Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
File: f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa (raw, json)
Hash identifier: 2nqQLws7ojhyZRVftaxFn0wbG2f9+mktppGTGLUJ1VA=
Subject key identifier: 71:4A:D7:24:5F:E9:3C:98:AA:EA:B3:F0:48:4F:D9:43:42:1D:C5:C2
Certificate issuer: /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial: 010D0C9F4328584953C41A6529104160007C3E40
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 3477
IP address blocks: 170.110.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1a:65:29:10:41:60:00:7c:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=3ddcfa4b-9e58-4dea-8e42-718e25fd317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:88:44:b5:4e:52:66:50:9f:15:90:b5:22:
a2:9a:d0:a3:36:56:49:4d:12:f2:09:7d:f2:89:ae:
25:a4:d8:dc:48:f2:12:0a:0f:cc:64:17:e9:cf:b5:
61:75:a5:d6:b4:51:0e:a5:6f:20:7b:96:2d:87:1e:
41:ae:3f:80:c4:03:32:2b:8a:0d:0a:7b:d3:9c:60:
23:82:26:d2:4f:ba:a4:a2:b9:04:9b:67:c7:82:fc:
4d:3a:0e:17:5a:0b:95:68:f3:1a:57:5b:ec:0c:c8:
c2:4f:10:55:b1:03:17:b5:81:5c:41:df:f1:23:3b:
f6:8e:c6:9e:e3:e1:7b:d6:4d:80:13:05:f1:56:61:
e8:8e:8d:64:97:30:c1:00:b2:12:e3:5a:a3:cd:cf:
f9:66:13:8f:3e:b2:d2:9e:16:24:f1:c0:52:74:6b:
98:95:f2:e4:38:55:17:6e:5f:66:b4:47:59:fb:b9:
1e:94:11:62:0a:d9:ad:53:d6:c9:19:d3:e5:c4:3f:
e3:97:3f:6e:a0:05:62:cc:ab:cf:67:45:9a:72:93:
ad:7a:0a:0a:1f:a9:34:3b:42:d6:d6:da:06:71:d8:
86:da:86:2e:e8:82:8d:2d:be:e8:c0:cc:90:36:7c:
7c:ee:af:e1:8f:7e:0e:8f:0f:59:f6:6c:3d:6a:99:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:D7:24:5F:E9:3C:98:AA:EA:B3:F0:48:4F:D9:43:42:1D:C5:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
X509v3 Authority Key Identifier:
keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
sbgp-ipAddrBlock: critical
IPv4:
170.110.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:f8:46:e4:20:d1:dd:3e:80:6f:b8:6d:8c:23:c5:9a:b9:e8:
6a:45:3e:f7:0e:74:62:92:47:6f:7b:89:7e:3b:37:98:de:68:
8c:0f:54:51:1a:e0:ec:18:8b:36:52:6d:6c:f6:5c:e1:6a:e9:
9a:5c:00:55:ea:9b:fc:91:47:e7:06:2a:77:70:b4:38:43:e8:
e2:1e:b7:d2:db:fe:81:8d:d3:25:55:d4:cd:7f:c9:99:12:d7:
54:2b:5e:a9:53:81:09:cd:9e:f3:42:de:41:56:b2:b8:9e:c0:
4c:90:ab:66:24:48:c5:01:a3:b3:a9:44:3c:18:80:b5:37:2e:
87:7a:19:9f:26:28:0e:66:a1:ca:03:27:d8:17:78:de:1f:ad:
c8:b9:bd:b4:10:76:f6:e4:ce:2b:f6:e7:57:49:67:0e:a0:88:
2d:99:e6:d7:0e:73:53:0f:dd:fb:81:1a:e0:a4:d1:26:25:e2:
67:75:a6:9e:89:76:e7:23:1c:82:63:3e:ae:33:3d:f4:c5:ac:
4f:28:44:8a:4b:d9:73:d0:4d:20:dd:03:51:54:83:8d:d6:86:
d6:89:55:d2:81:7c:bf:1b:d9:1f:ee:1e:7e:4a:54:81:eb:41:
1d:b2:45:cf:65:0b:a7:da:15:b0:d5:36:b0:23:f7:98:b5:a6:
9d:4f:f2:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBplKRBBYAB8PkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0
YTJkMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
M2RkY2ZhNGItOWU1OC00ZGVhLThlNDItNzE4ZTI1ZmQzMTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv2IRLVOUmZQnxWQtSKimtCjNlZJTRLyCX3y
ia4lpNjcSPISCg/MZBfpz7VhdaXWtFEOpW8ge5Ythx5Brj+AxAMyK4oNCnvTnGAj
gibST7qkorkEm2fHgvxNOg4XWguVaPMaV1vsDMjCTxBVsQMXtYFcQd/xIzv2jsae
4+F71k2AEwXxVmHojo1klzDBALIS41qjzc/5ZhOPPrLSnhYk8cBSdGuYlfLkOFUX
bl9mtEdZ+7kelBFiCtmtU9bJGdPlxD/jlz9uoAVizKvPZ0WacpOtegoKH6k0O0LW
1toGcdiG2oYu6IKNLb7owMyQNnx87q/hj34Ojw9Z9mw9apkb9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFK1yRf6TyYquqz8EhP2UNCHcXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw
ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvZjM2YjAzMzktZmU1Yi0z
M2M1LTg3MDUtMTU4YTRlMGU5OWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx
ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw
NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2
ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqm7+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALn4RuQg0d0+gG+4bYwjxZq56GpFPvcOdGKSR297iX47N5jeaIwPVFEa
4OwYizZSbWz2XOFq6ZpcAFXqm/yRR+cGKndwtDhD6OIet9Lb/oGN0yVV1M1/yZkS
11QrXqlTgQnNnvNC3kFWsriewEyQq2YkSMUBo7OpRDwYgLU3Lod6GZ8mKA5mocoD
J9gXeN4frci5vbQQdvbkziv251dJZw6giC2Z5tcOc1MP3fuBGuCk0SYl4md1pp6J
ducjHIJjPq4zPfTFrE8oRIpL2XPQTSDdA1FUg43WhtaJVdKBfL8b2R/uHn5KVIHr
QR2yRc9lC6faFbDVNrAj95i1pp1P8ok=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:49 2025 by rpki-client