Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9609498-6a7a-34b7-bb29-72aceed2b99f.roa
File: f9609498-6a7a-34b7-bb29-72aceed2b99f.roa (raw, json)
Hash identifier: Jok5gpn/1hqqwHbsl9S1vOCmjDzNVFj7DNIn9jfiAzA=
Subject key identifier: 94:69:DA:6E:4A:22:39:5B:78:73:F6:24:5B:BE:ED:9C:85:AA:8C:72
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C30070EBB2F6E86F3D8C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9609498-6a7a-34b7-bb29-72aceed2b99f.roa
Signing time: Mon 30 Dec 2024 18:10:31 +0000
ROA not before: Mon 30 Dec 2024 18:10:31 +0000
ROA not after: Sun 30 Mar 2025 17:10:31 +0000
asID: 81
IP address blocks: 152.49.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:30:07:0e:bb:2f:6e:86:f3:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:31 2024 GMT
Not After : Mar 30 17:10:31 2025 GMT
Subject: CN=288f6cff-35cb-4a72-bb4c-d375bf9b7852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:1f:81:34:f1:86:48:59:40:da:d0:0d:c4:
45:bf:18:1c:55:ee:02:ca:06:5f:25:de:2d:1c:33:
6e:6e:95:11:30:64:e2:a3:77:18:6a:84:50:b8:e2:
0b:26:e6:c1:1b:38:56:c6:9f:fc:b0:d8:b3:5d:e5:
98:f0:d1:b6:f5:ad:07:b1:d3:fe:68:b3:4c:87:d6:
f0:70:c4:e9:a8:36:e4:52:00:a1:20:7c:ed:91:0d:
76:6e:40:39:48:d8:9c:96:a3:ef:af:20:85:9e:d4:
65:b2:89:c6:97:11:68:b9:b0:66:30:13:ce:53:f3:
e4:d4:50:6a:a0:12:82:1e:22:40:7f:86:a2:71:6c:
79:e0:09:57:fd:42:d9:c5:74:3e:94:b8:08:73:c8:
c9:e0:a9:6d:41:3a:39:c5:3c:eb:5a:f2:bf:84:33:
a3:c0:d4:d6:18:fe:16:52:3f:79:1e:7e:95:3b:0c:
1a:0e:1e:22:ed:c6:81:59:52:c1:db:7c:d9:46:fe:
6a:e4:a2:f6:00:2d:b3:21:46:fc:63:97:37:90:47:
30:6e:1a:39:f4:67:a4:ae:4d:5d:64:b4:2d:2a:0e:
fa:d2:04:00:e8:a0:77:f7:33:e8:b3:e6:b9:97:6c:
0b:eb:90:02:0f:42:4b:26:4c:e7:24:0e:25:12:21:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:DA:6E:4A:22:39:5B:78:73:F6:24:5B:BE:ED:9C:85:AA:8C:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9609498-6a7a-34b7-bb29-72aceed2b99f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:6a:39:c6:db:67:78:c0:0b:6b:a8:96:58:49:1b:ef:32:d4:
83:de:64:f1:0d:08:c9:42:bb:df:f9:73:d2:40:68:51:7d:c3:
b0:98:ea:9e:4f:1c:4c:2c:0c:17:a9:73:b2:59:8e:59:35:23:
d8:f8:a0:61:4f:aa:3f:48:30:de:08:c0:82:6a:7a:45:a5:c4:
ab:58:19:61:b7:8a:fd:7d:1e:72:5a:2f:57:6f:54:d2:b8:1b:
a0:e7:d6:f1:48:60:8f:d9:bd:81:d2:42:ea:75:d5:f3:a3:6a:
9a:1b:fe:96:2b:33:da:45:1f:e4:bd:08:84:eb:f5:92:0a:c8:
89:02:fb:d1:33:4e:f7:90:71:2c:0e:95:54:e9:9a:a8:ca:29:
27:20:28:61:78:b1:87:71:b8:37:fd:a3:33:b1:b8:b8:d6:36:
91:45:ed:e9:80:6e:72:ec:60:d8:84:b4:46:42:66:f7:0a:34:
9d:43:f3:20:49:b2:99:e1:b0:db:c1:49:42:13:09:97:c6:00:
99:be:55:42:2b:a1:af:da:c4:28:f3:ef:e8:66:4a:e9:59:fe:
63:17:96:b3:87:f0:11:ef:66:10:4f:d3:af:58:35:66:c4:a9:
d1:66:cb:92:27:5e:6b:39:7e:f3:75:a1:da:64:74:4e:6e:3d:
dd:4c:58:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhhfDAHDrsvbobz2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzMVoXDTI1MDMzMDE3MTAzMVowLzEtMCsGA1UEAxMk
Mjg4ZjZjZmYtMzVjYi00YTcyLWJiNGMtZDM3NWJmOWI3ODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+UfgTTxhkhZQNrQDcRFvxgcVe4CygZfJd4t
HDNubpURMGTio3cYaoRQuOILJubBGzhWxp/8sNizXeWY8NG29a0HsdP+aLNMh9bw
cMTpqDbkUgChIHztkQ12bkA5SNiclqPvryCFntRlsonGlxFoubBmMBPOU/Pk1FBq
oBKCHiJAf4aicWx54AlX/ULZxXQ+lLgIc8jJ4KltQTo5xTzrWvK/hDOjwNTWGP4W
Uj95Hn6VOwwaDh4i7caBWVLB23zZRv5q5KL2AC2zIUb8Y5c3kEcwbho59Gekrk1d
ZLQtKg760gQA6KB39zPos+a5l2wL65ACD0JLJkznJA4lEiFiPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJRp2m5KIjlbeHP2JFu+7ZyFqoxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjk2MDk0OTgtNmE3YS0z
NGI3LWJiMjktNzJhY2VlZDJiOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQ2o5xttneMALa6iWWEkb7zLUg95k8Q0IyUK73/lz0kBoUX3DsJjqnk8c
TCwMF6lzslmOWTUj2PigYU+qP0gw3gjAgmp6RaXEq1gZYbeK/X0eclovV29U0rgb
oOfW8Uhgj9m9gdJC6nXV86Nqmhv+lisz2kUf5L0IhOv1kgrIiQL70TNO95BxLA6V
VOmaqMopJyAoYXixh3G4N/2jM7G4uNY2kUXt6YBucuxg2IS0RkJm9wo0nUPzIEmy
meGw28FJQhMJl8YAmb5VQiuhr9rEKPPv6GZK6Vn+YxeWs4fwEe9mEE/Tr1g1ZsSp
0WbLkideazl+83Wh2mR0Tm493UxY6g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:48 2025 by rpki-client