Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa
File: 060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa (raw, json)
Hash identifier: 49RmX2PUv5HwhDbJYAfZC7Iz9LWMPc+EBPxqLvCHK3U=
Subject key identifier: 78:31:70:39:A4:A1:AC:3E:52:18:9F:63:FB:4D:09:18:04:1E:D2:DF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C360BAFB1A146E8B31610
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa
Signing time: Mon 30 Dec 2024 18:10:34 +0000
ROA not before: Mon 30 Dec 2024 18:10:34 +0000
ROA not after: Sun 30 Mar 2025 17:10:34 +0000
asID: 6559
IP address blocks: 152.31.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:36:0b:af:b1:a1:46:e8:b3:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:34 2024 GMT
Not After : Mar 30 17:10:34 2025 GMT
Subject: CN=4e4efc2b-fca4-40f7-afc6-b289b8b20856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:fa:e0:f0:8b:79:54:3f:b7:1a:ac:8f:7b:
c8:a2:29:ab:0e:58:f0:cb:79:3b:42:9e:c3:5a:62:
f6:fe:cf:a9:55:78:00:a6:c6:dc:fd:ef:1e:0c:cd:
fe:ec:8e:52:53:60:4a:27:1e:2c:55:5e:00:aa:cb:
ea:93:de:91:79:be:70:48:f5:10:4f:18:ea:9a:f3:
d1:9d:a3:89:fd:92:c6:43:62:e0:16:50:e6:1d:78:
04:01:f0:81:8a:68:8b:d4:5f:92:53:71:b8:30:45:
04:6b:1e:aa:9a:28:5c:0d:58:ed:f0:fc:db:05:ed:
71:69:e5:5f:04:9e:58:aa:49:64:9e:91:d2:ec:1d:
af:b2:b0:db:fc:12:b5:0f:79:18:33:b1:9d:51:3d:
d1:19:91:6a:d6:fc:28:78:27:00:e4:97:6b:96:8c:
09:f4:96:84:30:bd:cc:09:bc:86:dd:29:d7:8d:2a:
c6:4f:de:db:06:ea:07:49:0b:62:81:25:74:33:40:
38:12:f0:8f:83:47:0f:b0:b6:64:5f:ce:ec:29:11:
b1:05:ae:85:58:03:0d:b1:cd:c4:06:cd:78:b7:1d:
70:68:11:63:3e:30:a7:f7:9b:ff:b8:98:ba:e6:7d:
da:db:2e:12:62:cc:30:a7:35:ac:ad:c0:48:42:c4:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:70:39:A4:A1:AC:3E:52:18:9F:63:FB:4D:09:18:04:1E:D2:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/060d5a3f-bccd-37c8-95b7-e44c49abd64f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:68:6c:5b:d0:25:cd:c2:cf:6e:ca:17:ab:7e:08:ed:b5:8e:
31:89:68:21:5a:fa:6a:36:0e:ee:d0:6e:cf:83:fc:9c:63:fa:
13:b8:b0:10:d4:a6:04:5c:7e:0b:78:f4:4e:ae:83:81:88:9a:
76:1a:90:0e:de:9e:ad:a3:1c:12:0a:3c:cb:50:20:70:38:eb:
cc:ff:d9:21:89:9e:99:f7:1f:aa:70:50:f6:c3:aa:d9:96:b1:
0c:5b:f9:ab:af:f7:56:a3:3b:97:fc:d4:20:4c:97:96:17:45:
35:ea:e4:d5:d3:1d:38:0a:b0:d4:eb:13:c4:fd:72:03:ab:34:
b8:70:47:1a:08:07:7f:2d:cb:9c:46:24:7e:48:a8:13:59:4b:
88:89:24:98:87:d0:7e:ec:8c:ed:8a:e9:54:d4:1e:4b:bc:a4:
fc:2d:89:68:b6:d9:1d:2a:14:ca:5d:d9:4a:64:ec:c9:6c:a3:
57:4a:a2:e6:0c:3d:fd:1e:f6:24:7e:ad:c4:2a:92:f5:0c:df:
6b:27:a9:19:64:4a:73:fc:c0:db:ae:1b:9f:bf:27:50:e4:38:
c6:47:f0:c9:81:4a:be:69:89:b9:5e:5a:b1:16:48:89:e2:b5:
9e:aa:73:01:b6:17:48:47:89:02:7b:d8:dd:03:84:b1:a4:80:
77:f1:c3:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhhfDYLr7GhRuizFhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzNFoXDTI1MDMzMDE3MTAzNFowLzEtMCsGA1UEAxMk
NGU0ZWZjMmItZmNhNC00MGY3LWFmYzYtYjI4OWI4YjIwODU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JX64PCLeVQ/txqsj3vIoimrDljwy3k7Qp7D
WmL2/s+pVXgApsbc/e8eDM3+7I5SU2BKJx4sVV4Aqsvqk96Reb5wSPUQTxjqmvPR
naOJ/ZLGQ2LgFlDmHXgEAfCBimiL1F+SU3G4MEUEax6qmihcDVjt8PzbBe1xaeVf
BJ5YqklknpHS7B2vsrDb/BK1D3kYM7GdUT3RGZFq1vwoeCcA5JdrlowJ9JaEML3M
CbyG3SnXjSrGT97bBuoHSQtigSV0M0A4EvCPg0cPsLZkX87sKRGxBa6FWAMNsc3E
Bs14tx1waBFjPjCn95v/uJi65n3a2y4SYswwpzWsrcBIQsTUHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHgxcDmkoaw+UhifY/tNCRgEHtLfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMDYwZDVhM2YtYmNjZC0z
N2M4LTk1YjctZTQ0YzQ5YWJkNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASWhsW9AlzcLPbsoXq34I7bWOMYloIVr6ajYO7tBuz4P8nGP6E7iwENSm
BFx+C3j0Tq6DgYiadhqQDt6eraMcEgo8y1AgcDjrzP/ZIYmemfcfqnBQ9sOq2Zax
DFv5q6/3VqM7l/zUIEyXlhdFNerk1dMdOAqw1OsTxP1yA6s0uHBHGggHfy3LnEYk
fkioE1lLiIkkmIfQfuyM7YrpVNQeS7yk/C2JaLbZHSoUyl3ZSmTsyWyjV0qi5gw9
/R72JH6txCqS9QzfayepGWRKc/zA264bn78nUOQ4xkfwyYFKvmmJuV5asRZIieK1
nqpzAbYXSEeJAnvY3QOEsaSAd/HD8w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:08 2025 by rpki-client