Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/60ae28dd-73bb-3292-b6f6-03474b215b05.roa
File: 60ae28dd-73bb-3292-b6f6-03474b215b05.roa (raw, json)
Hash identifier: RJMox9RYpZ1L+LxsZkHb5AkhzD8+D5I1PMSHuuMjAII=
Subject key identifier: D3:2C:FF:F0:F7:97:69:C1:43:44:75:CE:1C:05:D3:2E:19:6C:EF:79
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2EB050B1E2A6FBD76F400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/60ae28dd-73bb-3292-b6f6-03474b215b05.roa
Signing time: Mon 07 Apr 2025 16:33:11 +0000
ROA not before: Mon 07 Apr 2025 16:33:11 +0000
ROA not after: Sun 06 Jul 2025 16:33:11 +0000
asID: 13371
IP address blocks: 152.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:eb:05:0b:1e:2a:6f:bd:76:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:11 2025 GMT
Not After : Jul 6 16:33:11 2025 GMT
Subject: CN=fd25e06b-7252-4f4b-90ea-180dfd0c66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:64:95:ed:1c:e1:0c:cc:49:22:12:5e:62:
a5:1d:b8:95:fb:85:d6:b8:ed:44:fb:66:52:82:75:
e7:58:20:b3:96:09:3b:85:55:c1:b8:13:64:ab:03:
ea:71:5b:78:7a:60:21:f8:d6:40:e1:18:15:22:bd:
1d:88:25:74:14:28:ce:af:fe:dc:7c:71:ef:6c:9e:
14:24:25:6c:ce:a5:aa:ab:90:08:e7:57:74:5a:b3:
8a:c3:46:25:e9:e8:23:7b:42:6a:ba:64:25:87:2b:
5f:a9:17:9b:4d:a0:54:d2:d5:84:25:78:03:44:9e:
2e:07:9b:f8:77:34:05:cb:2c:27:34:77:a8:c6:13:
d7:f6:83:bf:ca:d0:27:4d:2a:9b:a7:f1:b8:93:c2:
c9:ce:be:fa:7a:2a:4e:f2:9d:92:af:e6:c8:a7:76:
a0:d0:a3:8f:e6:47:74:17:d5:24:a1:c0:fa:35:0b:
92:da:49:1c:11:91:ed:63:51:31:e6:55:14:9f:0c:
b5:84:66:ed:14:27:ae:a9:3f:33:af:b2:33:2a:1b:
d4:26:a2:69:f7:3c:02:bd:f2:df:ce:bc:30:2d:fd:
18:00:ac:ea:71:43:fa:eb:93:3d:27:a6:73:11:ea:
e4:5f:a1:26:be:71:68:46:1c:dd:44:ae:8a:6b:62:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:FF:F0:F7:97:69:C1:43:44:75:CE:1C:05:D3:2E:19:6C:EF:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/60ae28dd-73bb-3292-b6f6-03474b215b05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:27:0c:5e:fc:76:14:f7:75:70:9a:a7:73:f4:d1:de:e2:9a:
bf:d2:bc:f5:b4:8f:17:f4:3b:9f:f4:13:c1:bb:d9:aa:6a:18:
db:9a:19:00:b5:6d:05:73:22:6a:e0:70:e2:50:f8:b6:63:1d:
d4:07:d3:bf:70:00:35:64:8a:d8:a2:cc:05:24:1a:c4:de:40:
44:7e:02:1a:74:3d:5e:14:3b:cc:7a:cd:0c:e2:35:45:69:ce:
66:ac:b9:86:0d:e7:ec:70:f3:6e:59:68:c9:01:d4:9a:42:02:
e7:bc:a3:a3:64:89:52:42:db:b7:ee:9d:3e:60:9f:e5:ae:fd:
4e:ba:5b:1c:2b:b4:3d:36:b3:72:07:74:46:20:5b:c8:fb:99:
df:42:10:b5:e3:53:ba:58:b2:a3:5e:a1:5a:73:e5:75:aa:60:
cc:46:59:9f:fd:92:e8:cd:cd:51:38:f3:c5:a6:2b:93:3e:62:
c2:d5:0c:a5:73:91:54:20:16:26:4e:ca:5b:3a:1a:58:03:2b:
4b:21:66:b0:bb:9b:83:7e:b8:65:2a:88:a0:0a:8d:7c:98:14:
f0:28:c3:b9:d7:0c:35:13:15:bb:e6:f8:9f:83:1d:cc:a5:1e:
8f:c0:3b:a0:71:3e:a8:4d:c8:df:f1:27:bd:ae:b2:a1:09:b3:
01:8f:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:17 2025 by rpki-client on console.sobornost.net