Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4979e260-5aa3-3cc7-a5b5-709a81b58151.roa
File: 4979e260-5aa3-3cc7-a5b5-709a81b58151.roa (raw, json)
Hash identifier: JgWx42MRUIbJpT4qJsW1CRct6cD68H2SCfKVn+OWzl8=
Subject key identifier: 98:EE:12:80:A8:D0:59:D9:B2:00:FF:CE:2E:BE:AE:C7:D8:55:39:65
Certificate issuer: /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
Certificate serial: 010D0C9F432858480644F98FDE2E3B52D52EAD00
Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4979e260-5aa3-3cc7-a5b5-709a81b58151.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 147.160.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f9:8f:de:2e:3b:52:d5:2e:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=0a3ae861-6a3a-40e1-95ee-d92a5a584a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:a4:79:08:0e:29:9c:51:b8:f0:0e:61:7f:
d6:17:a8:24:4c:80:b5:74:41:69:31:36:7d:0e:2d:
4a:7f:c6:cf:f2:e6:47:31:13:52:6c:ec:c0:74:28:
6d:11:84:65:ab:a4:bd:4f:c2:e2:ca:7b:52:21:83:
b9:81:fd:9d:3a:ae:31:79:83:0d:29:79:0f:12:c8:
b4:03:3b:d8:50:80:a4:4f:ce:13:9b:a0:e1:66:d0:
65:b8:fe:34:c9:01:b6:51:2b:6c:e9:3d:25:ed:35:
63:94:0e:66:20:ed:a1:41:a9:be:81:ce:4b:f5:87:
da:20:97:7a:5d:df:fa:3d:4b:24:9c:1a:5b:0e:90:
9f:31:f1:4e:ac:29:c3:ae:29:97:99:0f:ba:85:0c:
19:d9:94:e3:b2:4a:d6:c9:e8:b6:e7:9e:d7:bd:b9:
0d:01:ed:df:f5:3b:63:7c:61:ab:36:62:03:4c:1a:
b0:c4:c7:e8:c6:91:23:ac:df:f7:d2:8d:0b:1a:06:
8b:20:37:47:71:63:11:e2:19:23:97:cf:35:a8:df:
94:81:e9:00:6a:70:ae:03:07:47:42:41:e6:3c:2d:
f5:8f:9b:1c:2a:68:b0:9a:fb:21:49:cb:b1:91:e4:
3f:98:0b:2c:26:9a:8f:f5:8e:17:95:84:bd:ed:46:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:12:80:A8:D0:59:D9:B2:00:FF:CE:2E:BE:AE:C7:D8:55:39:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4979e260-5aa3-3cc7-a5b5-709a81b58151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl
X509v3 Authority Key Identifier:
keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
sbgp-ipAddrBlock: critical
IPv4:
147.160.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0c:2f:4d:ba:d0:96:69:9e:4e:90:01:71:1a:2f:e7:bb:bd:
51:1a:14:27:14:29:d4:cc:33:99:98:aa:82:f1:43:02:72:bd:
57:d9:56:d8:ef:5c:29:5d:2a:10:dc:a9:33:30:fd:92:1e:b3:
6a:a1:7b:36:ba:55:76:1c:53:41:e1:8b:57:2f:de:df:cd:ad:
06:e4:2e:7c:64:16:c7:09:43:d4:ad:20:3c:0d:59:54:6e:4a:
d0:b5:10:87:42:b0:e0:f2:27:e1:62:d2:e2:8f:08:86:8a:4d:
45:16:fa:0c:13:ae:ec:eb:33:42:5b:98:87:f6:52:a7:82:55:
7a:21:a9:32:4a:d8:2b:02:a0:33:15:1a:8a:3f:e5:9a:6c:0f:
ba:4b:ad:0d:1d:e6:7b:b2:ee:56:a4:1d:30:8a:fa:30:1e:68:
5d:d0:ca:0d:5f:c4:92:9a:e6:a5:0b:d9:6e:ed:dc:1d:7c:ce:
50:99:79:f1:7e:ef:ee:18:72:15:09:93:e6:13:4e:f4:ea:51:
4f:7e:87:25:63:fe:f9:27:c6:b0:68:a2:11:5f:ac:0f:17:84:
f0:7d:7f:c9:8f:14:b6:3e:a6:df:b4:70:cb:94:82:f8:c7:e8:
1e:f3:1b:f8:72:05:a7:cd:0a:ef:91:0b:0d:71:82:42:42:79:
ed:ae:6f:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRPmP3i47UtUurQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiODkxNTYtMmJkNi00OWJlLWEwYTMtYzUzMmEzNDky
MmU2MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
MGEzYWU4NjEtNmEzYS00MGUxLTk1ZWUtZDkyYTVhNTg0YTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg46keQgOKZxRuPAOYX/WF6gkTIC1dEFpMTZ9
Di1Kf8bP8uZHMRNSbOzAdChtEYRlq6S9T8LiyntSIYO5gf2dOq4xeYMNKXkPEsi0
AzvYUICkT84Tm6DhZtBluP40yQG2USts6T0l7TVjlA5mIO2hQam+gc5L9YfaIJd6
Xd/6PUsknBpbDpCfMfFOrCnDrimXmQ+6hQwZ2ZTjskrWyei2557XvbkNAe3f9Ttj
fGGrNmIDTBqwxMfoxpEjrN/30o0LGgaLIDdHcWMR4hkjl881qN+UgekAanCuAwdH
QkHmPC31j5scKmiwmvshScuxkeQ/mAssJpqP9Y4XlYS97UYjwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjuEoCo0FnZsgD/zi6+rsfYVTllMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4
OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMyYTM0OTIyZTYvNDk3OWUyNjAtNWFhMy0z
Y2M3LWE1YjUtNzA5YTgxYjU4MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGJiODkxNTYtMmJkNi00OWJlLWEw
YTMtYzUzMmEzNDkyMmU2LzRiYjg5MTU2LTJiZDYtNDliZS1hMGEzLWM1MzJhMzQ5
MjJlNi5jcmwwHwYDVR0jBBgwFoAU11ernRiVAjwc5BddnSd5Ptco3fEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80YmI4OTE1Ni0yYmQ2LTQ5YmUtYTBhMy1jNTMy
YTM0OTIyZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYML0260JZpnk6QAXEaL+e7vVEaFCcUKdTMM5mYqoLxQwJyvVfZVtjv
XCldKhDcqTMw/ZIes2qheza6VXYcU0Hhi1cv3t/NrQbkLnxkFscJQ9StIDwNWVRu
StC1EIdCsODyJ+Fi0uKPCIaKTUUW+gwTruzrM0JbmIf2UqeCVXohqTJK2CsCoDMV
Goo/5ZpsD7pLrQ0d5nuy7lakHTCK+jAeaF3Qyg1fxJKa5qUL2W7t3B18zlCZefF+
7+4YchUJk+YTTvTqUU9+hyVj/vknxrBoohFfrA8XhPB9f8mPFLY+pt+0cMuUgvjH
6B7zG/hyBafNCu+RCw1xgkJCee2ub30=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:15 2025 by rpki-client