Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa
File: c458a013-6ebe-3f21-b760-c004edff3696.roa (raw, json)
Hash identifier: Qq60H/JRY4vXoaxtgCsmPcMzAgyQrHpOkhcosL1lvMs=
Subject key identifier: 98:8A:E5:99:FC:DE:91:79:17:59:16:51:32:35:11:27:F7:71:16:39
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE2228CB9FB40F40F2500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 45.74.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e2:22:8c:b9:fb:40:f4:0f:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=1dcd2c4e-0b83-4418-bcb8-c51930b9cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:c1:f6:cf:c8:d9:9f:a3:0f:c1:a7:5c:15:
96:cb:50:84:28:38:6a:a7:c3:c9:51:35:68:10:b3:
58:8a:df:ac:67:78:bb:da:46:67:aa:41:36:40:8a:
fa:a7:36:3f:e0:18:f3:43:0a:3f:1e:59:e5:86:9b:
c7:3b:de:c3:43:6b:37:45:91:72:52:89:88:52:2e:
de:da:06:22:1e:9e:d1:24:ed:af:04:dc:fb:ed:ab:
a2:57:f2:a6:43:4c:51:50:52:f0:4b:39:77:6c:50:
21:00:e1:69:7a:7e:39:3f:d0:87:c7:61:13:7b:8d:
9d:7d:8b:1c:52:ca:c9:2f:e0:bc:19:e3:ba:af:f8:
b7:d1:70:f5:42:d2:0a:8f:6c:4d:77:9f:b2:e7:6b:
b5:9f:15:24:d2:25:d4:e9:5f:11:e1:62:7b:bd:de:
fd:d1:13:90:03:4c:ff:61:2d:fd:35:80:97:94:52:
89:25:e2:fc:72:25:8f:81:a5:84:ad:29:88:04:5f:
98:b2:0b:14:58:7b:f9:99:b9:33:3d:80:81:c6:85:
e8:23:a5:8d:ab:57:3f:56:d2:33:e2:06:cc:98:bd:
e9:f6:14:d4:c8:77:67:5a:0b:00:1d:58:af:b2:0d:
8a:c4:2d:c7:a0:c9:fc:48:bd:16:d2:34:e0:1b:fa:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:E5:99:FC:DE:91:79:17:59:16:51:32:35:11:27:F7:71:16:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:50:11:8c:95:18:22:b3:77:e6:e2:22:39:84:c9:45:1c:45:
5a:7e:d6:77:2d:36:8f:de:cc:c9:9a:81:b1:28:c8:f9:2c:5f:
ed:7b:01:c5:d7:25:85:ec:9a:e4:23:8b:12:79:10:79:b3:78:
2d:07:a5:e7:91:d6:af:12:07:42:7c:df:c1:0d:dd:0f:ab:de:
25:bc:7f:9c:94:b6:35:be:de:22:ed:a3:3e:a9:1b:8f:66:95:
a0:28:f8:43:0b:ab:f2:af:f0:f6:b4:cf:fe:9e:3b:7b:5c:57:
22:ad:69:5f:1d:ab:5f:37:49:30:05:74:cc:94:e3:3c:ec:e3:
27:93:8a:cf:d9:38:75:58:4c:ba:18:a3:55:b8:8c:f5:ff:fd:
34:2b:bc:33:b4:18:97:5e:f3:6d:2c:c1:7b:7e:db:e0:e2:f7:
75:63:4f:0b:1f:01:40:c4:6a:bd:26:e8:e4:77:3e:96:28:dc:
9c:71:76:bb:56:22:68:d1:67:f0:32:f1:d4:4b:86:e3:53:ab:
7e:52:52:66:d2:eb:a8:a3:ea:58:23:6d:6e:57:37:82:27:d8:
63:44:2b:0b:70:ff:a1:c0:7c:a0:95:53:c3:63:4f:61:1a:d7:
8a:cd:89:94:89:43:0f:4e:34:4a:34:7e:39:9d:73:56:88:8d:
aa:cc:83:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKquIijLn7QPQPJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
MWRjZDJjNGUtMGI4My00NDE4LWJjYjgtYzUxOTMwYjljZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBzB9s/I2Z+jD8GnXBWWy1CEKDhqp8PJUTVo
ELNYit+sZ3i72kZnqkE2QIr6pzY/4BjzQwo/HlnlhpvHO97DQ2s3RZFyUomIUi7e
2gYiHp7RJO2vBNz77auiV/KmQ0xRUFLwSzl3bFAhAOFpen45P9CHx2ETe42dfYsc
UsrJL+C8GeO6r/i30XD1QtIKj2xNd5+y52u1nxUk0iXU6V8R4WJ7vd790ROQA0z/
YS39NYCXlFKJJeL8ciWPgaWErSmIBF+YsgsUWHv5mbkzPYCBxoXoI6WNq1c/VtIz
4gbMmL3p9hTUyHdnWgsAHVivsg2KxC3HoMn8SL0W0jTgG/pS3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJiK5Zn83pF5F1kWUTI1ESf3cRY5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzQ1OGEwMTMtNmViZS0z
ZjIxLWI3NjAtYzAwNGVkZmYzNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRQEYyVGCKzd+biIjmEyUUcRVp+1nctNo/ezMmagbEoyPksX+17AcXX
JYXsmuQjixJ5EHmzeC0HpeeR1q8SB0J838EN3Q+r3iW8f5yUtjW+3iLtoz6pG49m
laAo+EMLq/Kv8Pa0z/6eO3tcVyKtaV8dq183STAFdMyU4zzs4yeTis/ZOHVYTLoY
o1W4jPX//TQrvDO0GJde820swXt+2+Di93VjTwsfAUDEar0m6OR3PpYo3JxxdrtW
ImjRZ/Ay8dRLhuNTq35SUmbS66ij6lgjbW5XN4In2GNEKwtw/6HAfKCVU8NjT2Ea
14rNiZSJQw9ONEo0fjmdc1aIjarMgyM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:55:56 2025 by rpki-client