Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
File: ace08759-ae56-37f9-b6d2-429a1b0989b7.roa (raw, json)
Hash identifier: 7ETea4s+VFP8gd2rbzGR3atVzFT7UUfCBD9MXEfV3zU=
Subject key identifier: DF:E5:6F:0A:55:DE:98:3D:AE:BC:A3:48:99:BE:0C:7C:E4:82:D2:FC
Certificate issuer: /CN=cb29a492-e225-4723-973a-07560c140eea
Certificate serial: 010D0C9F432858490B4C266CA005379FE2AF9500
Authority key identifier: A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 398538
IP address blocks: 104.247.127.0/24 maxlen: 24
170.39.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:26:6c:a0:05:37:9f:e2:af:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a492-e225-4723-973a-07560c140eea
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=f28dbed8-a99f-4aaa-93ff-dc50558a6ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0a:1a:9a:4e:9b:5a:0d:d5:a8:d2:ac:db:5d:
0a:b8:9a:be:cd:e4:fc:ea:e3:50:f4:4b:91:a0:44:
ef:33:0c:c0:6d:21:dd:3b:99:6e:81:98:ba:aa:dd:
bd:2f:8f:67:2a:d3:a9:b1:2a:fa:fb:bd:87:75:8c:
dd:9b:9e:94:fb:eb:40:77:16:a1:da:39:19:a7:c4:
0a:94:18:c4:3b:a1:15:f9:7c:de:be:8f:3b:cf:19:
8f:be:ac:f4:ac:bc:d1:20:82:86:f0:10:de:29:f5:
fd:e3:9d:d6:46:0a:b3:57:32:f8:4b:32:6a:72:65:
d7:8a:27:85:19:56:32:2d:5d:c5:b1:d1:7b:ce:83:
8d:1b:f0:fb:fb:14:56:28:0a:01:91:ca:16:54:0a:
65:db:9e:1a:c9:47:15:3c:04:68:da:ce:6a:85:00:
54:75:bc:b7:df:e3:0c:ad:fc:d0:94:77:19:3b:60:
c2:e6:3a:b9:76:9c:75:74:c4:bf:dc:9c:81:88:b0:
23:22:76:51:aa:02:7f:04:d5:01:df:16:5e:b3:88:
10:fe:58:7f:c7:57:45:4f:9a:79:3d:b5:b9:64:20:
07:19:f5:27:43:72:eb:7f:27:2f:cf:c5:4e:ca:51:
7c:9f:72:1f:8e:6f:32:e1:2e:84:d6:ed:17:5c:eb:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:6F:0A:55:DE:98:3D:AE:BC:A3:48:99:BE:0C:7C:E4:82:D2:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/ace08759-ae56-37f9-b6d2-429a1b0989b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea/cb29a492-e225-4723-973a-07560c140eea.crl
X509v3 Authority Key Identifier:
keyid:A9:6E:F9:E9:88:F4:D6:EA:56:54:34:96:9D:D9:BC:05:A3:1C:06:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cb29a492-e225-4723-973a-07560c140eea.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.127.0/24
170.39.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:36:33:73:4f:d3:f4:4c:90:71:46:77:26:1e:55:fd:f3:40:
b1:69:2e:5e:7d:ea:1a:42:c6:93:74:00:a1:21:ea:d9:15:8c:
cf:88:4b:6e:fe:d3:ab:6d:50:a3:91:9e:33:50:85:14:03:29:
4a:d3:2b:bd:e6:41:37:17:27:61:c4:f7:d9:53:da:66:d2:8b:
79:33:e9:bf:af:5e:0a:d4:38:e3:3d:3f:50:d0:6b:91:a8:f3:
9d:1b:1c:c6:78:b7:10:e9:39:76:2b:b9:14:d1:1a:a7:69:70:
28:08:fe:e8:7e:2e:18:65:68:8e:e7:e5:61:02:54:87:e2:d8:
38:2c:de:ec:84:5b:f5:fd:35:1c:c9:b7:04:69:35:ea:d6:3e:
79:6f:e8:4f:d3:6a:4b:e7:b5:28:d4:0c:e7:bd:f4:94:2b:2a:
68:19:98:14:e7:91:36:a9:dd:a8:1b:bb:fc:6b:a0:d4:80:51:
a5:3d:e7:cc:79:1e:70:cd:4b:e3:39:cb:ef:42:32:de:1e:b3:
70:a9:d2:3e:9a:3b:66:bb:97:88:37:7f:c8:02:9e:60:34:9c:
4e:df:e5:e0:8f:1c:89:85:f4:ee:f4:cc:c3:71:8c:d6:09:ed:
80:4e:f6:eb:b4:5d:f6:b6:09:f1:fa:c4:79:e9:2c:b4:bd:e2:
32:90:8e:0c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkLTCZsoAU3n+KvlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IyOWE0OTItZTIyNS00NzIzLTk3M2EtMDc1NjBjMTQw
ZWVhMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjI4ZGJlZDgtYTk5Zi00YWFhLTkzZmYtZGM1MDU1OGE2ZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qoamk6bWg3VqNKs210KuJq+zeT86uNQ9EuR
oETvMwzAbSHdO5lugZi6qt29L49nKtOpsSr6+72HdYzdm56U++tAdxah2jkZp8QK
lBjEO6EV+Xzevo87zxmPvqz0rLzRIIKG8BDeKfX9453WRgqzVzL4SzJqcmXXiieF
GVYyLV3FsdF7zoONG/D7+xRWKAoBkcoWVApl254ayUcVPARo2s5qhQBUdby33+MM
rfzQlHcZO2DC5jq5dpx1dMS/3JyBiLAjInZRqgJ/BNUB3xZes4gQ/lh/x1dFT5p5
PbW5ZCAHGfUnQ3Lrfycvz8VOylF8n3Ifjm8y4S6E1u0XXOtCmwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFN/lbwpV3pg9rryjSJm+DHzkgtL8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYjI5
YTQ5Mi1lMjI1LTQ3MjMtOTczYS0wNzU2MGMxNDBlZWEvYWNlMDg3NTktYWU1Ni0z
N2Y5LWI2ZDItNDI5YTFiMDk4OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2IyOWE0OTItZTIyNS00NzIzLTk3
M2EtMDc1NjBjMTQwZWVhL2NiMjlhNDkyLWUyMjUtNDcyMy05NzNhLTA3NTYwYzE0
MGVlYS5jcmwwHwYDVR0jBBgwFoAUqW756Yj01upWVDSWndm8BaMcBkEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYjI5YTQ5Mi1lMjI1LTQ3MjMtOTczYS0wNzU2
MGMxNDBlZWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPd/AwQA
qidZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHA2M3NP0/RMkHFGdyYeVf3zQLFpLl596hpCxpN0AKEh6tkV
jM+IS27+06ttUKORnjNQhRQDKUrTK73mQTcXJ2HE99lT2mbSi3kz6b+vXgrUOOM9
P1DQa5Go850bHMZ4txDpOXYruRTRGqdpcCgI/uh+LhhlaI7n5WECVIfi2Dgs3uyE
W/X9NRzJtwRpNerWPnlv6E/TakvntSjUDOe99JQrKmgZmBTnkTap3agbu/xroNSA
UaU958x5HnDNS+M5y+9CMt4es3Cp0j6aO2a7l4g3f8gCnmA0nE7f5eCPHImF9O70
zMNxjNYJ7YBO9uu0Xfa2CfH6xHnpLLS94jKQjgw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:54 2025 by rpki-client