Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa
File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json)
Hash identifier: k9im0NsBKjKi+3XbU9CMkuICUxC4rnUrlK1laM7w3GI=
Subject key identifier: 28:89:A8:D9:78:D8:78:9A:23:53:5D:04:7E:31:33:55:D7:B3:47:B1
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F432858492CAE8B548DBAF7D27457FF30
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.85.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8b:54:8d:ba:f7:d2:74:57:ff:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=bb8b7a90-6217-4b10-86a0-0b13d2dfdeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:c3:56:88:ed:4f:0b:64:a1:95:d7:00:63:
a6:ea:e0:58:90:3a:c6:1c:f3:82:1e:55:af:d6:d7:
48:ea:2d:06:77:8d:ce:f1:fb:7a:70:ed:0e:c9:8c:
53:55:6b:95:e7:a7:6f:09:ec:4c:ba:86:99:3a:30:
cb:b8:18:5a:d5:79:50:61:24:b0:1b:67:a7:b5:00:
ab:c0:c6:ca:85:78:41:d7:0f:cd:e3:d7:02:1b:50:
3c:43:76:19:38:12:0c:56:13:be:04:f0:56:e1:05:
05:00:58:11:6f:b6:bc:89:75:24:cf:c2:d4:03:d3:
da:46:7f:dc:46:d5:e2:b8:84:2e:1c:1e:f4:fa:de:
ed:d7:0d:2e:f9:49:5f:9b:0f:a2:24:82:99:bd:01:
c5:ee:aa:cb:12:cb:f8:69:38:a8:d8:a7:cb:10:a4:
2f:80:fb:bb:4b:fd:45:6d:71:25:d7:eb:a3:da:03:
6a:99:36:e9:7d:f7:2d:c5:bf:84:5a:09:06:71:b9:
00:36:5e:c3:5f:57:dd:0f:41:37:73:fc:ce:e1:a1:
78:3c:4e:e6:ea:df:ac:e0:3d:39:c1:70:18:d9:34:
ff:87:45:0c:95:03:1e:0f:b1:0b:e5:ca:5b:fe:97:
98:07:e9:fa:43:21:70:c2:9c:23:91:ca:f6:bb:ae:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:A8:D9:78:D8:78:9A:23:53:5D:04:7E:31:33:55:D7:B3:47:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:e3:51:2f:ad:e1:f4:0a:79:f0:49:79:8f:3c:02:5e:4b:05:
c2:91:12:d4:33:42:7a:d2:88:bd:8b:1d:ab:9a:aa:25:33:1c:
76:79:95:8e:d7:ea:fc:18:5b:cc:f5:f1:f0:a3:ff:95:84:df:
14:75:1d:13:6e:34:5b:50:7c:79:3e:af:13:cb:cd:ae:0e:2a:
eb:79:e1:46:5e:48:d9:61:bf:3c:5f:73:21:14:76:2c:09:23:
4a:ad:e6:6f:6a:55:a5:27:fb:62:88:69:81:be:51:01:f1:99:
24:43:08:8f:cb:54:6d:4b:30:9b:0d:bb:dd:dc:ee:f9:d5:f6:
af:00:2b:94:c3:30:61:85:19:6b:f3:c7:1d:c5:d5:56:0d:f9:
c5:6c:dc:75:06:33:f8:a8:a4:90:9c:a3:cb:76:90:99:5b:7d:
f8:d5:c6:39:b9:6d:cc:a9:cf:3a:96:59:04:1e:19:3b:e5:fe:
30:05:5f:65:49:9d:66:ac:79:fe:a8:c8:99:c3:09:6a:a6:c7:
e3:ac:62:15:e6:f9:0b:87:58:e2:a2:d3:a8:f8:15:d7:45:d8:
4e:92:52:b9:a5:2c:b1:6c:b7:37:80:95:62:bc:94:4d:da:88:
e6:75:df:76:7c:f5:a8:35:de:92:13:7c:b7:0a:78:6b:92:a4:
ca:c3:b9:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrotUjbr30nRX/zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YmI4YjdhOTAtNjIxNy00YjEwLTg2YTAtMGIxM2QyZGZkZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh03DVojtTwtkoZXXAGOm6uBYkDrGHPOCHlWv
1tdI6i0Gd43O8ft6cO0OyYxTVWuV56dvCexMuoaZOjDLuBha1XlQYSSwG2entQCr
wMbKhXhB1w/N49cCG1A8Q3YZOBIMVhO+BPBW4QUFAFgRb7a8iXUkz8LUA9PaRn/c
RtXiuIQuHB70+t7t1w0u+Ulfmw+iJIKZvQHF7qrLEsv4aTio2KfLEKQvgPu7S/1F
bXEl1+uj2gNqmTbpffctxb+EWgkGcbkANl7DX1fdD0E3c/zO4aF4PE7m6t+s4D05
wXAY2TT/h0UMlQMeD7EL5cpb/peYB+n6QyFwwpwjkcr2u66TEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCiJqNl42HiaI1NdBH4xM1XXs0exMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z
NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPjUS+t4fQKefBJeY88Al5LBcKREtQzQnrSiL2LHauaqiUzHHZ5lY7X
6vwYW8z18fCj/5WE3xR1HRNuNFtQfHk+rxPLza4OKut54UZeSNlhvzxfcyEUdiwJ
I0qt5m9qVaUn+2KIaYG+UQHxmSRDCI/LVG1LMJsNu93c7vnV9q8AK5TDMGGFGWvz
xx3F1VYN+cVs3HUGM/iopJCco8t2kJlbffjVxjm5bcypzzqWWQQeGTvl/jAFX2VJ
nWasef6oyJnDCWqmx+OsYhXm+QuHWOKi06j4FddF2E6SUrmlLLFstzeAlWK8lE3a
iOZ133Z89ag13pITfLcKeGuSpMrDuQ4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:43 2025 by rpki-client