Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
File: d1caff1b-70a2-3f40-9325-7d12bd836408.roa (raw, json)
Hash identifier: qW4pnYowjWhfjOofg3r3lSNTwXac9LtZX2SEXpnO57k=
Subject key identifier: A9:70:10:E8:CB:6E:18:18:1E:04:B0:BF:39:0D:FF:2A:6A:C9:F5:00
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F432858482A8FDFD4447E43595251D5C0
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 396982
IP address blocks: 147.124.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:df:d4:44:7e:43:59:52:51:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=26066f5c-8d7b-4630-bcbc-8942461206a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:2f:f3:e1:1d:b0:f6:61:5f:c4:06:99:0d:
d0:2a:a4:6a:9e:ce:d0:a2:c7:ec:f1:4c:b6:87:44:
d8:59:54:31:f8:42:c6:7c:f5:cc:a3:fb:2a:c7:0e:
4a:12:c5:35:ad:48:1e:4e:57:72:7c:a6:31:6d:13:
84:f0:fe:f9:df:8b:b7:c8:71:9e:de:2e:13:42:85:
52:df:69:dd:cf:f7:f0:bb:c0:a6:62:3a:56:2f:19:
7c:08:99:54:20:2b:ed:7e:26:3c:ff:bf:23:a9:d9:
41:b0:91:61:8a:f3:fc:ee:04:70:36:20:02:9b:d1:
dd:6d:b1:b2:22:74:59:e0:6f:f5:5f:96:51:56:9d:
ac:9b:a4:21:61:83:b8:4e:eb:a9:6e:76:53:e4:4f:
a7:63:66:70:19:b8:4e:3f:80:23:90:e9:cb:d7:c2:
2b:55:b1:86:31:8c:7e:41:46:0d:14:0b:d0:72:36:
c6:14:cc:c2:85:b6:40:06:de:91:85:e0:f7:07:4b:
ca:f1:fa:2b:be:2f:28:ab:5f:c0:7a:6b:c2:e1:d1:
ba:16:57:d7:da:01:1f:f1:69:ba:81:93:60:0c:d3:
91:2f:fa:87:b7:07:b8:3e:d2:fe:70:1b:e6:d7:59:
a0:25:b6:c9:5b:de:a0:07:b1:c4:28:8b:9b:9e:0d:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:70:10:E8:CB:6E:18:18:1E:04:B0:BF:39:0D:FF:2A:6A:C9:F5:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d8:08:67:fe:07:da:89:28:59:a5:20:8e:a8:9f:d9:38:94:
bf:16:63:be:b0:ff:61:25:c1:89:18:61:19:32:b0:6e:b0:16:
5f:5d:aa:33:b8:cc:09:90:81:e1:38:7d:ce:e6:b1:35:ac:07:
f3:f3:e9:24:97:6b:c0:da:1c:65:ee:12:8d:0a:e6:f8:a5:fc:
48:4f:92:21:7b:6e:4c:c5:92:ca:08:ae:3b:60:41:e7:bd:c1:
fa:ab:59:24:0b:30:62:62:f7:82:60:32:89:6e:b0:1c:b1:2b:
82:a3:e1:d6:3e:a5:99:0c:38:a3:89:ca:f1:b2:08:10:80:1d:
46:32:08:68:a5:fd:97:05:60:bc:b3:c6:91:42:9a:70:0c:aa:
72:a6:14:1b:b3:c3:bd:3e:fa:9b:a5:70:f7:51:ca:14:0f:0a:
56:09:dc:34:96:75:07:a7:cc:8e:90:6d:dd:ff:4b:9d:bc:85:
ad:02:a1:26:0f:3e:4c:e4:28:39:f7:6f:7e:19:2f:06:ce:a5:
14:88:49:ec:c3:30:5b:e0:91:ff:84:70:78:40:cc:99:ed:dd:
0d:02:5d:34:36:3c:83:0f:0d:87:5f:93:22:b5:d6:3f:1f:33:
1f:2b:0c:9d:41:02:9e:2c:b3:c1:25:ea:f9:9f:ec:56:35:f9:
ae:ad:37:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj9/URH5DWVJR1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk
ZjA2MB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
MjYwNjZmNWMtOGQ3Yi00NjMwLWJjYmMtODk0MjQ2MTIwNmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiycv8+EdsPZhX8QGmQ3QKqRqns7Qosfs8Uy2
h0TYWVQx+ELGfPXMo/sqxw5KEsU1rUgeTldyfKYxbROE8P7534u3yHGe3i4TQoVS
32ndz/fwu8CmYjpWLxl8CJlUICvtfiY8/78jqdlBsJFhivP87gRwNiACm9HdbbGy
InRZ4G/1X5ZRVp2sm6QhYYO4TuupbnZT5E+nY2ZwGbhOP4AjkOnL18IrVbGGMYx+
QUYNFAvQcjbGFMzChbZABt6RheD3B0vK8forvi8oq1/AemvC4dG6FlfX2gEf8Wm6
gZNgDNORL/qHtwe4PtL+cBvm11mgJbbJW96gB7HEKIubng0BzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlwEOjLbhgYHgSwvzkN/ypqyfUAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm
ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDFjYWZmMWItNzBhMi0z
ZjQwLTkzMjUtN2QxMmJkODM2NDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj
MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2
ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4
NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErYCGf+B9qJKFmlII6on9k4lL8WY76w/2ElwYkYYRkysG6wFl9dqjO4
zAmQgeE4fc7msTWsB/Pz6SSXa8DaHGXuEo0K5vil/EhPkiF7bkzFksoIrjtgQee9
wfqrWSQLMGJi94JgMolusByxK4Kj4dY+pZkMOKOJyvGyCBCAHUYyCGil/ZcFYLyz
xpFCmnAMqnKmFBuzw70++pulcPdRyhQPClYJ3DSWdQenzI6Qbd3/S528ha0CoSYP
PkzkKDn3b34ZLwbOpRSISezDMFvgkf+EcHhAzJnt3Q0CXTQ2PIMPDYdfkyK11j8f
Mx8rDJ1BAp4ss8El6vmf7FY1+a6tN/U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:23 2025 by rpki-client