Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a48df1f5-7b8d-3094-9e3d-f897c9aa9ff9.roa
File: a48df1f5-7b8d-3094-9e3d-f897c9aa9ff9.roa (raw, json)
Hash identifier: cjHmqd1SXYJu+/OU8/om6gwZasfCaUU8RSE5OfOxDpg=
Subject key identifier: 26:78:A8:6D:7B:7D:16:B0:D7:86:48:3C:CA:CA:E4:AF:69:B0:AF:E1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8614889344E870CD4600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a48df1f5-7b8d-3094-9e3d-f897c9aa9ff9.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 152.46.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:86:14:88:93:44:e8:70:cd:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=0a7c88fb-b11f-418c-8247-8ad006789fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:1d:f8:0c:e2:40:99:4b:78:78:5a:57:9c:
49:42:28:3b:91:40:13:8a:c8:dd:a7:52:b8:61:06:
49:43:e8:e2:3e:be:b0:4a:d8:8d:d5:d5:dc:04:4d:
0f:2e:89:0d:c7:5a:11:33:97:25:ed:48:ba:36:e4:
ec:c8:74:ec:7f:87:b5:4b:da:f9:44:7d:a1:51:b0:
64:ca:fe:82:62:61:54:88:ad:ff:56:bc:bf:c8:b3:
45:e7:1f:94:5f:d5:68:1d:41:b2:52:96:bd:7d:99:
b5:78:54:05:78:b7:c5:1d:c7:05:af:d3:f9:15:fe:
49:c7:b8:26:8f:9d:6d:4f:46:32:40:07:02:95:43:
22:14:e5:5c:fe:79:35:49:29:17:41:3c:04:63:45:
07:56:22:f9:c4:fa:b6:1b:4f:cd:5c:21:22:8c:b6:
b4:d1:04:4a:c7:dd:f7:e4:8b:f3:21:f7:bc:29:b2:
23:07:7b:26:ac:34:a6:f6:3c:70:db:1d:83:a7:df:
55:34:44:2a:11:37:a6:d7:66:ee:4e:92:09:a1:17:
e2:36:c6:48:c0:13:e6:b5:8b:f9:83:81:ff:e1:6c:
e3:95:f9:52:1f:cf:ca:d5:6b:da:51:70:61:af:4d:
26:bc:17:9c:1b:d8:84:e7:40:d9:24:1d:c1:88:42:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:A8:6D:7B:7D:16:B0:D7:86:48:3C:CA:CA:E4:AF:69:B0:AF:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a48df1f5-7b8d-3094-9e3d-f897c9aa9ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:36:97:cd:9c:24:fd:38:66:f3:96:45:78:07:6b:b7:db:56:
55:45:cd:d0:a2:98:ba:a6:b0:6b:f4:ab:5e:29:f5:53:f0:4a:
50:24:51:0e:91:2f:f8:7e:d1:b4:b9:50:03:90:07:e1:01:2c:
77:c2:19:01:3a:c8:c8:d9:4f:f8:b0:34:88:bd:8f:80:ff:16:
3a:0a:37:76:90:4d:82:97:c1:d4:ce:a6:5a:84:6f:f2:be:b3:
98:76:d3:c6:cf:35:d0:43:53:da:14:a9:0b:67:6b:af:10:7f:
7f:e2:f3:3a:e1:49:5e:20:a5:b0:bc:52:b8:bb:6f:84:80:6e:
d9:6b:36:8b:83:5e:03:c6:86:56:2a:28:87:1d:a5:5f:8f:3f:
24:5b:e3:b2:23:c5:3b:19:61:87:71:51:3e:7c:92:17:9e:fc:
78:e2:e4:7d:17:72:10:bd:7b:4f:c3:02:2b:eb:5e:09:3b:45:
5c:7b:fe:bb:b7:4c:68:bd:0e:67:bf:29:7e:0d:52:cd:3c:c5:
34:79:32:fc:e2:e6:57:07:52:ee:53:91:01:87:43:3d:48:70:
16:95:4b:47:f6:b1:33:57:e2:1c:17:86:29:c6:29:bd:bb:99:
6a:02:f1:69:10:6c:fd:d3:39:59:db:21:cb:31:d3:cb:e6:be:
a0:2f:09:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoYUiJNE6HDNRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MGE3Yzg4ZmItYjExZi00MThjLTgyNDctOGFkMDA2Nzg5ZmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg0d+AziQJlLeHhaV5xJQig7kUATisjdp1K4
YQZJQ+jiPr6wStiN1dXcBE0PLokNx1oRM5cl7Ui6NuTsyHTsf4e1S9r5RH2hUbBk
yv6CYmFUiK3/Vry/yLNF5x+UX9VoHUGyUpa9fZm1eFQFeLfFHccFr9P5Ff5Jx7gm
j51tT0YyQAcClUMiFOVc/nk1SSkXQTwEY0UHViL5xPq2G0/NXCEijLa00QRKx933
5IvzIfe8KbIjB3smrDSm9jxw2x2Dp99VNEQqETem12buTpIJoRfiNsZIwBPmtYv5
g4H/4WzjlflSH8/K1WvaUXBhr00mvBecG9iE50DZJB3BiELzxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZ4qG17fRaw14ZIPMrK5K9psK/hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTQ4ZGYxZjUtN2I4ZC0z
MDk0LTllM2QtZjg5N2M5YWE5ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC82l82cJP04ZvOWRXgHa7fbVlVFzdCimLqmsGv0q14p9VPwSlAkUQ6R
L/h+0bS5UAOQB+EBLHfCGQE6yMjZT/iwNIi9j4D/FjoKN3aQTYKXwdTOplqEb/K+
s5h208bPNdBDU9oUqQtna68Qf3/i8zrhSV4gpbC8Uri7b4SAbtlrNouDXgPGhlYq
KIcdpV+PPyRb47IjxTsZYYdxUT58khee/Hji5H0XchC9e0/DAivrXgk7RVx7/ru3
TGi9Dme/KX4NUs08xTR5Mvzi5lcHUu5TkQGHQz1IcBaVS0f2sTNX4hwXhinGKb27
mWoC8WkQbP3TOVnbIcsx08vmvqAvCcQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:11 2025 by rpki-client