Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
File: 277b2757-57cb-3198-b437-d291ac9f9a85.roa (raw, json)
Hash identifier: FwKNF2KFsvN1hC00VmEj5E5k+U1D33bKooXQfe93GEw=
Subject key identifier: 8A:33:E1:D4:AA:7B:4C:13:64:81:94:E3:86:0A:B0:E6:0E:88:DA:4C
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F432858490881559B38D2F0114C2C4800
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 45.42.136.0/24 maxlen: 24
45.42.137.0/24 maxlen: 24
45.42.138.0/24 maxlen: 24
45.42.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:55:9b:38:d2:f0:11:4c:2c:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=7d4eef84-d30d-4624-ad49-203da23bcb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:b6:c1:6e:ff:5b:f4:01:e4:3c:38:73:5e:
3a:d0:55:d1:cb:1e:21:47:cc:62:c0:73:30:86:45:
3c:a5:f3:32:95:02:9b:29:fd:6e:07:df:73:a4:bd:
93:b2:e6:be:49:46:f7:64:1c:33:4f:1f:04:1a:9e:
d8:fe:1b:73:26:11:96:f1:1a:47:95:39:bf:1b:39:
bb:56:74:41:55:c4:08:9c:c6:53:28:c7:0e:47:83:
1d:7a:8c:46:b0:12:ac:b7:eb:a8:cf:22:21:d0:e2:
61:bb:6b:43:6b:ef:cc:d9:67:96:cf:b4:8f:69:19:
9a:34:a3:54:d5:ea:be:89:25:bb:07:62:91:0b:8d:
b2:97:58:e2:a2:fb:de:96:35:56:a3:b3:e0:07:5e:
4c:7d:89:1f:65:5e:3a:aa:1a:04:ab:e3:ae:1a:59:
fa:51:ab:b7:9b:93:79:c4:02:d2:23:6c:36:1d:6a:
eb:91:84:b7:83:27:fb:1f:c5:f2:d1:4e:3b:a5:09:
bb:14:c7:e4:6c:33:71:65:20:96:54:21:e2:e9:b6:
2e:59:e0:10:b3:19:47:ed:36:90:5e:a1:82:e8:8e:
16:f8:ce:af:5e:86:fa:34:50:e2:e8:62:ad:7c:95:
29:ee:67:2e:20:0c:11:41:09:3a:e1:5d:91:06:0a:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:E1:D4:AA:7B:4C:13:64:81:94:E3:86:0A:B0:E6:0E:88:DA:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c8:4a:c9:02:72:95:65:e0:01:0a:58:09:81:e2:eb:d1:ea:
ea:a5:81:30:9b:a5:1e:ec:29:a6:65:2d:54:ad:5c:53:08:d8:
dc:59:8b:86:3e:5a:f3:37:01:6a:5a:db:2f:58:2f:fe:d5:e2:
ba:89:43:5d:a8:3a:59:bc:09:d3:3d:0e:3d:6d:db:aa:16:06:
70:ac:86:85:67:5a:cb:6c:06:8d:38:ee:cd:6b:1c:3f:bd:39:
d5:b3:49:9e:50:65:4f:ea:e9:76:e6:b6:77:2a:86:2a:db:5e:
19:cf:36:30:73:e9:fc:49:e5:ca:b7:46:8a:a6:e9:93:61:be:
fc:54:dc:ac:f7:ce:db:c7:2a:22:48:0a:45:b3:b2:78:53:e6:
cc:b3:78:1b:56:d2:9a:1a:0b:c5:5b:29:55:04:fe:ef:da:12:
85:c1:fd:e7:33:5b:8a:e0:7f:5a:a7:19:05:e0:fa:28:2a:5b:
ac:df:fc:fd:e2:60:3b:41:3d:9a:f0:1c:a5:29:3e:d6:ba:c3:
c5:c6:e9:a0:be:11:27:50:f6:af:84:c5:1a:21:ac:40:01:27:
a8:fc:2b:37:68:ab:23:99:34:c4:48:db:26:71:65:71:48:80:
00:da:a1:21:07:77:f2:e1:e3:d2:de:98:9a:eb:9a:67:70:f1:
6e:b6:e6:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgVWbONLwEUwsSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh
OTY5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
N2Q0ZWVmODQtZDMwZC00NjI0LWFkNDktMjAzZGEyM2JjYjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXO2wW7/W/QB5Dw4c1460FXRyx4hR8xiwHMw
hkU8pfMylQKbKf1uB99zpL2Tsua+SUb3ZBwzTx8EGp7Y/htzJhGW8RpHlTm/Gzm7
VnRBVcQInMZTKMcOR4MdeoxGsBKst+uozyIh0OJhu2tDa+/M2WeWz7SPaRmaNKNU
1eq+iSW7B2KRC42yl1jiovveljVWo7PgB15MfYkfZV46qhoEq+OuGln6Uau3m5N5
xALSI2w2HWrrkYS3gyf7H8Xy0U47pQm7FMfkbDNxZSCWVCHi6bYuWeAQsxlH7TaQ
XqGC6I4W+M6vXob6NFDi6GKtfJUp7mcuIAwRQQk64V2RBgosTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoz4dSqe0wTZIGU44YKsOYOiNpMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj
ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvMjc3YjI3NTctNTdjYi0z
MTk4LWI0MzctZDI5MWFjOWY5YTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4
ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj
YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2
N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSqIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPISskCcpVl4AEKWAmB4uvR6uqlgTCbpR7sKaZlLVStXFMI2NxZi4Y+
WvM3AWpa2y9YL/7V4rqJQ12oOlm8CdM9Dj1t26oWBnCshoVnWstsBo047s1rHD+9
OdWzSZ5QZU/q6XbmtncqhirbXhnPNjBz6fxJ5cq3Roqm6ZNhvvxU3Kz3ztvHKiJI
CkWzsnhT5syzeBtW0poaC8VbKVUE/u/aEoXB/eczW4rgf1qnGQXg+igqW6zf/P3i
YDtBPZrwHKUpPta6w8XG6aC+ESdQ9q+ExRohrEABJ6j8KzdoqyOZNMRI2yZxZXFI
gADaoSEHd/Lh49LemJrrmmdw8W625kU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:39 2025 by rpki-client