Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa
File: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (raw, json)
Hash identifier: or6E0B3opG3dI7RQksu3r4SKYxJVfaqE+B+iirxYhms=
Subject key identifier: 63:D1:EA:71:3B:CF:0C:52:F6:76:D0:EC:C1:DA:94:6E:99:83:97:20
Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
Certificate serial: 010D0C9F43285848451584B932DAB6CC67042C80
Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 174
IP address blocks: 45.45.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:84:b9:32:da:b6:cc:67:04:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=7a7d4e01-98c9-4677-81d7-299a8edcfb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:63:c5:41:33:98:c6:f7:aa:ea:9e:58:36:
8f:0b:56:b6:cb:1c:db:ea:06:84:32:1a:c8:56:a4:
46:4c:dc:33:2a:0e:0c:a2:b0:a5:09:19:99:a9:f7:
69:66:45:70:eb:43:62:f3:b0:94:f1:e7:09:f1:4c:
1b:18:46:a4:82:cc:a1:3e:0e:33:c3:64:af:2c:92:
d5:2d:e8:fb:eb:45:19:82:78:a8:82:21:ac:f7:e6:
2b:22:bd:83:d5:07:84:f6:c7:40:dd:42:5c:32:2b:
54:5f:16:6e:0e:f5:28:86:93:5c:fe:4e:cf:15:4d:
fe:5c:f6:72:7b:e8:6d:99:6b:45:e3:a3:1b:8e:b2:
55:7b:01:39:2a:87:2e:67:0a:c0:58:cc:a7:08:34:
02:3f:72:76:a1:e1:3f:a2:14:49:4a:0f:41:09:42:
84:02:ff:e7:d0:df:32:62:1a:a0:5f:e1:06:4c:6b:
f4:03:49:e9:6f:26:31:f8:57:84:7d:8d:97:0f:de:
51:10:48:be:2f:c6:0d:02:e7:c8:27:7e:16:87:0f:
1e:8f:5b:de:a0:90:9f:9d:35:bc:44:87:57:69:81:
1f:bc:57:27:5f:40:a5:44:03:48:47:12:76:18:7c:
26:37:85:55:73:dd:35:c2:86:27:ca:b6:82:9d:1f:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:EA:71:3B:CF:0C:52:F6:76:D0:EC:C1:DA:94:6E:99:83:97:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ee1a4e04-68da-38e4-9471-1d40d048b137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl
X509v3 Authority Key Identifier:
keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:3c:04:b3:b1:a2:3d:c3:ae:20:3f:13:4a:e6:47:b2:64:11:
70:d9:07:68:48:31:f9:36:99:b0:67:6f:b2:23:c3:9e:73:62:
c1:26:39:45:35:0b:2a:f7:ff:1f:4a:0a:ef:c8:93:6f:c9:87:
5d:fa:a8:b3:2e:b8:40:e8:64:5f:03:6b:9e:8f:eb:09:96:65:
e0:0a:14:8a:ec:19:ec:38:97:36:58:6f:40:76:b9:f1:46:09:
33:4d:e4:0a:d0:71:27:9c:ce:3e:40:48:e3:ea:be:c6:3a:e0:
22:33:62:fe:fd:7a:2f:16:7c:b3:7a:2f:e1:19:af:b1:6d:38:
6b:34:9c:ba:13:9d:af:ba:24:45:ab:eb:7b:c9:5d:9c:57:4c:
3d:64:36:87:e1:c4:10:3f:de:15:4b:08:55:e9:57:ad:85:70:
39:ac:3f:cc:56:7a:0d:97:58:28:21:f3:c7:89:5f:90:19:dd:
b4:46:5f:d8:cc:a1:25:b1:13:de:06:15:ea:81:d2:cc:cb:7d:
ff:cd:38:ba:e2:c8:af:49:6b:e5:5b:a0:da:57:69:42:d4:b9:
3f:c4:6a:04:9f:d1:7e:cb:27:c6:a1:bf:3a:c3:d3:74:ed:e7:
07:2a:95:ee:70:34:a8:b0:cf:58:0e:a0:fc:8a:f1:e5:1f:8a:
a8:43:b4:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYS5Mtq2zGcELIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj
MWQ2MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
N2E3ZDRlMDEtOThjOS00Njc3LTgxZDctMjk5YThlZGNmYjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ1jxUEzmMb3quqeWDaPC1a2yxzb6gaEMhrI
VqRGTNwzKg4MorClCRmZqfdpZkVw60Ni87CU8ecJ8UwbGEakgsyhPg4zw2SvLJLV
Lej760UZgniogiGs9+YrIr2D1QeE9sdA3UJcMitUXxZuDvUohpNc/k7PFU3+XPZy
e+htmWtF46MbjrJVewE5KocuZwrAWMynCDQCP3J2oeE/ohRJSg9BCUKEAv/n0N8y
YhqgX+EGTGv0A0npbyYx+FeEfY2XD95REEi+L8YNAufIJ34Whw8ej1veoJCfnTW8
RIdXaYEfvFcnX0ClRANIRxJ2GHwmN4VVc901woYnyraCnR8UvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPR6nE7zwxS9nbQ7MHalG6Zg5cgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3
MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvZWUxYTRlMDQtNjhkYS0z
OGU0LTk0NzEtMWQ0MGQwNDhiMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx
ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw
YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4
ZjhmMGMxZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABc8BLOxoj3DriA/E0rmR7JkEXDZB2hIMfk2mbBnb7Ijw55zYsEmOUU1
Cyr3/x9KCu/Ik2/Jh136qLMuuEDoZF8Da56P6wmWZeAKFIrsGew4lzZYb0B2ufFG
CTNN5ArQcSeczj5ASOPqvsY64CIzYv79ei8WfLN6L+EZr7FtOGs0nLoTna+6JEWr
63vJXZxXTD1kNofhxBA/3hVLCFXpV62FcDmsP8xWeg2XWCgh88eJX5AZ3bRGX9jM
oSWxE94GFeqB0szLff/NOLriyK9Ja+VboNpXaULUuT/EagSf0X7LJ8ahvzrD03Tt
5wcqle5wNKiwz1gOoPyK8eUfiqhDtLI=
-----END CERTIFICATE-----
Generated at Thu May 8 10:58:41 2025 by rpki-client