Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/8e44ce4d-1ae6-3cc1-a9cc-3465fb35ce15.roa
File: 8e44ce4d-1ae6-3cc1-a9cc-3465fb35ce15.roa (raw, json)
Hash identifier: eeOXTBQZGTobMYaDDXM/vxAI4Z5f0ke6bHMZ7K498j4=
Subject key identifier: 4A:9C:F9:D1:01:49:63:5E:2A:46:12:8A:C3:31:E8:4F:A3:95:B2:26
Certificate issuer: /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Certificate serial: 010D0C9F432858480BC960A584260DB94667B780
Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/8e44ce4d-1ae6-3cc1-a9cc-3465fb35ce15.roa
Signing time: Sat 30 Nov 2024 01:26:32 +0000
ROA not before: Sat 30 Nov 2024 01:26:32 +0000
ROA not after: Fri 28 Feb 2025 01:26:32 +0000
asID: 134176
IP address blocks: 45.59.128.0/24 maxlen: 24
45.59.129.0/24 maxlen: 24
45.59.130.0/24 maxlen: 24
45.59.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:c9:60:a5:84:26:0d:b9:46:67:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Validity
Not Before: Nov 30 01:26:32 2024 GMT
Not After : Feb 28 01:26:32 2025 GMT
Subject: CN=5036a805-335e-4ae4-a3c8-de1eb47ee657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:64:22:17:93:47:7d:a3:ab:cc:f9:ce:8f:
33:e8:22:dd:e7:46:50:7d:89:21:64:ff:b5:95:09:
34:66:70:f6:2c:f7:00:49:56:10:ff:52:37:9f:56:
61:dc:53:e4:b4:d3:c5:2d:29:26:9e:90:77:45:22:
c8:40:94:83:41:48:96:61:b1:a4:ec:16:e1:8b:bb:
68:3d:57:a7:3b:0f:a4:ed:7c:b6:80:98:ff:46:ad:
3c:93:53:a9:1e:fe:18:03:0b:96:bd:65:64:87:0d:
79:74:c9:99:a9:ae:ab:fb:8d:60:52:12:ee:53:f1:
d4:6f:98:8e:9b:19:67:0f:30:02:ed:0e:17:7c:7b:
21:46:c2:a7:8b:29:3b:43:00:20:6f:9d:c8:b0:1e:
ea:54:a5:67:9e:94:f4:a9:f6:99:ce:35:14:f8:b7:
17:31:2b:23:cb:a3:73:73:26:ae:c4:13:de:55:33:
60:5e:13:32:28:4d:a5:21:6f:fb:5a:57:e0:e4:81:
cd:b5:1f:ef:eb:e1:0f:04:f2:4f:0a:af:d3:23:f6:
0b:c6:9a:48:16:b2:12:1f:fb:4f:42:71:f5:dc:65:
8b:3e:6e:e0:1c:4c:a1:15:9b:78:88:29:4d:bd:d5:
f2:d7:bb:fc:27:9f:c0:23:f7:78:8b:4a:29:b1:08:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:F9:D1:01:49:63:5E:2A:46:12:8A:C3:31:E8:4F:A3:95:B2:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/8e44ce4d-1ae6-3cc1-a9cc-3465fb35ce15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl
X509v3 Authority Key Identifier:
keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d7:f8:83:f8:ab:0a:96:af:92:a7:8f:2f:92:8b:47:db:ad:
79:48:fe:a2:d1:44:09:24:5b:fc:f9:a4:ab:a6:57:2d:2e:71:
05:c3:ea:e7:e3:a2:2c:66:cd:d4:47:61:dd:71:8c:11:d5:2f:
