Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa
File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json)
Hash identifier: FY/FwViYlcWqyyhQbhJO0WBa8ZGzTif+A4wr+qyfbVA=
Subject key identifier: 16:83:39:88:02:8A:99:85:BD:48:67:3A:04:3F:4F:A8:E4:36:49:50
Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Certificate serial: 010D0C9F432858495C243A7BCD75A4E7B5DF4000
Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 13629
IP address blocks: 208.94.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:3a:7b:cd:75:a4:e7:b5:df:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=eee9d7aa-5f50-453c-a09c-25a990ecfabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:f3:1d:40:32:94:04:a6:a4:9c:41:c5:8f:
d9:bb:f9:69:5a:9b:fd:30:4e:c8:7f:a2:b3:53:28:
e0:e7:f8:c7:fd:40:84:e1:d8:37:c9:ad:b7:9c:7e:
96:4e:6f:25:91:4a:0d:56:9b:b9:4b:8a:33:69:e9:
4a:6b:73:7a:91:02:9d:67:28:91:64:d4:ee:6f:55:
4e:0e:d7:26:b3:2d:b7:bf:e7:28:ad:84:4e:ae:ff:
0d:b1:8e:b0:69:40:c7:c3:7b:8c:2d:60:55:42:2a:
f6:1d:de:8d:df:25:0a:0d:44:fa:07:67:c9:b5:83:
f2:23:11:48:21:5d:a1:6c:e4:43:e0:c5:0d:de:01:
c8:ea:31:8a:64:eb:57:33:10:d5:2c:ec:70:e5:e2:
6d:33:b7:b2:af:9c:43:00:69:dd:c3:e0:bd:2c:04:
f2:96:73:e7:4a:18:46:6f:bc:6a:6c:96:02:90:96:
fe:a3:97:0d:3f:0e:76:3e:80:08:f4:c6:99:a7:f5:
b4:2f:f3:2a:5f:c4:1f:15:d9:66:99:0c:77:e1:d0:
b2:2c:f4:41:f9:9f:f1:0e:be:a4:41:f1:57:18:da:
40:f0:82:8d:5e:7c:24:0f:a6:b5:ae:6f:c5:de:48:
26:58:58:42:e6:de:42:76:6b:36:1f:c9:c9:a6:ba:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:39:88:02:8A:99:85:BD:48:67:3A:04:3F:4F:A8:E4:36:49:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl
X509v3 Authority Key Identifier:
keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:29:1e:27:14:be:62:48:20:96:ff:47:a9:82:7d:88:d9:36:
1f:7e:d3:c3:c8:e7:77:42:60:ec:33:b0:85:0a:c2:8c:a3:bf:
78:ae:71:cf:ba:86:e3:cb:8b:12:97:7b:45:c9:ae:4e:6f:ab:
f1:81:fe:aa:29:2b:85:f1:64:00:d1:bf:78:22:ee:7d:2d:73:
92:d6:0c:67:6c:d8:06:50:af:d3:42:ee:f0:f2:0d:4e:f3:87:
3c:9c:dd:7f:32:02:c1:f9:cf:d3:7f:e8:90:2f:d0:cb:b1:b5:
59:b0:56:32:79:96:01:b8:64:10:cd:d2:e2:d6:41:03:f1:da:
8b:67:14:b0:02:90:7d:cc:80:f1:69:8f:b4:bf:d6:9b:9a:5c:
77:33:16:36:81:59:15:bf:11:25:8a:71:43:e9:85:8d:d8:4b:
6d:d1:87:e7:fa:ba:b2:09:42:9e:5f:43:de:8f:3e:91:bd:14:
de:64:9a:96:65:9a:e3:85:57:ed:77:2a:af:72:8b:6f:10:4c:
0c:ec:9e:c0:08:4b:16:e8:ba:04:35:3f:a1:29:81:0b:3e:20:
6c:89:7e:6c:ea:31:0a:a9:7b:e7:ed:b5:ef:52:c8:b1:4b:bc:
43:19:22:a4:99:de:9a:8a:5e:d9:77:11:73:64:9b:f0:65:e4:
60:17:61:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDp7zXWk57XfQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3
YTkzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZWVlOWQ3YWEtNWY1MC00NTNjLWEwOWMtMjVhOTkwZWNmYWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIrzHUAylASmpJxBxY/Zu/lpWpv9ME7If6Kz
Uyjg5/jH/UCE4dg3ya23nH6WTm8lkUoNVpu5S4ozaelKa3N6kQKdZyiRZNTub1VO
Dtcmsy23v+corYROrv8NsY6waUDHw3uMLWBVQir2Hd6N3yUKDUT6B2fJtYPyIxFI
IV2hbORD4MUN3gHI6jGKZOtXMxDVLOxw5eJtM7eyr5xDAGndw+C9LATylnPnShhG
b7xqbJYCkJb+o5cNPw52PoAI9MaZp/W0L/MqX8QfFdlmmQx34dCyLPRB+Z/xDr6k
QfFXGNpA8IKNXnwkD6a1rm/F3kgmWFhC5t5Cdms2H8nJprrMkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaDOYgCipmFvUhnOgQ/T6jkNklQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4
NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z
NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx
YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4
N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk
ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHApHicUvmJIIJb/R6mCfYjZNh9+08PI53dCYOwzsIUKwoyjv3iucc+6
huPLixKXe0XJrk5vq/GB/qopK4XxZADRv3gi7n0tc5LWDGds2AZQr9NC7vDyDU7z
hzyc3X8yAsH5z9N/6JAv0MuxtVmwVjJ5lgG4ZBDN0uLWQQPx2otnFLACkH3MgPFp
j7S/1puaXHczFjaBWRW/ESWKcUPphY3YS23Rh+f6urIJQp5fQ96PPpG9FN5kmpZl
muOFV+13Kq9yi28QTAzsnsAISxbougQ1P6EpgQs+IGyJfmzqMQqpe+ftte9SyLFL
vEMZIqSZ3pqKXtl3EXNkm/Bl5GAXYcA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:38 2025 by rpki-client on console.sobornost.net