Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203231373433.roa
File: 34352e34322e34372e302f32342d3234203d3e203231373433.roa (raw, json)
Hash identifier: 9QwLDjgJe0OSWj3QrFcz0cv8eq1MkqoJ0YBUbivtTFA=
Subject key identifier: 0A:A2:29:2A:37:80:06:A7:34:D3:C9:75:0B:52:3F:32:33:6C:0F:09
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 50A70569DD7774B76D3A9715D32226B77E892867
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203231373433.roa
Signing time: Wed 20 Nov 2024 11:49:21 +0000
ROA not before: Wed 20 Nov 2024 11:44:21 +0000
ROA not after: Wed 19 Nov 2025 11:49:21 +0000
asID: 21743
IP address blocks: 45.42.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a7:05:69:dd:77:74:b7:6d:3a:97:15:d3:22:26:b7:7e:89:28:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Nov 20 11:44:21 2024 GMT
Not After : Nov 19 11:49:21 2025 GMT
Subject: CN=0AA2292A378006A734D3C9750B523F32336C0F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:f9:a3:23:4e:04:10:6f:c7:c4:3a:fe:61:
e2:d1:8d:d3:44:9f:ef:6f:e0:33:a3:35:3e:82:e7:
f2:09:52:fc:36:ad:70:75:a3:bd:92:c8:26:18:0f:
31:2e:df:8d:25:81:5c:42:28:ef:97:7e:89:bf:11:
9d:a4:42:b8:e4:ee:15:5c:38:64:75:c8:96:6a:49:
2e:4d:a0:7e:16:89:7f:20:cb:73:b6:64:65:44:96:
e6:cd:74:c6:b3:73:40:aa:dd:b7:fb:6d:1d:6a:70:
79:12:38:be:19:b1:c2:86:54:7d:9a:86:dc:7a:fa:
38:17:9d:9e:17:39:4d:8f:c6:d9:3b:5a:ec:e8:2f:
a5:85:fd:d8:a5:9c:96:83:a0:c0:dc:d5:3a:a5:e1:
05:04:2f:1c:f8:a9:78:73:1a:07:30:d9:1f:0c:b6:
49:40:fd:a6:3f:83:c0:ee:43:2d:29:2a:f2:21:2a:
f9:28:7a:3b:44:db:0c:2c:bd:de:0b:32:4f:84:3b:
b3:38:3a:0a:50:71:4d:d2:dc:c2:ac:eb:f7:70:35:
82:cf:39:d7:1b:e9:78:c7:04:57:a2:e8:5a:20:c5:
48:b5:87:c5:bd:6b:12:49:fd:e9:7a:ca:bf:71:21:
56:69:9e:2e:b0:36:ff:6e:76:e7:ff:90:f4:10:ea:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:29:2A:37:80:06:A7:34:D3:C9:75:0B:52:3F:32:33:6C:0F:09
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203231373433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2a:57:6d:b7:59:59:b8:dc:8d:2c:25:d2:0f:f7:17:42:d7:
9b:0c:c1:02:61:d2:25:50:bf:d1:62:b2:da:7d:3f:45:f3:0c:
69:d6:d0:3a:50:fb:9e:c1:43:7a:91:46:34:b5:cd:47:0b:1f:
1a:01:6e:d4:9c:ab:bd:7b:24:c3:11:61:30:50:82:47:93:2a:
43:fa:4c:51:cf:e2:c7:5f:e1:c3:fd:ec:c6:5f:85:f0:bb:b8:
b1:40:90:58:29:63:68:0c:11:d2:2c:f8:63:71:ed:7c:39:6e:
35:02:19:f4:7b:96:18:04:74:00:bd:98:a3:82:19:c4:35:d1:
7f:2a:ee:1d:90:a8:41:20:27:00:92:cf:7d:e0:fd:9b:f7:36:
58:f4:f2:1c:c3:ec:38:2b:0c:a9:16:58:0e:eb:d7:45:3a:93:
d6:4c:0c:fc:4e:8e:85:a6:38:10:e9:57:a9:bc:34:cc:b2:c7:
e9:bb:6b:64:70:9d:0a:07:e1:7e:eb:68:dc:b8:58:35:02:ac:
0d:b8:66:5a:14:11:81:ed:c7:16:27:fb:4f:c0:a9:40:f2:cd:
b1:85:96:e0:89:1a:e6:82:a4:d0:bc:85:52:d2:48:cf:d7:8e:
9f:83:21:08:cf:4d:7d:95:83:d6:6a:0b:bf:09:d8:64:6c:d4:
46:98:f7:c2
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUUKcFad13dLdtOpcV0yImt36JKGcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjQxMTIwMTE0NDIxWhcNMjUxMTE5MTE0OTIx
WjAzMTEwLwYDVQQDEygwQUEyMjkyQTM3ODAwNkE3MzREM0M5NzUwQjUyM0YzMjMz
NkMwRjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18v5oyNOBBBv
x8Q6/mHi0Y3TRJ/vb+AzozU+gufyCVL8Nq1wdaO9ksgmGA8xLt+NJYFcQijvl36J
vxGdpEK45O4VXDhkdciWakkuTaB+Fol/IMtztmRlRJbmzXTGs3NAqt23+20danB5
Eji+GbHChlR9mobcevo4F52eFzlNj8bZO1rs6C+lhf3YpZyWg6DA3NU6peEFBC8c
+Kl4cxoHMNkfDLZJQP2mP4PA7kMtKSryISr5KHo7RNsMLL3eCzJPhDuzODoKUHFN
0tzCrOv3cDWCzznXG+l4xwRXouhaIMVItYfFvWsSSf3pesq/cSFWaZ4usDb/bnbn
/5D0EOpshwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAqiKSo3gAanNNPJdQtSPzIz
bA8JMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMyMzEzNzM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKi8wDQYJKoZIhvcNAQELBQADggEB
AKEqV223WVm43I0sJdIP9xdC15sMwQJh0iVQv9Fistp9P0XzDGnW0DpQ+57BQ3qR
RjS1zUcLHxoBbtScq717JMMRYTBQgkeTKkP6TFHP4sdf4cP97MZfhfC7uLFAkFgp
Y2gMEdIs+GNx7Xw5bjUCGfR7lhgEdAC9mKOCGcQ10X8q7h2QqEEgJwCSz33g/Zv3
Nlj08hzD7DgrDKkWWA7r10U6k9ZMDPxOjoWmOBDpV6m8NMyyx+m7a2RwnQoH4X7r
aNy4WDUCrA24ZloUEYHtxxYn+0/AqUDyzbGFluCJGuaCpNC8hVLSSM/Xjp+DIQjP
TX2Vg9ZqC78J2GRs1EaY98I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:55 2025 by rpki-client