Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d825f175-1095-3b13-8d4a-ab5944930247.roa
File: d825f175-1095-3b13-8d4a-ab5944930247.roa (raw, json)
Hash identifier: 1lvty00vdj1TX7snKLONSMfDcVYNBLQfX/G/rG8rB+s=
Subject key identifier: 1C:24:5E:D3:30:D1:3E:AA:6B:E1:DF:B0:62:71:36:85:94:03:4C:5E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C327089389E006861FB00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d825f175-1095-3b13-8d4a-ab5944930247.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 152.22.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:70:89:38:9e:00:68:61:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=ce769ceb-b41a-4ae6-8dc8-1100c30b3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:14:98:84:57:c0:f1:26:08:5c:c3:80:db:
d9:d6:6e:ab:f8:d9:91:56:6d:6a:f3:fa:2d:f2:71:
44:fc:47:67:75:fc:76:42:6d:f0:f4:6b:94:3e:79:
22:28:40:9a:4a:78:9f:42:25:9f:9a:9a:b7:3f:8e:
ee:32:bb:db:15:93:69:13:32:02:ae:85:98:95:68:
b4:70:9a:c7:56:eb:64:bc:27:25:2a:6a:90:31:31:
19:12:09:04:8c:c5:fd:dc:2f:2d:76:71:27:7a:33:
c6:38:8e:e8:37:4f:ca:77:da:85:07:84:13:9b:24:
7b:25:c2:89:a3:ed:ce:75:f8:0c:fd:ac:60:17:7d:
c4:20:24:03:79:76:1a:8c:a7:a9:0d:be:cd:13:83:
fe:2f:6a:02:a6:0c:02:88:e3:99:14:78:88:d9:bc:
51:54:1e:7c:cd:3c:65:93:0e:92:07:bb:4a:3f:2d:
45:19:ab:83:0f:48:ae:87:e0:20:9d:a2:66:28:dd:
46:2d:63:8b:33:20:9b:25:ff:3f:d3:5d:1c:6b:2d:
81:21:f3:55:a8:03:a8:5e:6e:25:52:35:e0:97:d9:
7c:1f:c8:4f:c9:14:54:15:7c:9d:4a:ef:0c:5f:cb:
8d:66:d2:e1:94:42:70:39:58:73:95:be:b5:9a:f2:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:5E:D3:30:D1:3E:AA:6B:E1:DF:B0:62:71:36:85:94:03:4C:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d825f175-1095-3b13-8d4a-ab5944930247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:dd:cd:a2:2c:6c:86:a6:9a:5e:be:e5:c2:81:8a:68:d5:1d:
3b:6b:3e:04:12:73:ce:ce:47:af:8b:a3:de:08:a8:63:46:d5:
c0:bd:e6:5f:f5:c0:d9:54:03:29:f6:04:2a:68:78:08:87:57:
d0:7a:2c:77:48:25:00:8a:6f:de:32:66:cc:ec:77:db:f3:92:
0a:9e:85:4b:fe:17:06:e9:b9:d1:1e:a7:39:ef:dc:6d:ac:ef:
77:bb:3f:89:cd:85:ae:ae:7a:21:6f:73:0a:67:4c:20:54:3b:
42:6e:bc:f3:d9:11:92:84:fe:d2:66:e7:72:65:0f:c4:6c:a9:
3a:05:87:99:f0:d7:40:2a:25:e6:24:d4:98:27:92:23:7b:93:
62:f5:d8:46:d9:bf:15:e1:f9:9e:c9:8b:e3:7a:1d:f4:fd:8d:
ba:c9:30:8d:ad:ec:2d:7a:62:3e:60:1a:02:ce:1b:d5:74:f0:
22:4d:a7:fe:66:e8:ce:4c:71:62:25:5c:3f:60:5b:1b:99:b8:
86:23:75:03:68:2c:d2:b6:49:a6:bd:ec:1c:62:c2:d0:15:7c:
54:be:d7:2c:5b:5b:94:38:a9:2f:d3:77:a8:38:ac:5c:16:4b:
ac:33:12:01:f3:03:3d:90:19:a4:93:c6:10:0a:1a:0a:5f:cc:
7f:23:0f:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhhfDJwiTieAGhh+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzMloXDTI1MDMzMDE3MTAzMlowLzEtMCsGA1UEAxMk
Y2U3NjljZWItYjQxYS00YWU2LThkYzgtMTEwMGMzMGIzYWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW4UmIRXwPEmCFzDgNvZ1m6r+NmRVm1q8/ot
8nFE/Edndfx2Qm3w9GuUPnkiKECaSnifQiWfmpq3P47uMrvbFZNpEzICroWYlWi0
cJrHVutkvCclKmqQMTEZEgkEjMX93C8tdnEnejPGOI7oN0/Kd9qFB4QTmyR7JcKJ
o+3OdfgM/axgF33EICQDeXYajKepDb7NE4P+L2oCpgwCiOOZFHiI2bxRVB58zTxl
kw6SB7tKPy1FGauDD0iuh+AgnaJmKN1GLWOLMyCbJf8/010cay2BIfNVqAOoXm4l
UjXgl9l8H8hPyRRUFXydSu8MX8uNZtLhlEJwOVhzlb61mvIInwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwkXtMw0T6qa+HfsGJxNoWUA0xeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDgyNWYxNzUtMTA5NS0z
YjEzLThkNGEtYWI1OTQ0OTMwMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFndzaIsbIamml6+5cKBimjVHTtrPgQSc87OR6+Lo94IqGNG1cC95l/1
wNlUAyn2BCpoeAiHV9B6LHdIJQCKb94yZszsd9vzkgqehUv+FwbpudEepznv3G2s
73e7P4nNha6ueiFvcwpnTCBUO0JuvPPZEZKE/tJm53JlD8RsqToFh5nw10AqJeYk
1JgnkiN7k2L12EbZvxXh+Z7Ji+N6HfT9jbrJMI2t7C16Yj5gGgLOG9V08CJNp/5m
6M5McWIlXD9gWxuZuIYjdQNoLNK2Saa97BxiwtAVfFS+1yxbW5Q4qS/Td6g4rFwW
S6wzEgHzAz2QGaSTxhAKGgpfzH8jD8s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:26 2025 by rpki-client