Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa
File: e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa (raw, json)
Hash identifier: E6yXZk9TwBXYKHTy2fRa3VkMLZG+B+RLqdXJsSh76/I=
Subject key identifier: F5:70:A8:3A:92:36:12:0A:EA:77:D9:9F:BD:24:59:D7:C7:09:FF:EF
Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial: 010D0C9F4328584858A058A0B75FB374E643FE00
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 53587
IP address blocks: 45.61.192.0/18 maxlen: 24
168.235.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:58:a0:b7:5f:b3:74:e6:43:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=d27c1537-bc7a-4354-a182-1034163d8f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:c0:25:61:b4:95:1c:14:18:70:16:c0:0e:
0c:3c:b2:a3:c2:55:f3:7f:3f:01:d7:9b:ae:b4:3a:
03:de:a3:2f:bb:8a:b9:20:88:4f:f3:ca:44:7a:8a:
9a:cb:13:04:4f:1f:97:b9:90:a8:cf:4f:92:02:1f:
15:bd:04:ed:0a:88:7f:47:b0:b8:ca:03:e9:b9:61:
31:df:24:21:2a:d4:9b:bb:c0:a7:df:02:8a:0d:aa:
c7:ac:ea:2d:cc:2e:65:f2:e7:b6:30:6d:2b:e0:4d:
71:2b:42:7d:a6:80:4e:42:ce:08:53:b9:3a:53:f0:
bf:1c:ec:4f:ff:01:e9:a8:6f:81:79:f6:0e:e8:4d:
4a:04:2f:a7:1c:5e:2f:54:5c:74:3b:d8:0b:b1:58:
21:d4:3d:d7:ae:43:65:bf:47:6c:a8:3e:ce:33:82:
76:c7:85:b8:8c:69:3a:54:6f:ed:02:26:56:e1:d8:
f1:4c:dd:fc:2a:d2:a8:fc:ca:72:7f:cb:c1:94:6f:
70:56:5e:ef:8a:5d:17:0e:98:d4:dc:15:60:ea:60:
9f:57:e2:46:d1:32:eb:d2:26:98:98:25:61:3b:bd:
ba:00:09:3c:dd:63:1d:a4:62:bb:70:07:c8:03:02:
9c:b9:69:49:95:38:68:a8:7e:dd:a1:f5:e5:3d:ac:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:70:A8:3A:92:36:12:0A:EA:77:D9:9F:BD:24:59:D7:C7:09:FF:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/e87c5f0d-6fc2-38e2-a39a-0cf3ac51ddb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl
X509v3 Authority Key Identifier:
keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.192.0/18
168.235.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:96:bf:85:5d:a5:12:d0:84:91:6b:71:25:0a:91:ed:7f:65:
4b:8c:b1:93:e3:83:91:71:6f:65:47:3e:30:61:97:15:4b:79:
b1:45:9e:d8:57:a3:3d:5c:c1:8a:8f:fa:e9:ca:65:09:ea:d1:
b1:6f:1a:7e:6c:7f:e2:ae:7a:87:ac:e4:39:a3:91:60:df:99:
98:5b:53:7e:e6:f8:ec:8f:68:53:03:e1:15:84:92:02:fb:2e:
39:10:cd:1d:52:1f:b0:4e:c3:22:d6:ea:88:de:4b:2b:77:70:
4f:f4:cc:8f:4b:72:cd:69:74:00:c9:d6:2c:77:ed:12:cd:0b:
f5:20:9d:70:75:f0:8a:32:f5:e8:7c:3a:be:44:79:fe:29:9a:
e6:5c:3d:a6:0d:e8:3e:93:99:c2:c6:56:e3:aa:a7:76:26:12:
19:4f:2e:dd:ed:9f:43:b6:69:43:21:03:55:60:db:37:7b:59:
ac:22:b9:d8:72:53:d6:27:66:9d:9c:48:93:3b:5b:70:07:ea:
29:5f:a1:5f:49:14:ca:f2:6d:c4:0d:c3:ba:41:d3:d0:7e:a3:
8b:57:ad:e6:77:6e:51:66:17:0a:f8:da:6b:9e:78:a3:29:b0:
64:ee:37:a5:cc:db:e1:ec:06:c4:39:e9:f6:ce:48:1a:fa:1e:
16:f0:fc:2b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhYoFigt1+zdOZD/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNjNTIwZDQtY2I4Yi00MjRlLTg2MmEtM2FiZGZiZWRj
ZmM4MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDI3YzE1MzctYmM3YS00MzU0LWExODItMTAzNDE2M2Q4ZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2nAJWG0lRwUGHAWwA4MPLKjwlXzfz8B15uu
tDoD3qMvu4q5IIhP88pEeoqayxMETx+XuZCoz0+SAh8VvQTtCoh/R7C4ygPpuWEx
3yQhKtSbu8Cn3wKKDarHrOotzC5l8ue2MG0r4E1xK0J9poBOQs4IU7k6U/C/HOxP
/wHpqG+BefYO6E1KBC+nHF4vVFx0O9gLsVgh1D3XrkNlv0dsqD7OM4J2x4W4jGk6
VG/tAiZW4djxTN38KtKo/Mpyf8vBlG9wVl7vil0XDpjU3BVg6mCfV+JG0TLr0iaY
mCVhO726AAk83WMdpGK7cAfIAwKcuWlJlThoqH7dofXlPaxusQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPVwqDqSNhIK6nfZn70kWdfHCf/vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1
MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJkZmJlZGNmYzgvZTg3YzVmMGQtNmZjMi0z
OGUyLWEzOWEtMGNmM2FjNTFkZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTNjNTIwZDQtY2I4Yi00MjRlLTg2
MmEtM2FiZGZiZWRjZmM4L2EzYzUyMGQ0LWNiOGItNDI0ZS04NjJhLTNhYmRmYmVk
Y2ZjOC5jcmwwHwYDVR0jBBgwFoAUY5xIHmNNXy4MTNbF1zAEHBLhnLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJk
ZmJlZGNmYzguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGLT3AAwQE
qOvwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH2Wv4VdpRLQhJFrcSUKke1/ZUuMsZPjg5Fxb2VHPjBhlxVL
ebFFnthXoz1cwYqP+unKZQnq0bFvGn5sf+Kueoes5DmjkWDfmZhbU37m+OyPaFMD
4RWEkgL7LjkQzR1SH7BOwyLW6ojeSyt3cE/0zI9Lcs1pdADJ1ix37RLNC/UgnXB1
8Ioy9eh8Or5Eef4pmuZcPaYN6D6TmcLGVuOqp3YmEhlPLt3tn0O2aUMhA1Vg2zd7
WawiudhyU9YnZp2cSJM7W3AH6ilfoV9JFMrybcQNw7pB09B+o4tXreZ3blFmFwr4
2mueeKMpsGTuN6XM2+HsBsQ56fbOSBr6Hhbw/Cs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:48 2025 by rpki-client