Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa
File: a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa (raw, json)
Hash identifier: RQzQFvSOKImiAO8txi/PvwD1Vx1Km9Gegx6B+wKsx48=
Subject key identifier: 2C:85:29:E5:2F:35:C6:E4:B5:C7:AE:77:BD:D8:DB:92:2D:2A:9C:D7
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F432858481F652164AE88D7D7A8FA2A90
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 147.124.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:21:64:ae:88:d7:d7:a8:fa:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=b80935f6-5721-47a1-b28a-9fa4719cf40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:86:e7:76:b6:ed:0b:51:45:96:9c:2d:9c:
f6:42:ff:dd:c1:58:5a:4c:d5:d0:31:e1:1c:4b:1e:
72:55:e2:34:74:e4:dc:13:78:62:2d:10:05:d7:15:
8d:d0:69:8e:37:b4:4b:10:1f:7b:35:62:4f:e4:74:
3d:af:eb:67:bf:45:a1:60:33:d0:4d:f4:04:d7:8b:
ff:5a:82:b7:1a:43:d7:15:71:f0:1d:b2:4b:ab:a7:
b8:e5:f1:53:57:b5:f0:03:c7:36:18:06:12:12:0c:
bc:01:14:77:b4:9f:7b:5f:d7:f7:47:13:a6:72:20:
18:09:70:16:fe:92:69:f1:4b:4a:19:75:80:ab:14:
54:26:62:80:ec:7e:79:d7:fa:3a:cc:04:c5:f6:81:
63:07:10:7d:1e:6f:06:b4:66:fd:13:00:2d:5a:55:
cf:77:0a:c4:92:66:e0:06:b4:d0:17:2d:28:a8:6b:
3b:2c:02:3f:c7:b2:95:af:46:75:bc:0a:85:7d:e5:
fa:49:f9:08:fc:a1:42:52:31:94:2b:16:f2:a2:15:
14:ef:fa:14:a0:f4:2d:54:da:70:26:5b:00:bc:47:
6d:56:94:00:07:9e:e7:5a:be:3a:91:3a:58:57:2e:
c4:4a:0f:18:c6:0c:21:0d:79:30:e0:d9:60:af:50:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:29:E5:2F:35:C6:E4:B5:C7:AE:77:BD:D8:DB:92:2D:2A:9C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/a67dc25f-dd3f-351b-86d3-1c347b58bf0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b7:cc:51:ad:71:95:9b:06:aa:96:77:27:e6:99:31:c9:ae:
98:90:93:5b:c1:b7:e5:c9:d6:d8:fc:65:5d:4f:36:7a:3d:1a:
cc:a2:36:08:33:cf:f4:59:c6:4b:e6:a9:8b:40:bf:76:1d:87:
97:61:ac:f5:2b:4d:66:29:75:89:32:55:72:a5:b2:2b:a6:3e:
cb:27:06:f9:4f:99:d1:a7:d9:33:b6:38:08:fd:d2:5f:d7:24:
34:7c:c1:18:c9:a4:7f:0d:d6:45:82:fe:79:a7:93:fe:be:2c:
f8:91:f4:f5:3c:37:db:c4:69:24:9c:25:7f:06:29:9f:ae:c4:
d0:97:9e:61:0f:64:2f:6d:c3:44:25:74:be:3d:0a:a0:aa:ef:
5c:0f:4d:ba:0a:d4:7d:71:ec:76:a8:f4:06:1f:31:32:70:9c:
f3:59:af:b7:c1:63:2b:a9:5a:28:f1:1c:7f:b1:26:50:8d:8c:
50:2c:d0:5b:51:7b:de:77:37:f6:1f:2c:9b:d1:a3:85:db:a8:
c1:64:16:6f:e8:b8:2e:fe:55:b6:16:a0:d5:c6:7f:f0:e6:18:
e5:c0:54:72:da:c2:c1:01:bd:80:65:5f:bd:29:9e:8b:c9:03:
d1:22:58:55:7d:8e:c1:a3:ef:ca:56:f5:e0:dc:18:92:b6:1e:
22:a9:41:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSFkrojX16j6KpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk
ZjA2MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
YjgwOTM1ZjYtNTcyMS00N2ExLWIyOGEtOWZhNDcxOWNmNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHiG53a27QtRRZacLZz2Qv/dwVhaTNXQMeEc
Sx5yVeI0dOTcE3hiLRAF1xWN0GmON7RLEB97NWJP5HQ9r+tnv0WhYDPQTfQE14v/
WoK3GkPXFXHwHbJLq6e45fFTV7XwA8c2GAYSEgy8ARR3tJ97X9f3RxOmciAYCXAW
/pJp8UtKGXWAqxRUJmKA7H551/o6zATF9oFjBxB9Hm8GtGb9EwAtWlXPdwrEkmbg
BrTQFy0oqGs7LAI/x7KVr0Z1vAqFfeX6SfkI/KFCUjGUKxbyohUU7/oUoPQtVNpw
JlsAvEdtVpQAB57nWr46kTpYVy7ESg8YxgwhDXkw4Nlgr1ATswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyFKeUvNcbktceud73Y25ItKpzXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm
ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvYTY3ZGMyNWYtZGQzZi0z
NTFiLTg2ZDMtMWMzNDdiNThiZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj
MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2
ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4
NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACa3zFGtcZWbBqqWdyfmmTHJrpiQk1vBt+XJ1tj8ZV1PNno9GsyiNggz
z/RZxkvmqYtAv3Ydh5dhrPUrTWYpdYkyVXKlsiumPssnBvlPmdGn2TO2OAj90l/X
JDR8wRjJpH8N1kWC/nmnk/6+LPiR9PU8N9vEaSScJX8GKZ+uxNCXnmEPZC9tw0Ql
dL49CqCq71wPTboK1H1x7Hao9AYfMTJwnPNZr7fBYyupWijxHH+xJlCNjFAs0FtR
e953N/YfLJvRo4XbqMFkFm/ouC7+VbYWoNXGf/DmGOXAVHLawsEBvYBlX70pnovJ
A9EiWFV9jsGj78pW9eDcGJK2HiKpQXE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:51 2025 by rpki-client