Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa
File: f14949f5-5a99-3643-87c7-29825b35b0f2.roa (raw, json)
Hash identifier: VhvL2bFTD/H+IfuQbEM/hAKqDbPOWneNE8jX44LK8Lo=
Subject key identifier: 7C:DC:0E:52:27:62:95:58:C4:7C:FC:27:C5:EA:D9:33:80:4C:A4:F8
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F43285849393E79A2FC5F87EC0333FC40
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 6079
IP address blocks: 45.45.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:79:a2:fc:5f:87:ec:03:33:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=1e7b0db3-7b01-44d6-9121-81db385f7545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:14:92:63:1b:b5:3d:71:3e:8a:05:4d:a5:
63:51:0c:e7:6e:de:1d:f7:e0:b0:ef:72:46:6b:c3:
87:34:ec:af:dd:0d:c4:5c:c7:f2:cd:09:87:b2:d0:
b2:da:0c:ec:3e:c2:58:38:19:ec:34:cb:da:56:0d:
ef:6d:8a:49:19:6a:c0:eb:ea:12:63:44:e9:cc:b7:
fe:11:96:91:54:84:fa:9b:e3:69:c6:ae:16:fb:09:
bd:58:d9:e1:c0:2a:75:84:e7:64:e4:92:1c:3c:55:
28:d4:70:1d:b2:0e:38:4c:16:01:e7:9e:3b:5b:ba:
39:78:a6:63:cb:f4:86:be:98:fc:be:c1:86:47:d0:
83:47:6c:dc:de:b2:1d:13:34:7b:ef:fc:b4:17:63:
eb:ca:1a:b0:2b:f3:66:ee:85:b7:20:b2:29:45:88:
1c:01:48:5e:57:40:b8:9f:86:cb:e0:7b:f5:09:fc:
fd:9a:fd:6e:05:0d:db:78:32:94:60:8c:d7:c1:b4:
86:62:cf:ab:83:13:56:aa:7d:6e:95:2b:17:29:87:
93:d8:97:60:ab:61:9c:34:26:71:08:92:5b:dc:59:
41:64:a2:11:e8:9b:56:d7:91:c8:3b:09:87:7b:86:
3a:1c:24:46:63:82:7b:b7:b4:13:3d:26:71:e1:0c:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:0E:52:27:62:95:58:C4:7C:FC:27:C5:EA:D9:33:80:4C:A4:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/f14949f5-5a99-3643-87c7-29825b35b0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:80:10:75:f6:f3:69:d5:f6:8f:49:9c:13:6d:25:3a:f8:a3:
35:bc:48:af:d8:17:c5:60:49:7a:e4:df:0f:8d:e8:db:3d:71:
7c:76:5b:5c:0b:5f:16:c6:19:30:ef:2a:a4:b7:33:ad:70:1a:
b5:a9:5e:08:f9:ab:6a:a2:38:a9:3f:94:52:df:44:69:b4:07:
47:ec:d9:e2:bc:10:b7:c9:a2:3b:f7:38:9c:3d:22:e0:49:03:
98:0e:55:58:d7:ef:51:92:f5:8b:5f:87:70:f1:11:3c:5f:04:
18:b2:45:db:4c:8e:9d:3d:89:5e:fd:ac:8f:34:47:ab:2c:2c:
80:cf:02:57:7a:a4:82:79:fc:14:4b:03:61:1a:ce:ad:d6:9d:
6b:d2:74:a5:c3:b6:3e:d6:cb:e9:7a:2e:c2:62:f2:bc:b2:ea:
9c:4d:31:32:a1:b8:e3:6f:57:19:f0:ad:4e:e4:ba:01:f4:03:
5a:c7:b7:6e:26:f5:b9:b1:15:53:5d:e8:58:93:be:06:f5:0b:
13:31:e1:35:ca:67:a5:c8:82:f2:31:bd:29:d2:a8:8b:93:1a:
35:32:e8:bf:31:d1:72:32:4f:9a:97:69:77:31:51:31:1b:af:
49:4e:45:9e:2b:41:b7:ba:38:b5:98:36:ff:57:53:97:69:19:
fa:84:80:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pnmi/F+H7AMz/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx
NDFlMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
MWU3YjBkYjMtN2IwMS00NGQ2LTkxMjEtODFkYjM4NWY3NTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L4UkmMbtT1xPooFTaVjUQznbt4d9+Cw73JG
a8OHNOyv3Q3EXMfyzQmHstCy2gzsPsJYOBnsNMvaVg3vbYpJGWrA6+oSY0TpzLf+
EZaRVIT6m+Npxq4W+wm9WNnhwCp1hOdk5JIcPFUo1HAdsg44TBYB5547W7o5eKZj
y/SGvpj8vsGGR9CDR2zc3rIdEzR77/y0F2PryhqwK/Nm7oW3ILIpRYgcAUheV0C4
n4bL4Hv1Cfz9mv1uBQ3beDKUYIzXwbSGYs+rgxNWqn1ulSsXKYeT2Jdgq2GcNCZx
CJJb3FlBZKIR6JtW15HIOwmHe4Y6HCRGY4J7t7QTPSZx4QzHPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzcDlInYpVYxHz8J8Xq2TOATKT4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1
Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvZjE0OTQ5ZjUtNWE5OS0z
NjQzLTg3YzctMjk4MjViMzViMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm
ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk
MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3
ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS3IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeAEHX282nV9o9JnBNtJTr4ozW8SK/YF8VgSXrk3w+N6Ns9cXx2W1wL
XxbGGTDvKqS3M61wGrWpXgj5q2qiOKk/lFLfRGm0B0fs2eK8ELfJojv3OJw9IuBJ
A5gOVVjX71GS9Ytfh3DxETxfBBiyRdtMjp09iV79rI80R6ssLIDPAld6pIJ5/BRL
A2Eazq3WnWvSdKXDtj7Wy+l6LsJi8ryy6pxNMTKhuONvVxnwrU7kugH0A1rHt24m
9bmxFVNd6FiTvgb1CxMx4TXKZ6XIgvIxvSnSqIuTGjUy6L8x0XIyT5qXaXcxUTEb
r0lORZ4rQbe6OLWYNv9XU5dpGfqEgAU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:59 2025 by rpki-client