:11 +0000
ROA not after: Sun 06 Jul 2025 16:33:11 +0000
asID: 19718
IP address blocks: 152.22.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:eb:54:b4:fc:57:11:0e:2e:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:11 2025 GMT
Not After : Jul 6 16:33:11 2025 GMT
Subject: CN=6dc3c69f-4771-41b0-b8f0-03eb7e090290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:cd:84:aa:e0:ef:88:d7:1f:16:13:3b:6f:
b2:52:55:37:46:be:4e:17:13:70:78:b4:4d:7e:83:
2b:26:85:bc:e2:ec:00:7b:ce:e5:a6:fa:f8:24:3a:
67:3b:e4:ec:20:47:0b:cd:be:1c:8a:4f:eb:12:a6:
e2:77:ce:5b:56:70:d8:a2:1d:5a:22:70:1e:af:a8:
8f:8b:3e:c4:75:34:75:30:49:40:db:77:37:84:85:
d3:e4:26:4f:68:9e:79:ef:b5:e0:73:9f:7c:0b:ae:
b9:d0:a2:43:23:4c:bc:c3:e8:15:02:ca:f0:4c:44:
8b:c1:d9:aa:82:c4:02:c7:d8:df:d7:46:00:80:a5:
6a:b4:d4:ad:d0:f1:ff:27:af:f8:f4:60:61:93:4a:
c3:30:40:53:bb:d7:4e:ba:d3:9b:5b:82:63:08:a4:
ff:0c:b2:4e:88:53:f5:26:c5:23:b2:5d:d9:59:d1:
20:85:e4:57:ed:1d:99:07:e1:b3:e3:7d:ac:4d:b9:
d0:92:75:e9:46:cb:1e:57:6c:45:d4:03:6d:8a:0b:
15:f2:4a:11:cf:f5:ec:19:5f:5a:64:5b:af:19:f7:
c3:e5:87:6b:28:99:ad:e1:cf:1b:ea:2b:59:b6:20:
c9:a1:0f:07:b6:b0:df:19:d4:c0:ba:e9:67:2f:3a:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:C8:61:7B:CB:2E:AC:BA:21:24:6D:26:64:E9:8D:1A:8D:FA:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/029177d3-5b6c-30c5-8900-901144c2770c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:e6:fa:f3:d5:c1:dc:65:f4:9c:e5:4c:a6:d0:6b:f9:e0:26:
de:1f:38:94:3a:25:7f:78:c8:3e:2e:11:0e:59:d6:a8:1b:d0:
05:d0:c2:6e:91:cb:ae:3d:bd:e1:5e:fb:83:9e:13:7e:29:7e:
be:bb:43:e3:98:f1:2e:d3:1b:72:4c:f7:13:86:ba:fc:82:3b:
41:ea:65:0c:91:7e:fe:c2:a8:48:50:45:6e:c2:e9:4e:e4:e9:
a0:09:2b:6f:3a:31:cf:84:a8:4c:ff:e1:31:1f:eb:4c:eb:4f:
79:ef:19:24:a5:30:4e:3d:2f:39:17:73:3e:9d:c9:62:79:61:
15:c5:43:88:c0:d9:5f:92:57:5a:93:51:7f:79:bd:a5:43:68:
c0:f3:c7:e6:de:66:d0:42:06:c7:96:ae:74:3f:35:ec:12:b2:
27:d1:eb:15:fa:32:c6:48:c2:d5:2f:e6:c7:d0:1f:41:3f:51:
4b:bb:43:8a:43:28:cf:69:4a:79:1c:04:36:87:c3:7a:fc:56:
bd:de:0f:2d:37:ec:63:72:ec:d3:f5:81:07:b8:d8:c0:36:b4:
5c:9e:29:f0:51:e4:9f:9f:45:2d:bd:bc:d9:6c:a9:d8:5f:51:
f2:aa:de:a1:42:6b:c1:48:00:5a:24:d9:75:d9:74:af:07:2b:
b5:d7:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:17 2025 by rpki-client on console.sobornost.net