Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e0f0210b-2a38-3774-808a-e967a6bcb25e.roa
File: e0f0210b-2a38-3774-808a-e967a6bcb25e.roa (raw, json)
Hash identifier: /91UDQSAKT/XbKmam5S9+Q4Lbox3mOg8xiQ8rL137o0=
Subject key identifier: 4F:08:C9:64:62:D3:1F:57:96:04:ED:87:01:F9:AC:DD:F1:5D:11:1A
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F432858493C092738E4D2403479FD7E00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e0f0210b-2a38-3774-808a-e967a6bcb25e.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 46261
IP address blocks: 45.59.16.0/24 maxlen: 24
45.59.19.0/24 maxlen: 24
45.59.28.0/24 maxlen: 24
45.59.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:27:38:e4:d2:40:34:79:fd:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=cb50cef7-2183-4be3-9fa3-228e87a7a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:47:de:ad:ba:a1:60:71:a5:5a:75:67:4e:
23:39:f8:f6:93:4a:70:4b:08:45:2a:89:97:25:a8:
f3:3c:c4:32:86:36:22:69:fd:43:80:37:aa:18:1b:
ca:4f:5c:70:00:f9:e2:d2:5f:ee:6e:1e:d7:ae:fd:
7d:b5:d5:94:e0:e9:f3:95:ca:a9:3b:0c:bf:b9:72:
98:42:32:04:23:7c:58:b8:c7:fc:62:5f:c3:6d:36:
89:79:f1:55:9d:eb:73:76:85:7d:e4:54:59:68:4d:
ac:c5:f2:bc:d3:d8:bf:76:73:04:de:7f:55:49:91:
34:8b:61:9d:b7:19:c1:b7:b9:cd:8a:b7:4c:05:21:
7d:0f:90:19:17:6a:08:e6:5c:5e:f1:4a:40:0d:ce:
b4:28:43:9f:fa:55:93:5c:1e:35:3c:48:c9:5c:c1:
fb:6f:51:fa:ff:ae:f7:ae:a2:21:37:a0:2c:62:4b:
72:a1:57:c7:6d:ed:df:94:3b:c2:3c:29:f3:0f:f7:
5f:00:5b:17:2c:93:4a:b4:cc:e9:e9:51:d4:47:86:
98:d1:78:07:9c:68:39:8e:93:68:21:56:65:5a:af:
04:d3:75:fb:a3:7a:26:81:51:a2:c3:91:7b:8c:b6:
5b:65:61:00:4e:57:7a:2b:ea:6e:f0:36:55:e1:d3:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:C9:64:62:D3:1F:57:96:04:ED:87:01:F9:AC:DD:F1:5D:11:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e0f0210b-2a38-3774-808a-e967a6bcb25e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.16.0/24
45.59.19.0/24
45.59.28.0/24
45.59.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:8b:ff:ff:64:ea:f8:0a:de:79:4f:72:8f:d5:64:d9:e4:3a:
7f:3f:85:28:a8:1b:f8:52:dc:31:da:3b:70:37:0b:33:33:3a:
48:d0:89:e5:b5:e9:39:ce:5e:d1:2b:f7:c9:2f:34:cf:c4:f5:
a8:6b:db:9f:08:ba:7e:2b:77:59:66:a9:39:41:48:d4:48:16:
83:d3:97:f9:f7:f8:c3:03:de:38:d7:ed:e0:9f:d6:7f:f7:9a:
66:09:03:7e:0d:07:22:b4:9a:58:53:38:76:b9:51:b9:a5:1e:
f7:87:ec:74:0e:70:fd:32:2e:60:21:5d:28:05:e2:e7:da:31:
b5:46:5d:88:16:3a:99:f8:86:86:ef:09:cb:37:98:32:92:cf:
4b:41:1b:97:e6:1a:c3:06:40:15:f3:db:cb:20:cb:7d:a8:8b:
87:81:a2:41:3a:41:fd:61:64:42:1d:4d:af:bf:21:68:91:01:
d8:3e:9c:db:d3:00:e0:65:ef:a5:79:19:c8:03:c5:36:5e:c7:
77:cb:84:90:9c:b7:0d:e0:a0:10:f4:a5:50:6b:dd:8b:65:f0:
2f:dd:f6:f8:fd:aa:a6:76:a2:8e:39:bb:ad:4a:a1:37:db:22:
83:46:f5:64:18:a4:8a:63:4e:bb:e9:04:84:8b:73:ba:5b:bb:
01:d8:25:b6
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEk8CSc45NJANHn9fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
Y2I1MGNlZjctMjE4My00YmUzLTlmYTMtMjI4ZTg3YTdhNmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNH3q26oWBxpVp1Z04jOfj2k0pwSwhFKomX
JajzPMQyhjYiaf1DgDeqGBvKT1xwAPni0l/ubh7Xrv19tdWU4OnzlcqpOwy/uXKY
QjIEI3xYuMf8Yl/DbTaJefFVnetzdoV95FRZaE2sxfK809i/dnME3n9VSZE0i2Gd
txnBt7nNirdMBSF9D5AZF2oI5lxe8UpADc60KEOf+lWTXB41PEjJXMH7b1H6/673
rqIhN6AsYktyoVfHbe3flDvCPCnzD/dfAFsXLJNKtMzp6VHUR4aY0XgHnGg5jpNo
IVZlWq8E03X7o3omgVGiw5F7jLZbZWEATld6K+pu8DZV4dOIZwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFE8IyWRi0x9XlgTthwH5rN3xXREaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZTBmMDIxMGItMmEzOC0z
Nzc0LTgwOGEtZTk2N2E2YmNiMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALTsQAwQA
LTsTAwQALTscAwQALTsfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABCL//9k6vgK3nlPco/VZNnkOn8/hSio
G/hS3DHaO3A3CzMzOkjQieW16TnOXtEr98kvNM/E9ahr258Iun4rd1lmqTlBSNRI
FoPTl/n3+MMD3jjX7eCf1n/3mmYJA34NByK0mlhTOHa5UbmlHveH7HQOcP0yLmAh
XSgF4ufaMbVGXYgWOpn4hobvCcs3mDKSz0tBG5fmGsMGQBXz28sgy32oi4eBokE6
Qf1hZEIdTa+/IWiRAdg+nNvTAOBl76V5GcgDxTZex3fLhJCctw3goBD0pVBr3Ytl
8C/d9vj9qqZ2oo45u61KoTfbIoNG9WQYpIpjTrvpBISLc7pbuwHYJbY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:59 2025 by rpki-client