Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eda55288-9e58-30be-b102-dbf8833220b9.roa
File: eda55288-9e58-30be-b102-dbf8833220b9.roa (raw, json)
Hash identifier: NjDsogR2ozuHCfGjm5apNh0cXAIRNDZJIUj1WXkBHLs=
Subject key identifier: 8E:D4:9A:88:D7:EC:1A:7C:FD:80:F6:B3:54:89:4E:6B:25:EF:39:A3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2C18E0C34ED696DB27C8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eda55288-9e58-30be-b102-dbf8833220b9.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 71.245.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2c:18:e0:c3:4e:d6:96:db:27:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=f91bdb7f-5c3f-4d57-b3a7-3dd29511cbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:8c:1a:67:92:d4:45:7a:c1:77:d2:85:00:
5e:3d:ae:4f:77:52:f3:57:f5:43:15:89:2f:26:f2:
5b:c6:d8:e7:63:ae:49:e0:20:8e:e2:7b:24:76:4f:
25:16:51:a5:91:41:a2:b0:55:6d:a6:01:22:90:80:
df:be:48:75:34:6d:9c:90:af:92:32:0d:da:3b:5d:
e9:74:c8:94:8b:83:29:75:7c:f8:aa:9b:28:97:7f:
41:53:54:54:3f:9c:da:d2:e2:e1:43:f5:e5:38:dc:
22:da:42:f2:b9:55:18:e6:06:32:1a:a3:41:64:c7:
95:34:02:06:44:5f:99:2c:35:ec:5e:22:64:ae:38:
b9:2a:ca:83:5c:00:49:b2:60:53:81:2d:20:09:b7:
cb:27:4f:f9:07:62:77:f6:b9:e7:32:a5:5e:62:76:
a4:eb:5e:81:7e:4b:5c:39:78:f5:ba:7e:be:b7:8f:
41:be:c9:e1:76:c0:bf:9a:31:5a:6e:26:2e:d7:75:
78:40:11:6c:2f:65:c2:b6:40:f9:10:b9:a6:ab:ba:
f4:57:c9:f9:2e:c1:5a:ed:be:a5:d0:0c:30:30:dc:
5c:54:15:1c:f6:2f:a2:1b:68:a3:02:c8:9a:16:03:
2a:2d:b9:a3:04:ad:0e:a4:2b:3e:73:3f:c1:3c:22:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:9A:88:D7:EC:1A:7C:FD:80:F6:B3:54:89:4E:6B:25:EF:39:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eda55288-9e58-30be-b102-dbf8833220b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.245.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:ba:41:5d:e4:51:11:3b:9d:6a:a6:d5:8b:be:50:db:3c:e4:
99:3b:1c:d4:c1:0f:c8:7a:a1:74:05:2c:0c:53:f6:f7:3d:48:
b4:c9:78:da:92:97:db:72:b3:cf:58:9f:72:0e:ac:53:de:9d:
c1:59:03:63:43:3b:9c:dd:88:6d:e7:f8:32:64:a0:4c:60:70:
dc:2b:50:4a:33:84:c2:91:77:09:5f:ce:e3:bf:72:96:38:2f:
99:a7:3d:e8:08:b1:b1:47:e9:f6:23:ec:ad:a3:1c:13:b6:40:
2c:8a:95:fe:29:c6:8e:4d:14:de:19:89:da:56:99:34:d9:6b:
8d:b3:91:8d:f5:28:2e:26:2c:b0:0f:bb:d0:cd:16:97:9d:0f:
7f:07:35:d2:ff:1a:75:50:c7:2e:28:3d:58:e3:58:0e:51:7c:
87:8a:50:9d:e1:4f:c4:ac:ba:c6:f6:d0:e3:18:98:92:65:35:
04:9e:0e:7c:3e:2e:3c:9e:e3:0e:a7:32:04:93:9f:0d:c2:54:
42:7c:af:8b:23:36:38:b0:bc:0a:15:33:40:c0:40:4d:af:ea:
57:e8:ef:53:5b:8b:2b:c6:33:4d:3b:4d:fb:d7:10:f0:8f:61:
df:51:c6:d7:56:3e:02:a7:5f:9e:d7:79:b8:8e:a0:e7:84:92:
ea:01:c4:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCwY4MNO1pbbJ8gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjkxYmRiN2YtNWMzZi00ZDU3LWIzYTctM2RkMjk1MTFjYmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YeMGmeS1EV6wXfShQBePa5Pd1LzV/VDFYkv
JvJbxtjnY65J4CCO4nskdk8lFlGlkUGisFVtpgEikIDfvkh1NG2ckK+SMg3aO13p
dMiUi4MpdXz4qpsol39BU1RUP5za0uLhQ/XlONwi2kLyuVUY5gYyGqNBZMeVNAIG
RF+ZLDXsXiJkrji5KsqDXABJsmBTgS0gCbfLJ0/5B2J39rnnMqVeYnak616Bfktc
OXj1un6+t49BvsnhdsC/mjFabiYu13V4QBFsL2XCtkD5ELmmq7r0V8n5LsFa7b6l
0AwwMNxcVBUc9i+iG2ijAsiaFgMqLbmjBK0OpCs+cz/BPCKf/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7UmojX7Bp8/YD2s1SJTmsl7zmjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWRhNTUyODgtOWU1OC0z
MGJlLWIxMDItZGJmODgzMzIyMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR/UAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK66QV3kURE7nWqm1Yu+UNs85Jk7HNTBD8h6oXQFLAxT9vc9SLTJeNqS
l9tys89Yn3IOrFPencFZA2NDO5zdiG3n+DJkoExgcNwrUEozhMKRdwlfzuO/cpY4
L5mnPegIsbFH6fYj7K2jHBO2QCyKlf4pxo5NFN4ZidpWmTTZa42zkY31KC4mLLAP
u9DNFpedD38HNdL/GnVQxy4oPVjjWA5RfIeKUJ3hT8Ssusb20OMYmJJlNQSeDnw+
Ljye4w6nMgSTnw3CVEJ8r4sjNjiwvAoVM0DAQE2v6lfo71NbiyvGM007TfvXEPCP
Yd9RxtdWPgKnX57XebiOoOeEkuoBxJs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:40 2025 by rpki-client