Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa
File: 46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa (raw, json)
Hash identifier: CMHrtrFbrTxrhFEVggcbZwdCEN2bfSU1XM4JI/HKn6g=
Subject key identifier: 49:42:B5:E3:DD:1F:81:CA:C8:3A:ED:CC:D8:11:3F:3D:72:78:20:D2
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584921840B93332DF4A25B62A580
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 9009
IP address blocks: 45.33.152.0/24 maxlen: 24
45.33.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0b:93:33:2d:f4:a2:5b:62:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=da510a02-b4e9-4c76-9263-52c39e9829e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:6a:25:3a:ec:e5:19:55:69:58:a9:83:32:
47:8d:ca:d0:a2:78:4e:3c:8d:83:00:53:25:21:7c:
d2:30:3e:cc:ba:dd:db:6d:dc:fd:21:7a:36:c9:9b:
00:f0:c3:4d:b6:c1:61:70:5d:70:4c:c3:a3:94:62:
f9:45:54:24:b0:ee:79:f5:5b:1b:d9:82:88:e8:67:
1b:48:95:3e:9b:a2:d1:8c:b5:49:57:cc:b5:52:13:
77:70:d7:1e:17:ee:62:0e:37:42:8c:b4:82:74:2b:
46:d0:91:71:e1:01:94:50:53:e7:e5:b3:d9:40:da:
fa:7e:55:f9:9b:9d:ef:d0:46:b3:ff:db:99:05:b9:
0d:6e:cf:ce:40:fe:fb:a4:ea:66:8b:ce:05:f7:e1:
d7:82:ab:55:d5:45:9a:1a:e5:39:c4:6c:76:60:d5:
31:39:6b:9a:10:a4:f0:a9:88:ba:61:3b:ec:b6:13:
24:aa:6f:1d:85:e3:5d:4b:43:08:09:d2:6a:09:da:
9f:7a:e8:8e:46:b4:df:28:fd:02:68:70:66:bd:21:
f1:b6:a9:d2:3f:30:94:8a:75:67:c6:bf:c7:c0:90:
14:da:fe:c4:13:62:87:93:6c:06:83:cd:ac:d0:58:
10:e4:c4:4a:a7:32:1e:fb:4d:8a:89:4b:84:d3:4b:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:B5:E3:DD:1F:81:CA:C8:3A:ED:CC:D8:11:3F:3D:72:78:20:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/46c1a7c2-b3d6-3e1b-a0b1-5c97b4c366a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.152.0/24
45.33.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:db:3c:db:ea:1c:9c:97:60:db:9d:85:bc:86:ac:f7:b7:ec:
a5:63:9f:de:c5:c2:f3:ff:5d:19:33:81:ae:7b:f6:00:42:85:
5a:e8:da:40:49:21:16:09:14:8c:c7:9b:73:4d:21:cb:75:43:
0c:e6:1f:05:1b:9c:de:fa:57:c3:84:9d:4a:60:eb:e7:de:b0:
25:4a:b4:81:0e:e0:28:01:a2:79:18:f2:d0:99:33:87:d3:38:
b0:d4:3d:a7:51:b8:0c:1c:66:e1:21:93:1b:ca:93:c2:a2:db:
93:7b:f4:03:59:e8:07:5b:b3:90:26:8f:de:c2:6c:d4:3c:e6:
41:1b:0b:5c:14:ff:1e:96:56:f8:c4:17:44:39:89:dc:3c:63:
2b:27:72:30:2c:39:be:70:e4:0d:6b:b8:d6:e6:29:d5:18:ea:
6d:a4:80:f3:04:00:39:8f:25:39:bb:b7:22:1c:92:d6:9d:b3:
66:80:0d:01:90:00:64:6a:a9:35:54:41:8b:f7:7a:44:fa:b4:
f1:68:a9:fa:6c:b8:b3:99:66:1e:33:4b:c5:c3:12:fd:04:6c:
37:35:b2:df:c2:6d:d4:b1:15:3f:e5:b2:7c:ff:fb:e3:ce:20:
58:d2:b3:87:82:44:e4:a2:07:fc:dd:87:5b:a5:ee:68:46:f1:
d5:0f:9b:c4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkhhAuTMy30oltipYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZGE1MTBhMDItYjRlOS00Yzc2LTkyNjMtNTJjMzllOTgyOWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGtqJTrs5RlVaVipgzJHjcrQonhOPI2DAFMl
IXzSMD7Mut3bbdz9IXo2yZsA8MNNtsFhcF1wTMOjlGL5RVQksO559Vsb2YKI6Gcb
SJU+m6LRjLVJV8y1UhN3cNceF+5iDjdCjLSCdCtG0JFx4QGUUFPn5bPZQNr6flX5
m53v0Eaz/9uZBbkNbs/OQP77pOpmi84F9+HXgqtV1UWaGuU5xGx2YNUxOWuaEKTw
qYi6YTvsthMkqm8dheNdS0MICdJqCdqfeuiORrTfKP0CaHBmvSHxtqnSPzCUinVn
xr/HwJAU2v7EE2KHk2wGg82s0FgQ5MRKpzIe+02KiUuE00s/GwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFElCtePdH4HKyDrtzNgRPz1yeCDSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDZjMWE3YzItYjNkNi0z
ZTFiLWEwYjEtNWM5N2I0YzM2NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSGYAwQA
LSGfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGzbPNvqHJyXYNudhbyGrPe37KVjn97FwvP/XRkzga579gBC
hVro2kBJIRYJFIzHm3NNIct1QwzmHwUbnN76V8OEnUpg6+fesCVKtIEO4CgBonkY
8tCZM4fTOLDUPadRuAwcZuEhkxvKk8Ki25N79ANZ6Adbs5Amj97CbNQ85kEbC1wU
/x6WVvjEF0Q5idw8YysncjAsOb5w5A1ruNbmKdUY6m2kgPMEADmPJTm7tyIcktad
s2aADQGQAGRqqTVUQYv3ekT6tPFoqfpsuLOZZh4zS8XDEv0EbDc1st/CbdSxFT/l
snz/++POIFjSs4eCROSiB/zdh1ul7mhG8dUPm8Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:07 2025 by rpki-client