Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20393834.roa
File: 34352e34322e34362e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier: b2CU5jnkj+IEeUHIDE2XNhviKuGK+Xcn5dlKaZZBvLg=
Subject key identifier: C3:B1:3E:5A:04:67:61:21:55:A1:67:D8:DE:B9:1A:A5:96:10:15:01
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 7C50A744EECF5709225C3737F0AF0B7B5CEA4B95
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20393834.roa
Signing time: Sat 29 Mar 2025 10:28:26 +0000
ROA not before: Sat 29 Mar 2025 10:23:26 +0000
ROA not after: Sat 28 Mar 2026 10:28:26 +0000
asID: 984
IP address blocks: 45.42.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:50:a7:44:ee:cf:57:09:22:5c:37:37:f0:af:0b:7b:5c:ea:4b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Mar 29 10:23:26 2025 GMT
Not After : Mar 28 10:28:26 2026 GMT
Subject: CN=C3B13E5A0467612155A167D8DEB91AA596101501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:47:82:57:c7:b9:e4:de:52:12:60:92:39:
6f:a4:bf:eb:7f:38:be:02:65:b8:22:01:a6:08:02:
11:d6:40:2f:64:d1:cc:49:45:e2:4e:34:90:e3:45:
5d:3d:a9:df:b3:b7:ad:20:8c:7f:80:64:5c:3f:9a:
28:51:ae:61:ed:15:0d:54:11:c8:45:20:89:4c:2a:
e8:a7:f2:bd:bb:0d:b9:b2:72:02:1f:42:9d:5f:e7:
6a:d7:3f:cf:2c:a8:85:f4:c8:9e:73:d6:a1:9e:94:
9b:74:c8:c6:ac:6f:68:5e:bd:ef:e2:a3:db:67:05:
fd:fd:6c:d9:39:a7:26:bd:9d:79:d7:0c:55:be:f8:
06:96:87:e8:e4:8c:08:e7:68:fb:ea:d3:e4:7d:c5:
dc:6b:fc:ba:11:f8:39:24:58:76:5c:fb:83:1b:54:
15:54:ab:7a:2a:b2:56:3e:8a:00:5c:0d:7f:87:a7:
14:90:2e:32:b5:82:6f:37:ac:84:ef:98:55:8a:1e:
75:84:25:7e:68:9b:5b:49:3e:7c:c4:cf:d1:5a:7c:
7c:9e:54:39:dc:cf:31:0f:98:76:e1:11:47:69:d6:
9f:88:bd:7b:d7:40:06:00:cf:ba:94:f3:1b:d0:5c:
75:6f:8e:0a:d8:88:e0:6c:a8:43:dc:eb:ed:30:41:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:3E:5A:04:67:61:21:55:A1:67:D8:DE:B9:1A:A5:96:10:15:01
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fe:d0:a9:fb:02:6a:ad:b0:d1:31:9f:a1:53:10:76:78:0d:
fb:3b:f4:14:f4:76:a5:81:28:9c:0b:01:70:20:6e:f9:50:ba:
4a:6c:58:31:c3:b7:81:0a:c6:23:4b:e9:79:23:f4:c0:c8:4c:
aa:5a:50:82:34:ef:59:de:ff:f9:ca:5b:9e:f6:93:91:30:67:
af:c8:7b:fd:43:0b:af:2b:b5:eb:69:5e:ba:1b:6b:c3:ce:08:
67:3e:d6:0f:de:fb:13:3f:75:8e:e3:bb:47:6d:59:1e:c6:ef:
8d:b9:43:e4:13:25:39:46:ed:78:c5:a7:bd:44:44:9f:03:97:
98:bc:f6:44:19:a5:a4:b3:70:5e:b4:2b:3c:f8:0e:f9:49:6a:
c0:95:11:6e:a6:d8:30:2a:66:0c:49:4f:cd:f8:51:87:fd:75:
db:52:14:01:c0:75:46:04:24:79:57:86:67:40:9a:0d:03:e7:
4f:0e:ab:da:6f:14:b6:e8:5e:17:2d:f0:4b:b5:6f:69:75:d4:
2b:34:7d:9e:dc:f2:fa:e0:fc:03:54:38:f4:70:bd:bd:95:8c:
0a:71:43:b7:74:cd:ca:22:fa:75:b0:0a:5e:37:9c:6f:3b:be:
e8:fb:2f:81:33:a6:26:0f:ff:a6:fe:87:7a:54:20:a7:8e:4f:
6e:30:8b:1f
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUfFCnRO7PVwkiXDc38K8Le1zqS5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjUwMzI5MTAyMzI2WhcNMjYwMzI4MTAyODI2
WjAzMTEwLwYDVQQDEyhDM0IxM0U1QTA0Njc2MTIxNTVBMTY3RDhERUI5MUFBNTk2
MTAxNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2BHglfHueTe
UhJgkjlvpL/rfzi+AmW4IgGmCAIR1kAvZNHMSUXiTjSQ40VdPanfs7etIIx/gGRc
P5ooUa5h7RUNVBHIRSCJTCrop/K9uw25snICH0KdX+dq1z/PLKiF9Miec9ahnpSb
dMjGrG9oXr3v4qPbZwX9/WzZOacmvZ151wxVvvgGlofo5IwI52j76tPkfcXca/y6
Efg5JFh2XPuDG1QVVKt6KrJWPooAXA1/h6cUkC4ytYJvN6yE75hVih51hCV+aJtb
ST58xM/RWnx8nlQ53M8xD5h24RFHadafiL1710AGAM+6lPMb0Fx1b44K2IjgbKhD
3OvtMEGFBwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMOxPloEZ2EhVaFn2N65GqWW
EBUBMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM5MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0qLjANBgkqhkiG9w0BAQsFAAOCAQEAjv7Q
qfsCaq2w0TGfoVMQdngN+zv0FPR2pYEonAsBcCBu+VC6SmxYMcO3gQrGI0vpeSP0
wMhMqlpQgjTvWd7/+cpbnvaTkTBnr8h7/UMLryu162leuhtrw84IZz7WD977Ez91
juO7R21ZHsbvjblD5BMlOUbteMWnvUREnwOXmLz2RBmlpLNwXrQrPPgO+UlqwJUR
bqbYMCpmDElPzfhRh/1121IUAcB1RgQkeVeGZ0CaDQPnTw6r2m8UtuheFy3wS7Vv
aXXUKzR9ntzy+uD8A1Q49HC9vZWMCnFDt3TNyiL6dbAKXjecbzu+6PsvgTOmJg//
pv6HelQgp45PbjCLHw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:40:44 2025 by rpki-client