Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
File: 60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json)
Hash identifier: s3FrSS0VuGSiXcZbgTNMXAEBwTl+a6NbOIr8OoAG8QA=
Subject key identifier: 85:26:26:43:58:9D:B8:DA:47:AE:66:D7:CC:31:63:19:E3:4B:D4:0D
Certificate issuer: /CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Certificate serial: 010D0C9F432858491D7180E53F4C2D53BFE5C980
Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 395555
IP address blocks: 170.10.64.0/22 maxlen: 24
170.10.72.0/24 maxlen: 24
170.10.84.0/22 maxlen: 24
209.206.64.0/19 maxlen: 24
2604:4c40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:80:e5:3f:4c:2d:53:bf:e5:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=3506584e-9cf2-4c84-9feb-a3441624ce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:89:7c:bf:8a:a1:a2:12:7b:7d:a3:0d:c2:
52:3e:cd:ae:f6:0e:25:22:8e:f4:76:ed:3f:20:67:
e9:18:16:0a:8f:99:78:e8:b6:20:22:e0:72:89:32:
81:16:40:04:a0:13:ba:39:7c:1b:1e:d9:da:b3:25:
1b:1b:46:2f:7e:91:91:2e:ba:8a:55:bf:20:f4:15:
e5:e6:0e:1c:17:2b:70:ba:c1:4b:eb:90:6b:72:a2:
7b:a9:cb:09:94:65:fa:59:c2:15:d9:53:0a:54:62:
90:3f:c8:bb:84:17:af:23:e3:74:df:9a:85:06:62:
25:d0:b6:3a:f1:e3:c6:68:7a:d6:e9:45:19:c4:20:
35:17:47:a1:fc:91:9c:70:e5:4c:d7:56:29:a7:79:
2e:bc:c4:7e:5c:4b:7c:9f:1b:7e:1c:b3:b1:e1:bc:
cd:7b:dc:35:e6:7f:b6:c6:59:ce:36:2b:90:e9:00:
cb:e8:f4:e6:b7:e2:1c:be:1c:38:17:14:69:7b:35:
8e:05:88:b9:7f:ac:dc:e4:31:d3:e9:87:89:8d:53:
8d:67:23:bf:b7:38:ee:57:db:66:a1:ff:8f:73:5d:
2a:18:38:f4:5e:e0:db:ab:74:f6:c1:87:a4:fb:8e:
11:e0:7a:ad:1b:28:43:dc:f0:d6:3b:49:d0:18:e2:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:26:26:43:58:9D:B8:DA:47:AE:66:D7:CC:31:63:19:E3:4B:D4:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl
X509v3 Authority Key Identifier:
keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.64.0/22
170.10.72.0/24
170.10.84.0/22
209.206.64.0/19
IPv6:
2604:4c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:22:d6:df:e9:4d:c4:f9:e8:ca:66:24:a4:28:50:d2:5a:34:
07:40:da:76:4c:01:b8:76:6d:ec:90:ed:5d:69:98:2c:4d:07:
f6:31:7c:d5:d7:b7:cd:cb:55:8d:be:1d:7d:93:08:f9:06:69:
22:d7:80:46:1b:8d:9e:9d:26:c6:02:81:20:2a:2e:e5:9e:3f:
f3:6d:14:9c:a6:b6:f5:fb:1d:58:6a:34:03:e0:11:09:50:19:
16:52:0c:d8:82:1d:fd:4c:a7:6b:a1:92:7c:81:79:66:53:c9:
c2:8a:d8:82:de:79:30:a4:bf:cf:5b:e2:a6:11:95:8f:f6:b8:
b4:ff:71:33:0b:d2:51:82:a3:97:d6:ec:40:c3:b8:60:eb:33:
32:5b:10:8f:22:22:63:da:4f:da:87:7b:3d:50:38:a8:99:03:
f9:a5:40:9a:99:85:3d:18:fc:2c:e5:cd:77:28:24:9a:82:5d:
f0:f0:83:05:06:9d:bd:21:6a:d8:12:c2:dd:55:45:76:4d:b4:
90:0c:78:9e:94:9e:27:ae:7b:44:cd:5e:33:c2:e6:9c:73:c9:
3a:a5:ad:9c:94:ae:64:e0:43:44:91:2b:bc:71:92:1e:2e:6b:
7a:a3:d5:ff:53:22:93:a3:aa:b7:ad:d2:87:e3:76:f4:94:ce:
b4:ad:06:8a
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEkdcYDlP0wtU7/lyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE2NjNlMGQtOTYxYS00M2FjLThhMDEtZDQzZWZjMDFi
ZWEwMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzUwNjU4NGUtOWNmMi00Yzg0LTlmZWItYTM0NDE2MjRjZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN2JfL+KoaISe32jDcJSPs2u9g4lIo70du0/
IGfpGBYKj5l46LYgIuByiTKBFkAEoBO6OXwbHtnasyUbG0YvfpGRLrqKVb8g9BXl
5g4cFytwusFL65BrcqJ7qcsJlGX6WcIV2VMKVGKQP8i7hBevI+N035qFBmIl0LY6
8ePGaHrW6UUZxCA1F0eh/JGccOVM11Ypp3kuvMR+XEt8nxt+HLOx4bzNe9w15n+2
xlnONiuQ6QDL6PTmt+Icvhw4FxRpezWOBYi5f6zc5DHT6YeJjVONZyO/tzjuV9tm
of+Pc10qGDj0XuDbq3T2wYek+44R4HqtGyhD3PDWO0nQGOKJrQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFIUmJkNYnbjaR65m18wxYxnjS9QNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMTY2
M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNlZmMwMWJlYTAvNjBiMGVmY2EtMmZmMi0z
NWQzLWJjY2QtMGNkMGViMWZhMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzE2NjNlMGQtOTYxYS00M2FjLThh
MDEtZDQzZWZjMDFiZWEwLzMxNjYzZTBkLTk2MWEtNDNhYy04YTAxLWQ0M2VmYzAx
YmVhMC5jcmwwHwYDVR0jBBgwFoAUe/NZmB18WfRxUO/yfLqnmBTaQIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zMTY2M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNl
ZmMwMWJlYTAuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCqgpAAwQA
qgpIAwQCqgpUAwQF0c5AMA0EAgACMAcDBQAmBExAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAoi1t/pTcT5
6MpmJKQoUNJaNAdA2nZMAbh2beyQ7V1pmCxNB/YxfNXXt83LVY2+HX2TCPkGaSLX
gEYbjZ6dJsYCgSAqLuWeP/NtFJymtvX7HVhqNAPgEQlQGRZSDNiCHf1Mp2uhknyB
eWZTycKK2ILeeTCkv89b4qYRlY/2uLT/cTML0lGCo5fW7EDDuGDrMzJbEI8iImPa
T9qHez1QOKiZA/mlQJqZhT0Y/CzlzXcoJJqCXfDwgwUGnb0hatgSwt1VRXZNtJAM
eJ6Unieue0TNXjPC5pxzyTqlrZyUrmTgQ0SRK7xxkh4ua3qj1f9TIpOjqret0ofj
dvSUzrStBoo=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net