Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa
File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json)
Hash identifier: K7qlI+lw6npgka8or8+LqhxCP/Y/8kLjAHblkB9ql8M=
Subject key identifier: 09:BF:31:DA:77:75:9E:7E:4A:5A:99:47:C2:69:53:9F:FD:7E:1E:67
Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Certificate serial: 010D0C9F432858494CC94168D0664F972605D2A0
Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 208.71.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:41:68:d0:66:4f:97:26:05:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=54c9d30f-23ee-4855-8c4d-f901943caf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:01:53:31:ef:a8:a1:9d:98:d9:09:56:2e:
79:1a:c5:8e:8c:d2:b7:77:6e:bf:1c:79:54:a6:17:
58:2f:f7:b7:4e:86:e7:79:25:bf:b9:8a:f0:c6:d3:
1e:2b:c2:a6:0f:c0:31:a8:e2:e4:28:71:e8:59:b4:
ba:a0:28:1b:8f:ce:c9:3f:9c:91:2d:eb:4d:2b:d9:
ea:66:da:5e:1e:99:12:39:d0:b0:18:9b:31:09:be:
f7:7d:c1:f1:bc:74:4f:7c:21:c7:9b:3e:cf:d6:5e:
d3:d8:02:e8:0b:c3:6a:0f:c3:5c:b7:13:57:4e:40:
fa:53:2a:c0:5b:86:d2:93:99:71:be:e1:c1:28:7a:
f0:3d:c2:3e:7f:14:26:27:70:53:fb:2f:a9:09:cb:
65:38:fd:a1:28:5d:16:24:3b:50:e0:5c:13:66:44:
cc:21:0d:54:d8:f9:32:1e:56:cf:95:44:03:57:e2:
81:60:22:cd:5a:a5:b0:92:8f:e6:d2:23:0f:23:7d:
a7:ee:24:d6:21:41:d7:94:27:a4:7f:46:f4:9d:48:
9e:d4:3b:6f:40:cf:78:c9:40:86:63:43:26:7a:00:
99:05:c9:99:a3:b8:3f:58:76:08:bd:89:de:63:0f:
2e:0b:b5:51:39:4f:54:b6:64:d3:fd:0b:6c:43:6c:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:31:DA:77:75:9E:7E:4A:5A:99:47:C2:69:53:9F:FD:7E:1E:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl
X509v3 Authority Key Identifier:
keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:cc:ad:42:84:cb:15:c6:0c:83:28:cf:cb:c7:4f:94:ee:59:
67:b3:3a:4b:0c:20:b9:29:0f:46:09:e6:9e:d9:0b:58:11:ee:
f1:1f:1f:21:c1:2f:cf:2f:c0:eb:dc:ee:66:4a:ed:68:e5:92:
ae:cb:40:85:08:9f:93:ab:14:6b:e1:52:a5:ee:9c:b1:36:1e:
bf:bc:c9:36:54:8b:ca:19:00:7d:b4:e5:cf:f3:9e:26:0a:a6:
6b:99:12:61:ca:84:c0:07:6c:55:52:da:5a:46:11:d6:49:76:
56:ff:9d:b5:bb:1b:d5:3e:12:7b:fa:4c:91:7f:99:dc:98:06:
5b:56:4a:ff:45:2a:2b:72:b0:11:55:f5:5c:b8:94:f3:2f:08:
32:fa:fd:80:b2:b3:b9:7f:de:ba:ed:29:7d:cd:a8:b0:7a:04:
09:0b:12:8b:02:cf:94:e9:75:50:03:15:54:dc:4d:db:8a:ec:
5e:cd:b1:3c:b9:c3:c1:24:e7:e3:30:96:7b:37:8f:fb:75:26:
67:aa:2c:4c:d5:d1:eb:96:59:74:f8:d5:c2:a9:92:3a:34:4e:
d5:40:1a:93:32:6c:33:75:84:96:93:b4:24:66:e8:a8:1e:ac:
f7:f2:12:39:13:7f:29:9f:39:70:e1:df:fe:92:71:bf:5b:ce:
66:06:e3:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUFo0GZPlyYF0qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1
YjE3MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NTRjOWQzMGYtMjNlZS00ODU1LThjNGQtZjkwMTk0M2NhZjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIoBUzHvqKGdmNkJVi55GsWOjNK3d26/HHlU
phdYL/e3TobneSW/uYrwxtMeK8KmD8AxqOLkKHHoWbS6oCgbj87JP5yRLetNK9nq
ZtpeHpkSOdCwGJsxCb73fcHxvHRPfCHHmz7P1l7T2ALoC8NqD8NctxNXTkD6UyrA
W4bSk5lxvuHBKHrwPcI+fxQmJ3BT+y+pCctlOP2hKF0WJDtQ4FwTZkTMIQ1U2Pky
HlbPlUQDV+KBYCLNWqWwko/m0iMPI32n7iTWIUHXlCekf0b0nUie1DtvQM94yUCG
Y0MmegCZBcmZo7g/WHYIvYneYw8uC7VROU9UtmTT/QtsQ2wCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAm/Mdp3dZ5+SlqZR8JpU5/9fh5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh
MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvNDcwYTBkMWMtMGI1Mi0z
ZDgxLTgwN2ItNzM0ZjM1Y2YwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5
ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3
NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw
NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzMrUKEyxXGDIMoz8vHT5TuWWezOksMILkpD0YJ5p7ZC1gR7vEfHyHB
L88vwOvc7mZK7Wjlkq7LQIUIn5OrFGvhUqXunLE2Hr+8yTZUi8oZAH205c/zniYK
pmuZEmHKhMAHbFVS2lpGEdZJdlb/nbW7G9U+Env6TJF/mdyYBltWSv9FKitysBFV
9Vy4lPMvCDL6/YCys7l/3rrtKX3NqLB6BAkLEosCz5TpdVADFVTcTduK7F7NsTy5
w8Ek5+Mwlns3j/t1JmeqLEzV0euWWXT41cKpkjo0TtVAGpMybDN1hJaTtCRm6Kge
rPfyEjkTfymfOXDh3/6Scb9bzmYG4yI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:08 2025 by rpki-client