Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa
File: 24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa (raw, json)
Hash identifier: B87KKiEtpcMzOOEH3b9P6/1vQJPtkiTCmm668sSnPME=
Subject key identifier: 13:53:EE:06:1F:A9:43:26:81:45:D0:95:6A:71:0A:3C:F0:5F:29:AF
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F43285848E9CBE10A14672F3303F70600
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 2906
IP address blocks: 45.57.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e1:0a:14:67:2f:33:03:f7:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=0d109be4-176f-449d-adb3-5307ef9283fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:ff:9c:09:89:ed:35:d1:5d:b7:dc:dc:25:
c7:ce:27:87:c2:60:47:1c:02:08:d5:88:bf:d1:4d:
77:2b:59:35:dc:28:55:95:17:de:d2:6e:3f:91:e5:
0e:7a:2c:40:15:75:f7:ae:b3:bc:d4:78:2d:ad:d5:
52:4d:4e:37:fc:41:f5:79:29:c3:5a:f0:8d:6f:ae:
a5:ca:7b:79:7d:73:56:2e:28:d8:d0:28:1c:56:ad:
aa:b0:8f:9b:5f:e3:ad:b5:80:57:21:2f:03:53:4f:
8d:d2:8a:78:12:1b:f1:ae:d3:8e:28:dc:9a:a1:20:
2e:8f:21:37:85:43:2a:07:b2:fa:a6:5c:0a:6c:27:
98:df:b2:c0:fb:33:69:8d:ae:2f:4d:6e:57:88:08:
a0:24:b0:49:04:d3:0b:a8:2f:42:8d:82:69:b5:1d:
60:29:4a:8b:50:6b:e9:6d:3c:f2:19:54:ad:cb:41:
12:f4:06:03:78:91:bf:32:ec:4b:92:40:5f:b4:28:
11:99:59:f3:2c:f2:d4:f0:af:73:0d:a8:7f:6e:82:
89:9c:01:75:66:7c:15:59:94:11:a7:95:e2:f2:3c:
b9:e2:90:be:cd:44:b7:70:91:c6:c6:0f:27:94:1f:
c8:a9:47:09:2a:60:f6:d3:a5:4c:84:94:65:53:4c:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:EE:06:1F:A9:43:26:81:45:D0:95:6A:71:0A:3C:F0:5F:29:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/24d1e724-70a9-34bf-9bce-3eb67e7a5d50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.57.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:ce:5a:65:c6:ad:78:49:be:72:22:fe:a7:e9:ee:46:af:7b:
38:d3:69:60:ac:dc:c5:71:88:35:ae:cd:9a:bc:23:e0:be:bb:
7c:01:f6:1e:da:74:c4:d7:ec:a9:2c:37:52:6e:ff:12:3c:c4:
60:bf:60:84:a7:f7:6f:f6:ed:32:2a:57:63:58:ee:e4:ba:f2:
5a:cb:1f:95:cc:4e:17:07:8b:91:c8:77:b2:e2:e5:74:4b:57:
74:81:8d:0c:a4:e2:27:c9:89:51:fd:74:73:ce:d0:5b:04:fc:
e7:8b:70:9d:70:5a:64:a9:4f:85:b1:73:58:d9:db:c1:33:3c:
a6:4a:85:64:56:20:4a:62:fe:80:a7:b7:a9:89:cc:28:53:8d:
9e:07:37:7a:a7:b6:be:96:4e:98:e1:d3:15:c5:13:68:b0:bf:
a0:cd:7e:84:34:8c:51:e9:8d:25:83:4e:02:7a:8f:16:2d:21:
80:88:f8:99:50:2c:a0:37:6d:7f:3a:c6:83:44:00:02:ee:9e:
f0:fd:2b:b7:7b:26:07:6c:f0:fe:a7:ef:65:42:e2:99:c1:4a:
8d:c9:91:6e:6f:78:54:aa:62:23:65:03:ba:fb:7c:b5:45:a4:
bf:2f:55:e0:ba:93:9c:e6:c8:8f:15:04:21:c0:68:c0:9f:d2:
5a:92:b1:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+EKFGcvMwP3BgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl
NTdjMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
MGQxMDliZTQtMTc2Zi00NDlkLWFkYjMtNTMwN2VmOTI4M2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYz/nAmJ7TXRXbfc3CXHzieHwmBHHAII1Yi/
0U13K1k13ChVlRfe0m4/keUOeixAFXX3rrO81HgtrdVSTU43/EH1eSnDWvCNb66l
ynt5fXNWLijY0CgcVq2qsI+bX+OttYBXIS8DU0+N0op4EhvxrtOOKNyaoSAujyE3
hUMqB7L6plwKbCeY37LA+zNpja4vTW5XiAigJLBJBNMLqC9CjYJptR1gKUqLUGvp
bTzyGVSty0ES9AYDeJG/MuxLkkBftCgRmVnzLPLU8K9zDah/boKJnAF1ZnwVWZQR
p5Xi8jy54pC+zUS3cJHGxg8nlB/IqUcJKmD206VMhJRlU0z8TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNT7gYfqUMmgUXQlWpxCjzwXymvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2
NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMjRkMWU3MjQtNzBhOS0z
NGJmLTliY2UtM2ViNjdlN2E1ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk
Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2
NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLTkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrOWmXGrXhJvnIi/qfp7kavezjTaWCs3MVxiDWuzZq8I+C+u3wB9h7a
dMTX7KksN1Ju/xI8xGC/YISn92/27TIqV2NY7uS68lrLH5XMThcHi5HId7Li5XRL
V3SBjQyk4ifJiVH9dHPO0FsE/OeLcJ1wWmSpT4Wxc1jZ28EzPKZKhWRWIEpi/oCn
t6mJzChTjZ4HN3qntr6WTpjh0xXFE2iwv6DNfoQ0jFHpjSWDTgJ6jxYtIYCI+JlQ
LKA3bX86xoNEAALunvD9K7d7Jgds8P6n72VC4pnBSo3JkW5veFSqYiNlA7r7fLVF
pL8vVeC6k5zmyI8VBCHAaMCf0lqSsUs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:57 2025 by rpki-client