Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa
File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json)
Hash identifier: Ojz6BWeUBRrYwa682k8gP8rL2uQqe/GEGWAeS5ys9Rw=
Subject key identifier: 07:3F:84:14:A6:E1:F6:B7:FF:D4:36:B0:B5:C1:98:FB:F3:FB:A1:26
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552951E5C860223AACDCE180
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 170.89.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:51:e5:c8:60:22:3a:ac:dc:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=4cebeca7-9ebc-420b-9c5a-3480e651dc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:c0:0d:6d:ac:76:65:3a:56:e5:2b:da:35:
a8:39:c6:1a:75:43:07:3a:1c:20:5d:8a:54:76:e4:
c8:27:9f:3e:18:0b:74:44:37:57:29:f5:91:29:a5:
33:32:53:a5:47:22:34:80:7d:4b:ad:13:36:bc:68:
65:d0:cd:d1:ab:f6:b8:e4:37:36:57:3d:15:7d:df:
98:1a:04:6f:ec:2a:d7:27:ac:48:88:07:91:04:dc:
db:3c:15:10:2c:85:f9:53:08:15:bb:b6:02:8d:08:
ae:d7:43:47:54:f8:fd:12:fb:fa:d2:33:5c:5d:e5:
a8:90:f2:04:47:2b:66:76:04:45:ec:6e:2f:87:d6:
f0:db:f7:a2:86:22:97:a6:bc:84:de:4a:15:bd:67:
d3:b1:ec:da:ff:80:85:f0:c0:30:50:01:df:4b:8f:
ab:cd:be:62:8b:93:bb:6c:ce:1c:18:51:9d:8c:e6:
28:64:67:4b:e4:35:2b:a2:37:05:5f:f5:e5:7b:e2:
30:ad:4a:a9:60:f2:89:81:82:d4:90:25:b4:12:0c:
5a:7b:97:56:e0:d9:1c:9a:5f:e7:33:54:de:97:bf:
9f:ea:cb:a0:98:7d:86:1d:71:6b:05:df:0e:19:21:
ce:b3:ef:5b:8b:43:f4:11:f2:50:c3:27:ce:cf:9f:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:84:14:A6:E1:F6:B7:FF:D4:36:B0:B5:C1:98:FB:F3:FB:A1:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1d:00:60:ba:e0:1b:ef:56:a5:f4:a4:48:45:78:ac:56:78:
74:03:b9:f6:e3:58:24:c4:37:36:26:33:1e:aa:1c:70:f3:72:
2a:d4:de:5b:a2:89:f2:00:5e:30:6b:42:e3:39:68:2b:22:8e:
7d:f7:25:b1:0c:6a:0c:b5:d9:0d:3f:3f:83:bd:de:7d:b2:1e:
6e:4a:a1:18:c8:e9:f6:bf:fa:f1:f0:1f:c7:8b:21:e0:20:fb:
42:b4:5f:49:44:23:9a:e3:b7:84:41:bd:77:19:85:fc:a0:be:
69:92:57:f1:42:11:82:dc:eb:9d:18:73:18:4a:10:02:b3:ca:
80:e8:0a:a7:76:a7:70:df:14:10:04:58:7b:77:54:77:f5:f1:
70:eb:61:10:3e:17:f7:44:26:22:a8:93:0f:3a:81:71:39:e6:
24:30:26:87:f5:d6:db:b6:18:35:71:b4:dc:ac:a1:91:68:a9:
9b:70:9b:d8:ae:1a:93:f0:ac:3a:a5:69:ec:af:ce:79:37:f3:
35:46:e0:c2:41:32:4c:41:bd:39:c3:27:b8:05:b4:a5:af:dc:
83:80:9c:45:cd:90:b5:73:4a:41:48:7f:81:7c:74:e8:21:2f:
c1:60:04:02:60:f6:59:f7:a0:06:1d:b1:5b:ef:6c:cb:f5:de:
b3:28:4f:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVHlyGAiOqzc4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
NGNlYmVjYTctOWViYy00MjBiLTljNWEtMzQ4MGU2NTFkYzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqHADW2sdmU6VuUr2jWoOcYadUMHOhwgXYpU
duTIJ58+GAt0RDdXKfWRKaUzMlOlRyI0gH1LrRM2vGhl0M3Rq/a45Dc2Vz0Vfd+Y
GgRv7CrXJ6xIiAeRBNzbPBUQLIX5UwgVu7YCjQiu10NHVPj9Evv60jNcXeWokPIE
RytmdgRF7G4vh9bw2/eihiKXpryE3koVvWfTseza/4CF8MAwUAHfS4+rzb5ii5O7
bM4cGFGdjOYoZGdL5DUrojcFX/Xle+IwrUqpYPKJgYLUkCW0Egxae5dW4Nkcml/n
M1Tel7+f6sugmH2GHXFrBd8OGSHOs+9bi0P0EfJQwyfOz5/8vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAc/hBSm4fa3/9Q2sLXBmPvz+6EmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODBlOTZkM2YtNjUwZS0z
Y2E3LWI5ZjktMTU0OTJhODE3ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMdAGC64BvvVqX0pEhFeKxWeHQDufbjWCTENzYmMx6qHHDzcirU3lui
ifIAXjBrQuM5aCsijn33JbEMagy12Q0/P4O93n2yHm5KoRjI6fa/+vHwH8eLIeAg
+0K0X0lEI5rjt4RBvXcZhfygvmmSV/FCEYLc650YcxhKEAKzyoDoCqd2p3DfFBAE
WHt3VHf18XDrYRA+F/dEJiKokw86gXE55iQwJof11tu2GDVxtNysoZFoqZtwm9iu
GpPwrDqlaeyvznk38zVG4MJBMkxBvTnDJ7gFtKWv3IOAnEXNkLVzSkFIf4F8dOgh
L8FgBAJg9ln3oAYdsVvvbMv13rMoT+4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:41 2025 by rpki-client