Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa
File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json)
Hash identifier: KHuvuPyCv9kD3IpOlya8e/1EwXT9clTRzSAZzkbfk3c=
Subject key identifier: 58:31:FF:92:51:C6:EB:44:A4:F7:CB:5A:2F:31:F4:F5:E1:26:DC:BB
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F43285847FC7F94513748C9E017DB5E00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 14618
IP address blocks: 158.115.157.0/24 maxlen: 24
2606:7bc0:1092::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:94:51:37:48:c9:e0:17:db:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=28fc5eed-0b91-4541-bcc3-8af110d7d621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:82:e8:fd:01:73:b6:c9:ee:d9:5a:0d:af:
fd:37:0d:1f:7a:3c:f1:a5:2e:7d:27:a8:91:5f:d6:
be:19:67:e9:75:01:3f:62:6d:41:f7:57:6b:6a:e2:
8b:9a:50:67:a5:d7:3c:d3:90:52:a1:8d:2c:df:aa:
15:25:c9:4d:6b:36:82:8f:b9:48:09:0a:4d:5e:00:
64:9f:e8:5e:2d:27:fd:ce:3f:28:69:6a:2d:ae:05:
33:46:84:f5:27:96:b7:ad:a9:b9:98:d2:c6:11:58:
fe:12:a6:16:f3:0d:87:8b:3a:2a:18:3b:c4:27:f4:
38:30:3f:e8:8d:7e:fe:6d:c0:2f:17:18:33:28:75:
88:3c:37:9e:8c:74:43:58:a1:9a:25:3f:f6:43:48:
53:54:75:bc:98:16:22:01:3f:f1:7f:9a:36:68:67:
4e:31:90:e8:23:2a:e7:1c:9f:ae:17:d5:33:6b:43:
2e:68:ff:40:5a:bc:01:a1:2a:2e:30:d6:75:f4:a9:
8d:18:f4:f5:f7:36:a6:93:34:99:48:34:dc:d1:95:
8b:d1:89:fc:77:99:92:d8:bb:72:fb:d3:49:b3:d5:
72:63:ce:a1:46:1f:c3:da:06:8d:c9:b0:68:61:84:
6c:f7:b1:c1:05:ef:10:5d:b0:77:eb:fb:42:9a:7b:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:FF:92:51:C6:EB:44:A4:F7:CB:5A:2F:31:F4:F5:E1:26:DC:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.157.0/24
IPv6:
2606:7bc0:1092::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:7c:a6:1d:7d:63:12:cc:c4:55:f3:6a:b5:48:04:47:80:51:
e5:48:18:12:1f:36:76:52:0e:e3:41:55:c6:2d:17:19:ef:da:
17:c1:02:d3:20:48:f0:0f:15:34:b6:e2:25:2f:43:79:7b:fd:
65:ff:b0:74:fc:e8:aa:12:fd:d7:37:78:f5:cd:94:c0:ad:5f:
ee:69:b1:a2:5b:6e:ae:f4:bb:02:81:18:0d:6d:51:fe:25:68:
0c:fc:ad:a0:f2:ff:c5:23:0b:a4:65:d1:98:f1:d6:ad:38:19:
88:8c:74:d7:50:16:54:ff:71:4a:64:93:6b:fb:ea:88:c3:9a:
11:b4:45:a6:38:eb:c2:3f:84:20:35:4f:79:cf:8f:d7:52:61:
db:3b:7c:c8:76:df:fc:e1:5b:00:6e:44:da:c7:34:1f:ad:89:
7b:68:7c:2b:9b:a1:d8:74:f0:d0:59:9e:cc:6c:e0:12:a6:43:
b3:3e:a4:77:4c:f0:d1:27:89:e3:5b:ca:ff:6e:1e:6d:a4:98:
92:07:30:4d:ea:45:9e:1f:b8:1c:09:d6:dc:39:78:b9:28:cf:
4d:5e:b4:24:e5:a5:c5:3e:97:8b:df:18:f8:78:09:56:42:1a:
59:91:5b:b3:fa:df:59:f3:72:10:65:27:fe:76:99:69:54:ec:
26:24:a4:bf
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEf8f5RRN0jJ4BfbXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
MjhmYzVlZWQtMGI5MS00NTQxLWJjYzMtOGFmMTEwZDdkNjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3CC6P0Bc7bJ7tlaDa/9Nw0fejzxpS59J6iR
X9a+GWfpdQE/Ym1B91drauKLmlBnpdc805BSoY0s36oVJclNazaCj7lICQpNXgBk
n+heLSf9zj8oaWotrgUzRoT1J5a3ram5mNLGEVj+EqYW8w2HizoqGDvEJ/Q4MD/o
jX7+bcAvFxgzKHWIPDeejHRDWKGaJT/2Q0hTVHW8mBYiAT/xf5o2aGdOMZDoIyrn
HJ+uF9Uza0MuaP9AWrwBoSouMNZ19KmNGPT19zamkzSZSDTc0ZWL0Yn8d5mS2Lty
+9NJs9VyY86hRh/D2gaNybBoYYRs97HBBe8QXbB36/tCmnux/wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFgx/5JRxutEpPfLWi8x9PXhJty7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z
YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E
AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJnymHX1jEszEVfNqtUgER4BR5UgYEh82
dlIO40FVxi0XGe/aF8EC0yBI8A8VNLbiJS9DeXv9Zf+wdPzoqhL91zd49c2UwK1f
7mmxolturvS7AoEYDW1R/iVoDPytoPL/xSMLpGXRmPHWrTgZiIx011AWVP9xSmST
a/vqiMOaEbRFpjjrwj+EIDVPec+P11Jh2zt8yHbf/OFbAG5E2sc0H62Je2h8K5uh
2HTw0FmezGzgEqZDsz6kd0zw0SeJ41vK/24ebaSYkgcwTepFnh+4HAnW3Dl4uSjP
TV60JOWlxT6Xi98Y+HgJVkIaWZFbs/rfWfNyEGUn/naZaVTsJiSkvw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:40 2025 by rpki-client