Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
File: bbef93dd-8e76-38f0-9543-b554a222aa98.roa (raw, json)
Hash identifier: ddl0pT2eM0+O6Ts3WNExT6t5TM26B3W/UCrQrOGJCsw=
Subject key identifier: 95:74:F6:31:A9:4D:35:94:AF:8C:A1:24:E0:54:37:15:CA:8B:CB:1D
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285848C41B8000B49A48B1CFDFE680
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 14618
IP address blocks: 45.10.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:80:00:b4:9a:48:b1:cf:df:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=7ae62873-e177-4118-aebf-c3af99bc8094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:df:9b:bb:81:50:4b:37:d6:3b:0e:23:53:
ab:c9:db:c5:27:aa:ec:e6:aa:ce:b1:38:5b:29:29:
ec:b3:4a:2b:d8:3f:6c:1e:d8:da:63:43:78:8d:98:
ef:3f:f7:97:79:0c:bf:e4:0e:c9:59:31:5d:f5:c4:
de:ad:ad:5c:c4:ae:06:56:b5:99:81:29:d6:f8:a4:
08:58:33:ad:ae:3e:0a:38:60:40:52:d9:fd:fd:46:
d9:54:ed:8d:69:6e:2d:ee:43:41:a6:41:57:50:a7:
80:9d:0a:96:2a:81:31:94:26:c2:8a:9a:8a:67:c8:
b8:18:88:aa:b2:e7:49:a2:49:16:e0:45:c2:02:4c:
e3:92:5d:67:ae:23:d4:c5:03:ac:04:6a:1d:6f:06:
05:27:ca:8e:d5:23:2e:5e:44:a0:d4:14:22:33:6b:
11:e6:21:23:5d:da:62:2d:02:d7:02:9d:c3:d2:f6:
39:b3:27:70:d6:62:82:06:9b:a1:a8:c8:07:2b:f1:
e2:da:d6:7f:23:a2:0a:2d:27:64:41:72:54:71:1e:
ac:3f:36:aa:00:8a:d5:5c:39:58:f4:d2:9f:f2:7f:
a9:48:46:e3:d9:64:16:99:b9:4f:50:e3:4f:ba:da:
f2:fa:0b:6e:05:7a:3f:ee:af:1e:d8:3b:4d:19:80:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:F6:31:A9:4D:35:94:AF:8C:A1:24:E0:54:37:15:CA:8B:CB:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/bbef93dd-8e76-38f0-9543-b554a222aa98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
45.10.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:00:ac:49:88:35:ea:d2:24:d4:4e:ae:2c:a4:b9:ae:cc:97:
fd:7a:e7:d3:fa:45:8f:88:dc:85:ed:ff:23:fd:1d:f6:f1:66:
f4:e4:08:d5:14:53:13:58:db:e1:7d:be:a9:72:03:63:27:6c:
a4:9a:e1:f4:4c:d0:21:2d:ab:ee:ec:be:e3:ad:9e:63:94:99:
9c:d0:a7:af:87:11:a8:ff:cc:08:12:68:cf:bc:df:aa:2b:ea:
64:00:f4:5a:0b:73:05:48:82:30:3b:82:b8:6f:0a:4a:bb:e4:
1e:71:7b:40:ea:3d:7e:af:9e:bf:6f:73:2d:a2:2f:11:88:27:
70:ae:4f:c2:d8:6a:36:1e:14:e4:b1:2d:a5:8d:14:99:3e:6a:
60:d0:3a:c2:b4:0e:52:5b:af:99:7a:5c:00:3b:75:ca:e6:d3:
ff:20:09:4c:ac:d8:cb:a8:ac:8f:03:48:67:d3:7f:26:dd:5e:
54:59:b0:7c:7b:d1:2e:93:74:8a:d0:4a:51:a1:26:31:d1:36:
4a:bc:ae:1b:55:5f:a6:3f:bc:5e:56:21:e4:c8:0c:6d:6b:0c:
68:3e:51:16:f6:30:75:ab:15:78:24:e0:ea:ab:c7:0b:53:f9:
9d:ce:d7:be:55:ab:f6:25:89:54:2c:80:47:1f:39:8b:96:96:
47:81:6b:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG4AAtJpIsc/f5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy
MzRlMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk
N2FlNjI4NzMtZTE3Ny00MTE4LWFlYmYtYzNhZjk5YmM4MDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBLfm7uBUEs31jsOI1OrydvFJ6rs5qrOsThb
KSnss0or2D9sHtjaY0N4jZjvP/eXeQy/5A7JWTFd9cTera1cxK4GVrWZgSnW+KQI
WDOtrj4KOGBAUtn9/UbZVO2NaW4t7kNBpkFXUKeAnQqWKoExlCbCipqKZ8i4GIiq
sudJokkW4EXCAkzjkl1nriPUxQOsBGodbwYFJ8qO1SMuXkSg1BQiM2sR5iEjXdpi
LQLXAp3D0vY5sydw1mKCBpuhqMgHK/Hi2tZ/I6IKLSdkQXJUcR6sPzaqAIrVXDlY
9NKf8n+pSEbj2WQWmblPUONPutry+gtuBXo/7q8e2DtNGYC0CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJV09jGpTTWUr4yhJOBUNxXKi8sdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3
MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYmJlZjkzZGQtOGU3Ni0z
OGYwLTk1NDMtYjU1NGEyMjJhYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0
MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3
MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh
ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQo5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQArEmINerSJNROriykua7Ml/1659P6RY+I3IXt/yP9HfbxZvTkCNUU
UxNY2+F9vqlyA2MnbKSa4fRM0CEtq+7svuOtnmOUmZzQp6+HEaj/zAgSaM+836or
6mQA9FoLcwVIgjA7grhvCkq75B5xe0DqPX6vnr9vcy2iLxGIJ3CuT8LYajYeFOSx
LaWNFJk+amDQOsK0DlJbr5l6XAA7dcrm0/8gCUys2MuorI8DSGfTfybdXlRZsHx7
0S6TdIrQSlGhJjHRNkq8rhtVX6Y/vF5WIeTIDG1rDGg+URb2MHWrFXgk4OqrxwtT
+Z3O175Vq/YliVQsgEcfOYuWlkeBa/0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:26 2025 by rpki-client