Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6160b2f7-2848-3d7a-beb9-ce5a12d1dfaf.roa
File: 6160b2f7-2848-3d7a-beb9-ce5a12d1dfaf.roa (raw, json)
Hash identifier: ORx4mMleAwyXafVB4Tw1uu6cdZmVVdA+1D3coJIzjN0=
Subject key identifier: 0B:27:8B:D1:88:FA:60:B4:E3:81:41:4C:32:75:18:1A:5D:9E:AF:C7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489E6B6C43AAC3675BDD494900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6160b2f7-2848-3d7a-beb9-ce5a12d1dfaf.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 46475
IP address blocks: 45.74.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6c:43:aa:c3:67:5b:dd:49:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=d5072dfd-1184-42b4-bd7b-bdb859aa742f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:19:db:18:60:8b:a4:c3:28:11:4b:bc:71:
84:94:b0:65:23:d5:e3:28:26:93:0a:0a:14:5f:d1:
84:08:97:a0:b9:31:75:73:15:41:75:6e:c6:bd:ec:
4b:9c:64:c6:90:e4:a4:91:8c:e4:84:c7:d9:bf:b2:
f2:e9:5b:73:88:ff:7f:10:6d:d6:90:12:c7:06:26:
39:c7:13:c9:61:98:07:1d:40:12:6e:eb:38:da:c8:
97:e2:70:17:e6:2e:dd:6d:17:ef:19:7e:b3:df:41:
19:f8:c6:3d:d9:b1:72:e9:e0:7b:aa:39:89:b0:be:
bb:e4:e2:db:b4:b0:ee:28:ef:48:21:bf:71:1b:59:
7a:3c:d8:7b:ce:40:1a:65:1d:06:fd:69:bc:fb:47:
75:0c:c6:06:42:d6:15:7b:0e:9f:af:61:55:26:52:
82:26:88:dc:c9:ba:0d:cc:2c:c2:11:03:95:4b:3b:
20:a8:95:0b:55:05:92:d1:5f:85:e8:79:a0:2e:f2:
30:46:85:17:ad:37:ed:4b:82:84:ac:ff:c2:3a:a8:
f2:37:94:70:2f:7a:54:19:c3:af:7c:d8:4a:d1:c6:
aa:27:b0:2e:bc:b0:ec:7a:5b:03:88:53:29:de:b3:
12:a8:4a:ff:73:65:c5:75:2a:4b:62:35:97:ae:a8:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:8B:D1:88:FA:60:B4:E3:81:41:4C:32:75:18:1A:5D:9E:AF:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6160b2f7-2848-3d7a-beb9-ce5a12d1dfaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:ec:8e:2a:af:f5:36:c5:43:44:24:30:b5:51:81:5e:27:2f:
c6:0d:18:de:30:2d:01:2d:1e:13:99:69:c2:ee:13:ba:cc:00:
40:55:42:86:cc:3a:6d:ce:b6:50:26:09:6d:41:ee:85:34:59:
55:b9:16:09:87:d6:ce:f8:29:31:3c:56:81:88:a4:8f:c7:da:
6c:5c:86:61:7e:3a:66:1c:c9:30:da:9a:bf:e4:2d:76:5c:05:
3c:01:fc:0e:a9:72:20:a1:9a:ae:92:24:a6:68:aa:b9:52:1c:
37:2c:c5:e3:3c:87:c2:38:85:1c:c3:1a:d0:69:69:f6:17:e4:
eb:ef:10:eb:22:a9:9c:46:4f:5f:2c:61:9e:81:8d:dc:0c:d4:
53:68:cb:a9:a4:5f:7f:11:50:32:66:0e:31:c0:95:3d:fa:14:
a2:e3:de:ab:b7:ca:5f:b1:27:55:5a:46:f2:7e:5a:a9:c4:36:
87:04:ba:e2:7d:fb:d5:4b:6e:2a:8d:79:85:c9:db:c3:b1:31:
3f:d5:51:ee:9e:e6:a6:49:7e:ec:36:94:be:3e:1f:89:d8:58:
15:b9:42:03:78:68:d8:c6:f3:1a:39:a1:8d:6e:60:27:02:75:
6f:4e:d7:ef:d9:9d:4b:90:6e:44:86:06:14:7b:1b:e8:71:cd:
06:7a:3a:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2xDqsNnW91JSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDUwNzJkZmQtMTE4NC00MmI0LWJkN2ItYmRiODU5YWE3NDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsYZ2xhgi6TDKBFLvHGElLBlI9XjKCaTCgoU
X9GECJeguTF1cxVBdW7GvexLnGTGkOSkkYzkhMfZv7Ly6VtziP9/EG3WkBLHBiY5
xxPJYZgHHUASbus42siX4nAX5i7dbRfvGX6z30EZ+MY92bFy6eB7qjmJsL675OLb
tLDuKO9IIb9xG1l6PNh7zkAaZR0G/Wm8+0d1DMYGQtYVew6fr2FVJlKCJojcyboN
zCzCEQOVSzsgqJULVQWS0V+F6HmgLvIwRoUXrTftS4KErP/COqjyN5RwL3pUGcOv
fNhK0caqJ7AuvLDselsDiFMp3rMSqEr/c2XFdSpLYjWXrqg6XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsni9GI+mC044FBTDJ1GBpdnq/HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjE2MGIyZjctMjg0OC0z
ZDdhLWJlYjktY2U1YTEyZDFkZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvsjiqv9TbFQ0QkMLVRgV4nL8YNGN4wLQEtHhOZacLuE7rMAEBVQobM
Om3OtlAmCW1B7oU0WVW5FgmH1s74KTE8VoGIpI/H2mxchmF+OmYcyTDamr/kLXZc
BTwB/A6pciChmq6SJKZoqrlSHDcsxeM8h8I4hRzDGtBpafYX5OvvEOsiqZxGT18s
YZ6BjdwM1FNoy6mkX38RUDJmDjHAlT36FKLj3qu3yl+xJ1VaRvJ+WqnENocEuuJ9
+9VLbiqNeYXJ28OxMT/VUe6e5qZJfuw2lL4+H4nYWBW5QgN4aNjG8xo5oY1uYCcC
dW9O1+/ZnUuQbkSGBhR7G+hxzQZ6Ogw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:24 2025 by rpki-client