Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa
File: f8c13836-c165-39bc-9bda-e76385fde4be.roa (raw, json)
Hash identifier: MzTBTJ1YcK1YflETlHodWPI2QFmFC8WEmzPrvavNFz8=
Subject key identifier: FB:D8:17:B6:C4:02:3E:8F:78:B3:72:02:6A:12:79:D3:27:88:DB:B6
Certificate issuer: /CN=1f1c0c08-444d-43e6-923b-55c2d71244e4
Certificate serial: 010D0C9F432858488AE09B7987DE7EB871D8CC0C
Authority key identifier: 4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 397711
IP address blocks: 170.76.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9b:79:87:de:7e:b8:71:d8:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1c0c08-444d-43e6-923b-55c2d71244e4
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=0a2d3645-f8d6-4145-aaed-99f163f92c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:3a:db:45:a4:e6:df:6a:4b:d1:14:77:bb:
a8:f1:1b:d7:a0:65:37:7d:2c:ef:46:32:97:e7:61:
4b:61:db:84:fb:67:84:74:fe:21:71:05:61:a0:aa:
83:af:a9:96:8c:8c:04:07:db:96:bc:d5:0b:ef:72:
2d:fd:b1:32:67:35:af:65:09:a1:30:00:c5:73:a3:
b3:71:37:ee:26:7e:7b:51:15:57:86:86:c5:8f:91:
a0:cb:c2:65:ab:ab:54:7a:7b:ac:d5:ca:07:15:5d:
10:eb:69:88:0e:7c:4a:11:21:72:94:74:5e:95:43:
7a:d3:9c:4c:39:be:64:bf:22:ed:00:21:0e:88:fd:
5b:54:87:bd:3a:b0:85:ca:1b:01:56:2f:28:f3:08:
32:1b:72:c5:1f:f2:40:87:2d:71:3c:29:d9:2c:a4:
8a:bc:66:28:25:e3:08:42:ef:43:5c:bd:f7:4c:0b:
61:fc:ec:50:14:fa:52:45:d1:35:e0:36:2a:cf:01:
f3:73:4f:b6:f3:7a:fe:20:d7:1d:6f:68:9d:0e:b4:
07:6a:30:32:02:86:08:0b:f0:7d:8f:ab:9c:6b:4b:
36:1e:b1:65:e4:06:ef:29:46:de:84:04:38:6f:98:
47:c8:26:fb:5a:50:2a:2f:81:7e:60:8c:be:aa:fb:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:17:B6:C4:02:3E:8F:78:B3:72:02:6A:12:79:D3:27:88:DB:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/f8c13836-c165-39bc-9bda-e76385fde4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl
X509v3 Authority Key Identifier:
keyid:4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.76.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:64:a6:fc:8c:ae:7c:20:5f:07:e3:c6:12:18:c9:57:f9:0f:
46:23:01:fc:db:5b:e3:51:23:c7:1e:b9:0c:8f:2b:6e:d5:f0:
4f:a4:b6:ef:fd:39:d5:41:f4:d2:2a:e0:8f:0c:75:a6:c6:cb:
77:51:6a:84:5f:df:ef:46:0d:c6:20:0d:ed:98:e1:ef:a7:89:
01:db:df:7a:ee:cf:58:c7:c1:a5:aa:60:75:05:28:46:88:a5:
42:f2:6b:3f:c6:fa:a2:cd:e5:04:4f:99:6d:6e:27:55:b2:a5:
bf:26:dd:43:f7:a4:fa:9c:04:2d:a4:2d:63:a7:d0:a8:64:a3:
97:c7:48:92:27:f6:9c:9f:3c:c4:ee:a7:3b:c6:06:06:4f:3b:
d9:d7:ca:a0:ed:68:2b:7d:26:50:7d:e9:a5:71:d9:9b:38:03:
26:5c:89:3a:b9:08:8d:18:49:00:21:46:e0:8d:8b:0d:62:18:
0a:01:46:a6:13:49:43:06:02:1c:48:56:a2:43:f6:f1:f3:90:
44:5f:9b:b1:e2:10:cb:76:a7:b3:d8:6c:e1:27:5c:6b:10:95:
9d:3a:ee:c9:6e:7f:48:88:af:c3:a1:d6:7c:e3:b2:27:6f:d9:
76:e5:06:cc:9e:d1:23:fa:8d:59:58:26:5f:d6:82:69:d0:e0:
a8:a6:e8:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4Jt5h95+uHHYzAwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYxYzBjMDgtNDQ0ZC00M2U2LTkyM2ItNTVjMmQ3MTI0
NGU0MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
MGEyZDM2NDUtZjhkNi00MTQ1LWFhZWQtOTlmMTYzZjkyYzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB0620Wk5t9qS9EUd7uo8RvXoGU3fSzvRjKX
52FLYduE+2eEdP4hcQVhoKqDr6mWjIwEB9uWvNUL73It/bEyZzWvZQmhMADFc6Oz
cTfuJn57URVXhobFj5Ggy8Jlq6tUenus1coHFV0Q62mIDnxKESFylHRelUN605xM
Ob5kvyLtACEOiP1bVIe9OrCFyhsBVi8o8wgyG3LFH/JAhy1xPCnZLKSKvGYoJeMI
Qu9DXL33TAth/OxQFPpSRdE14DYqzwHzc0+283r+INcdb2idDrQHajAyAoYIC/B9
j6uca0s2HrFl5AbvKUbehAQ4b5hHyCb7WlAqL4F+YIy+qvszbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvYF7bEAj6PeLNyAmoSedMniNu2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFj
MGMwOC00NDRkLTQzZTYtOTIzYi01NWMyZDcxMjQ0ZTQvZjhjMTM4MzYtYzE2NS0z
OWJjLTliZGEtZTc2Mzg1ZmRlNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWYxYzBjMDgtNDQ0ZC00M2U2LTky
M2ItNTVjMmQ3MTI0NGU0LzFmMWMwYzA4LTQ0NGQtNDNlNi05MjNiLTU1YzJkNzEy
NDRlNC5jcmwwHwYDVR0jBBgwFoAUS9SQJ2w3/99XBh5pxaCVeugG+hYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFjMGMwOC00NDRkLTQzZTYtOTIzYi01NWMy
ZDcxMjQ0ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkzxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlkpvyMrnwgXwfjxhIYyVf5D0YjAfzbW+NRI8ceuQyPK27V8E+ktu/9
OdVB9NIq4I8MdabGy3dRaoRf3+9GDcYgDe2Y4e+niQHb33ruz1jHwaWqYHUFKEaI
pULyaz/G+qLN5QRPmW1uJ1Wypb8m3UP3pPqcBC2kLWOn0Khko5fHSJIn9pyfPMTu
pzvGBgZPO9nXyqDtaCt9JlB96aVx2Zs4AyZciTq5CI0YSQAhRuCNiw1iGAoBRqYT
SUMGAhxIVqJD9vHzkERfm7HiEMt2p7PYbOEnXGsQlZ067sluf0iIr8Oh1nzjsidv
2XblBsye0SP6jVlYJl/WgmnQ4Kim6Gk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:56 2025 by rpki-client