Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/20c412b1-5090-326d-952e-b44619b45586.roa
File: 20c412b1-5090-326d-952e-b44619b45586.roa (raw, json)
Hash identifier: nHoYVh6M3p6i6SUyy5tT0U0NCB1eq36wM3xIQ98qra0=
Subject key identifier: F9:B4:2B:04:81:F8:8F:B0:6E:47:4E:E3:F4:ED:D9:B8:E6:E5:09:8B
Certificate issuer: /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Certificate serial: 010D0C9F43285848064504DAE2536CC13F675A78
Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/20c412b1-5090-326d-952e-b44619b45586.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 976
IP address blocks: 45.59.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:04:da:e2:53:6c:c1:3f:67:5a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=703facc5-39a4-412f-9662-a28253a6d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:fd:cb:36:13:f1:da:d7:16:62:6d:2a:9e:
71:88:dd:02:85:a6:27:7e:3d:af:04:01:33:ca:08:
79:d8:56:fa:9d:c4:d4:95:20:db:00:18:6c:98:ac:
3e:d1:28:cf:6b:8a:64:0d:d2:d3:26:bb:03:5c:64:
54:f8:0d:78:a3:48:ec:69:e6:ed:6a:fe:44:f1:23:
4b:03:fc:5f:55:29:95:fe:d5:67:25:b4:9c:95:b9:
df:0a:2b:fa:8b:3b:0e:1e:65:8e:a3:ba:54:1c:25:
8b:b5:a8:af:2e:8c:7e:86:0f:9f:38:3e:f0:46:76:
ae:4b:d9:ce:cf:f1:64:e7:76:95:1b:8f:29:69:8e:
be:3b:d4:5c:b5:b5:16:86:35:04:a1:40:53:dc:74:
e7:6e:89:52:7b:ba:4c:0f:c2:18:10:2f:94:be:50:
f1:04:93:68:dc:3d:f2:fc:dd:90:57:05:08:e0:1c:
dc:16:45:ed:61:61:e6:72:ef:d1:87:66:41:f9:a3:
65:07:45:14:09:2a:cd:09:97:62:04:23:17:9a:4f:
30:a9:dc:28:a4:f2:ae:1a:c1:94:20:fa:9b:df:25:
a7:89:c2:bc:2a:a1:f4:37:69:4b:73:a0:4f:8f:fb:
97:e4:ed:be:a0:93:e3:c3:ff:9e:fc:af:99:24:60:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:2B:04:81:F8:8F:B0:6E:47:4E:E3:F4:ED:D9:B8:E6:E5:09:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/20c412b1-5090-326d-952e-b44619b45586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl
X509v3 Authority Key Identifier:
keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:9e:9d:00:41:02:be:6a:26:a4:e2:9e:39:60:89:2e:f9:26:
55:64:86:09:f7:c8:3c:72:21:f4:ea:ed:aa:75:60:85:21:d4:
1a:25:ce:f1:67:48:06:bc:10:31:61:77:ee:a1:5f:40:b6:c6:
ce:a3:0a:d2:36:f5:f6:08:ab:c3:00:22:16:92:4c:cc:65:40:
b2:53:1a:8e:b7:66:5b:d5:40:d1:3a:5b:66:2a:30:c2:05:71:
86:ce:52:41:e5:5e:68:d5:b3:d9:4e:21:8f:da:62:b5:3d:ec:
ec:2e:cc:61:e4:c9:bb:18:28:d8:43:61:3e:23:42:d7:37:d4:
c4:54:aa:1c:9c:1e:f0:61:0e:f5:48:48:54:ce:61:16:56:8f:
3d:b5:e9:15:11:5d:da:3d:cd:1f:73:19:b2:a3:18:49:b6:5a:
02:c6:5c:17:58:ac:f4:21:af:08:56:dd:61:26:da:bc:10:7e:
48:84:42:15:82:b1:a1:3e:a8:30:75:2f:c2:37:2c:50:cb:cb:
58:1c:11:c1:6f:16:20:db:e5:4d:9f:33:74:f5:0f:d3:78:a9:
19:60:17:61:f5:46:8f:d3:92:7a:59:fd:a2:af:3e:95:be:63:
d0:e9:02:68:f3:9d:7d:c0:39:20:14:42:1b:2c:52:02:d8:2c:
5b:04:e2:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQTa4lNswT9nWngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkzOWVlN2UtODFiMi00NmNmLTlhNDMtMzY0N2ZmMTMy
YTA2MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NzAzZmFjYzUtMzlhNC00MTJmLTk2NjItYTI4MjUzYTZkNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4v9yzYT8drXFmJtKp5xiN0ChaYnfj2vBAEz
ygh52Fb6ncTUlSDbABhsmKw+0SjPa4pkDdLTJrsDXGRU+A14o0jsaebtav5E8SNL
A/xfVSmV/tVnJbSclbnfCiv6izsOHmWOo7pUHCWLtaivLox+hg+fOD7wRnauS9nO
z/Fk53aVG48paY6+O9RctbUWhjUEoUBT3HTnbolSe7pMD8IYEC+UvlDxBJNo3D3y
/N2QVwUI4BzcFkXtYWHmcu/Rh2ZB+aNlB0UUCSrNCZdiBCMXmk8wqdwopPKuGsGU
IPqb3yWnicK8KqH0N2lLc6BPj/uX5O2+oJPjw/+e/K+ZJGCcMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPm0KwSB+I+wbkdO4/Tt2bjm5QmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5
ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3ZmYxMzJhMDYvMjBjNDEyYjEtNTA5MC0z
MjZkLTk1MmUtYjQ0NjE5YjQ1NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTkzOWVlN2UtODFiMi00NmNmLTlh
NDMtMzY0N2ZmMTMyYTA2L2E5MzllZTdlLTgxYjItNDZjZi05YTQzLTM2NDdmZjEz
MmEwNi5jcmwwHwYDVR0jBBgwFoAUQmeYS3HKGRxt4aBeVAy4qvqLKGMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3
ZmYxMzJhMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLTuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuenQBBAr5qJqTinjlgiS75JlVkhgn3yDxyIfTq7ap1YIUh1BolzvFn
SAa8EDFhd+6hX0C2xs6jCtI29fYIq8MAIhaSTMxlQLJTGo63ZlvVQNE6W2YqMMIF
cYbOUkHlXmjVs9lOIY/aYrU97OwuzGHkybsYKNhDYT4jQtc31MRUqhycHvBhDvVI
SFTOYRZWjz216RURXdo9zR9zGbKjGEm2WgLGXBdYrPQhrwhW3WEm2rwQfkiEQhWC
saE+qDB1L8I3LFDLy1gcEcFvFiDb5U2fM3T1D9N4qRlgF2H1Ro/TknpZ/aKvPpW+
Y9DpAmjznX3AOSAUQhssUgLYLFsE4is=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:37 2025 by rpki-client