Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa
File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json)
Hash identifier: Vb/gMs5pr+xZcODvPSru4xxbVqIz4mW2pqsWZZQijLo=
Subject key identifier: 78:BF:1F:96:0A:CF:46:27:51:38:06:F0:C7:40:5E:58:3F:5A:03:0C
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584955295213D9CBAEAB70F7E740
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 170.89.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:52:13:d9:cb:ae:ab:70:f7:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=8b2d303d-09cb-4b39-a71d-75a539be2ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:53:27:3b:9e:ee:65:b9:31:35:6c:be:9b:
ea:cd:53:a1:2c:9f:a7:bc:fa:aa:77:4c:5e:74:0a:
b2:0f:32:8a:56:5a:b5:b7:1b:ec:e4:f5:72:c4:d3:
be:f6:34:f4:ae:2e:60:1e:86:8b:05:ac:e5:ef:4d:
29:68:74:c1:c1:e8:1d:32:4c:42:1b:77:4b:31:1b:
14:b9:6c:8f:d6:4f:a9:99:45:0e:dc:1e:7b:7a:fd:
a9:3e:bf:6e:af:97:50:f0:a0:fe:cd:3c:16:0a:75:
d5:4a:32:2e:65:c5:82:df:af:e4:03:ee:b2:03:86:
86:e3:ea:21:33:a5:ec:58:40:67:66:a5:a1:2c:b9:
e6:97:8b:6d:e4:f8:4f:87:d5:af:93:48:f9:b5:84:
14:8d:4a:a7:56:c6:c3:bc:c4:44:f1:18:71:4d:d9:
db:43:9f:79:23:2f:b0:a9:25:d1:60:75:ee:82:bc:
45:5e:f0:da:1f:c9:c9:66:7a:49:cd:55:57:6c:63:
5a:f3:94:79:c5:74:4f:60:ed:1f:aa:dc:fc:94:6e:
b6:8c:67:e2:00:69:75:f2:ce:25:c3:c7:51:72:33:
30:60:5d:b2:0f:ad:3a:cf:0b:60:6f:72:9b:a7:c2:
ba:96:69:1f:16:7f:b2:63:1c:43:12:0f:31:59:a6:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:1F:96:0A:CF:46:27:51:38:06:F0:C7:40:5E:58:3F:5A:03:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ce:39:c1:64:94:c0:2f:e7:ae:50:5e:60:e0:5c:be:f4:8e:
b0:50:09:42:eb:fa:9f:56:ba:0e:82:51:4d:26:73:16:e9:0f:
d6:6d:fe:81:e6:47:e2:a0:8f:4e:45:d8:32:05:97:5f:6e:67:
07:1d:c1:3c:47:3d:93:41:58:51:21:03:f6:09:7e:84:96:47:
6c:56:e9:a9:7b:ba:22:d2:87:bd:c7:39:12:53:71:48:f8:c9:
72:28:79:17:b7:aa:f6:0e:11:28:7b:45:39:ab:c6:7a:67:5c:
fa:9b:94:1d:bd:ac:54:6e:05:d8:89:3d:d2:6f:e6:08:cf:99:
bf:e5:a5:5b:62:bc:9d:b4:45:3e:8b:bd:d7:6d:cb:ee:4a:c4:
f9:bc:36:57:8e:79:4d:2f:af:4e:75:4c:29:48:cc:68:83:95:
56:b3:8c:61:fd:c0:42:be:dd:09:bf:d9:65:c4:af:18:cb:03:
6a:00:95:47:4f:c7:69:6e:5e:3a:e6:c4:49:8c:02:bf:ae:68:
7b:b0:5f:f6:b1:70:cd:0b:d5:80:a6:5a:e3:69:e7:3d:37:6a:
07:67:ac:25:da:79:f8:d6:de:11:6d:3b:5d:fb:94:32:c8:62:
37:e1:63:b5:a7:3c:b8:d9:dd:fd:7e:fb:7a:d3:f9:b4:82:05:
f2:0d:a4:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVIT2cuuq3D350AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
OGIyZDMwM2QtMDljYi00YjM5LWE3MWQtNzVhNTM5YmUyZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3FTJzue7mW5MTVsvpvqzVOhLJ+nvPqqd0xe
dAqyDzKKVlq1txvs5PVyxNO+9jT0ri5gHoaLBazl700paHTBwegdMkxCG3dLMRsU
uWyP1k+pmUUO3B57ev2pPr9ur5dQ8KD+zTwWCnXVSjIuZcWC36/kA+6yA4aG4+oh
M6XsWEBnZqWhLLnml4tt5PhPh9Wvk0j5tYQUjUqnVsbDvMRE8RhxTdnbQ595Iy+w
qSXRYHXugrxFXvDaH8nJZnpJzVVXbGNa85R5xXRPYO0fqtz8lG62jGfiAGl18s4l
w8dRcjMwYF2yD606zwtgb3Kbp8K6lmkfFn+yYxxDEg8xWabLpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHi/H5YKz0YnUTgG8MdAXlg/WgMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z
ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXOOcFklMAv565QXmDgXL70jrBQCULr+p9Wug6CUU0mcxbpD9Zt/oHm
R+Kgj05F2DIFl19uZwcdwTxHPZNBWFEhA/YJfoSWR2xW6al7uiLSh73HORJTcUj4
yXIoeRe3qvYOESh7RTmrxnpnXPqblB29rFRuBdiJPdJv5gjPmb/lpVtivJ20RT6L
vddty+5KxPm8NleOeU0vr051TClIzGiDlVazjGH9wEK+3Qm/2WXErxjLA2oAlUdP
x2luXjrmxEmMAr+uaHuwX/axcM0L1YCmWuNp5z03agdnrCXaefjW3hFtO137lDLI
YjfhY7WnPLjZ3f1++3rT+bSCBfINpPM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:55 2025 by rpki-client