Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa
File: b1cee1c2-7b45-36d1-958e-f8797153afd7.roa (raw, json)
Hash identifier: rMHI1LMZysQG+l8J/hB6kUx2ZCEXXj+md/79QOCc11U=
Subject key identifier: D7:24:DD:9B:7C:55:9B:AC:A5:32:E1:68:F7:F4:B0:8C:A9:BA:0D:4A
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584908EB8EE21D83DE29C77CDA11
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa
Signing time: Fri 28 Feb 2025 17:34:55 +0000
ROA not before: Fri 28 Feb 2025 17:34:55 +0000
ROA not after: Thu 29 May 2025 16:34:55 +0000
asID: 14618
IP address blocks: 170.85.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:eb:8e:e2:1d:83:de:29:c7:7c:da:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Feb 28 17:34:55 2025 GMT
Not After : May 29 16:34:55 2025 GMT
Subject: CN=f0b105ec-bda9-4535-8263-27038c807396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:eb:d7:16:28:23:21:af:43:73:e3:92:07:
09:24:5c:50:8c:64:94:52:35:fe:e3:e7:46:00:24:
a6:ef:51:e1:c4:8d:65:e8:e5:d1:e9:3c:39:cb:cb:
e9:f0:71:4b:67:04:d2:e6:35:8c:ca:b4:e9:1a:66:
5b:88:8d:78:c8:72:78:65:e7:74:3a:2d:d6:d1:0c:
59:d9:1b:01:92:ec:aa:a1:ef:c0:51:6d:a7:3d:0e:
a6:81:69:c7:5c:14:ec:75:20:37:11:db:0f:84:b3:
24:87:17:4c:d7:6c:5d:3d:2f:f4:b3:a8:56:51:a3:
42:34:a5:f1:b1:86:37:b9:51:88:33:e6:4a:80:07:
76:51:ae:ad:7b:ce:e7:d8:bc:75:25:08:0b:1f:48:
df:9b:0b:e9:29:ab:68:ae:a8:72:a1:0d:6a:81:11:
ab:03:db:45:ea:c2:b6:79:b3:8d:80:a7:44:25:e4:
65:bf:b5:17:b3:0d:1b:5c:b2:da:20:22:1b:bb:bb:
1e:dc:8b:d1:d4:76:32:8a:b7:ab:5f:34:2f:05:d9:
84:f6:e2:95:7c:26:eb:fb:f4:af:86:3c:4a:c0:d5:
90:71:60:e2:4d:fc:34:37:ad:0b:6d:c1:fc:50:c4:
6a:cd:e0:a1:d5:da:4f:b1:e7:05:e4:aa:ed:76:e3:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:DD:9B:7C:55:9B:AC:A5:32:E1:68:F7:F4:B0:8C:A9:BA:0D:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1cee1c2-7b45-36d1-958e-f8797153afd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d5:c3:39:f5:b3:53:e3:09:88:14:4d:34:62:a2:7a:e2:0e:
4e:c5:ff:57:75:08:19:11:04:f3:3c:01:c9:8a:14:76:fc:13:
de:1f:ae:5e:5c:44:75:40:63:13:29:c0:b2:8d:1f:2a:3f:6e:
15:43:34:47:54:e9:e2:17:2a:5c:99:64:6a:d6:d3:b2:c9:02:
05:d2:30:60:08:99:e0:35:3c:f4:ff:6e:a1:e5:54:de:2a:b9:
4a:40:86:5f:a8:5e:e2:f7:96:51:97:f5:6c:dd:70:e7:78:b0:
b7:58:26:06:ee:db:ed:9a:34:47:1f:f4:13:96:57:10:3b:aa:
2b:6d:6b:79:4a:13:bb:fe:28:72:45:f9:8a:20:da:da:a6:29:
43:19:5c:86:bb:7e:a9:55:8b:fd:40:20:d9:fc:11:d6:bf:97:
9c:ec:0e:72:80:fd:6b:6c:45:82:ef:c0:ab:83:51:42:cc:0e:
21:05:26:60:fc:48:f2:e7:29:cc:93:d6:7e:a8:aa:e8:24:4b:
99:7b:27:0a:63:d3:40:63:a0:a1:a1:75:dc:c0:1d:a6:36:56:
d6:f8:4d:c7:13:a0:07:1c:31:79:ed:71:1f:73:a5:22:6f:81:
8c:db:1d:2b:9a:52:90:c5:c5:4d:a3:5d:76:f7:43:29:00:9e:
fc:e6:9b:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkI647iHYPeKcd82hEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDIyODE3MzQ1NVoXDTI1MDUyOTE2MzQ1NVowLzEtMCsGA1UEAxMk
ZjBiMTA1ZWMtYmRhOS00NTM1LTgyNjMtMjcwMzhjODA3Mzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzfr1xYoIyGvQ3PjkgcJJFxQjGSUUjX+4+dG
ACSm71HhxI1l6OXR6Tw5y8vp8HFLZwTS5jWMyrTpGmZbiI14yHJ4Zed0Oi3W0QxZ
2RsBkuyqoe/AUW2nPQ6mgWnHXBTsdSA3EdsPhLMkhxdM12xdPS/0s6hWUaNCNKXx
sYY3uVGIM+ZKgAd2Ua6te87n2Lx1JQgLH0jfmwvpKatorqhyoQ1qgRGrA9tF6sK2
ebONgKdEJeRlv7UXsw0bXLLaICIbu7se3IvR1HYyirerXzQvBdmE9uKVfCbr+/Sv
hjxKwNWQcWDiTfw0N60LbcH8UMRqzeCh1dpPsecF5KrtduPvHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNck3Zt8VZuspTLhaPf0sIypug1KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjFjZWUxYzItN2I0NS0z
NmQxLTk1OGUtZjg3OTcxNTNhZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPVwzn1s1PjCYgUTTRionriDk7F/1d1CBkRBPM8AcmKFHb8E94frl5c
RHVAYxMpwLKNHyo/bhVDNEdU6eIXKlyZZGrW07LJAgXSMGAImeA1PPT/bqHlVN4q
uUpAhl+oXuL3llGX9WzdcOd4sLdYJgbu2+2aNEcf9BOWVxA7qitta3lKE7v+KHJF
+Yog2tqmKUMZXIa7fqlVi/1AINn8Eda/l5zsDnKA/WtsRYLvwKuDUULMDiEFJmD8
SPLnKcyT1n6oqugkS5l7Jwpj00BjoKGhddzAHaY2Vtb4TccToAccMXntcR9zpSJv
gYzbHSuaUpDFxU2jXXb3QykAnvzmm8s=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:41 2025 by rpki-client on console.sobornost.net