a5:2a:73:3d:66:dc:58:46:3e:af:65:eb:82:21:af:f2:be:5a:
85:b5:29:25:20:1d:4c:11:26:99:12:2e:51:bd:55:33:66:37:
d3:af:d6:cf:8b:cd:bc:af:68:93:ca:a9:33:70:3a:99:a8:d8:
27:a5:35:11:ef:42:6d:c0:50:b8:3b:fa:7a:23:61:00:c3:65:
8f:b9:bc:0e:22:40:42:13:39:a4:52:75:dd:0b:5e:8c:a9:99:
ac:ad:a9:2e:ac:5c:30:3e:c9:a2:4a:c0:30:ec:b7:8d:12:08:
7c:7e:0f:c8:61:c2:ff:51:74:88:e5:c7:27:1f:45:65:47:15:
22:86:04:e3:46:ef:c3:7c:05:05:bd:d2:8d:7e:bc:2f:0d:37:
19:5f:c4:99:e1:ba:6d:ae:d4:8c:b0:b5:41:c5:1b:01:dd:7b:
85:31:69:1a:69:ea:df:84:aa:15:4c:76:c6:dd:ce:81:cd:3a:
0c:88:90:bb:38:59:a9:3c:a2:a6:ec:65:f3:f5:17:8c:b8:85:
ac:8b:7c:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgLyWClhCYNuUZnt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkzOWVlN2UtODFiMi00NmNmLTlhNDMtMzY0N2ZmMTMy
YTA2MB4XDTI0MTEzMDAxMjYzMloXDTI1MDIyODAxMjYzMlowLzEtMCsGA1UEAxMk
NTAzNmE4MDUtMzM1ZS00YWU0LWEzYzgtZGUxZWI0N2VlNjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSFkIheTR32jq8z5zo8z6CLd50ZQfYkhZP+1
lQk0ZnD2LPcASVYQ/1I3n1Zh3FPktNPFLSkmnpB3RSLIQJSDQUiWYbGk7Bbhi7to
PVenOw+k7Xy2gJj/Rq08k1OpHv4YAwuWvWVkhw15dMmZqa6r+41gUhLuU/HUb5iO
mxlnDzAC7Q4XfHshRsKniyk7QwAgb53IsB7qVKVnnpT0qfaZzjUU+LcXMSsjy6Nz
cyauxBPeVTNgXhMyKE2lIW/7Wlfg5IHNtR/v6+EPBPJPCq/TI/YLxppIFrISH/tP
QnH13GWLPm7gHEyhFZt4iClNvdXy17v8J5/AI/d4i0opsQiRAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqc+dEBSWNeKkYSisMx6E+jlbImMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5
ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3ZmYxMzJhMDYvOGU0NGNlNGQtMWFlNi0z
Y2MxLWE5Y2MtMzQ2NWZiMzVjZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTkzOWVlN2UtODFiMi00NmNmLTlh
NDMtMzY0N2ZmMTMyYTA2L2E5MzllZTdlLTgxYjItNDZjZi05YTQzLTM2NDdmZjEz
MmEwNi5jcmwwHwYDVR0jBBgwFoAUQmeYS3HKGRxt4aBeVAy4qvqLKGMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM5ZWU3ZS04MWIyLTQ2Y2YtOWE0My0zNjQ3
ZmYxMzJhMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLTuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjX+IP4qwqWr5Knjy+Si0fbrXlI/qLRRAkkW/z5pKumVy0ucQXD6ufj
oixmzdRHYd1xjBHVL6Uqcz1m3FhGPq9l64Ihr/K+WoW1KSUgHUwRJpkSLlG9VTNm
N9Ov1s+LzbyvaJPKqTNwOpmo2CelNRHvQm3AULg7+nojYQDDZY+5vA4iQEITOaRS
dd0LXoypmaytqS6sXDA+yaJKwDDst40SCHx+D8hhwv9RdIjlxycfRWVHFSKGBONG
78N8BQW90o1+vC8NNxlfxJnhum2u1IywtUHFGwHde4UxaRpp6t+EqhVMdsbdzoHN
OgyIkLs4Wak8oqbsZfP1F4y4hayLfDU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:51:11 2025 by rpki-client