Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/44c53b71-783e-3d89-b96a-8cd2d6619738.roa
File: 44c53b71-783e-3d89-b96a-8cd2d6619738.roa (raw, json)
Hash identifier: XWEZtPvURTwjHZmPP1hNSl2qcnkXLkWsVGK/MfTvK0c=
Subject key identifier: 2B:D3:48:7D:BC:E2:EC:3F:D2:4D:08:BC:E9:7A:7D:94:0E:C5:74:1E
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584851A57899DEA1EAD06431DB40
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/44c53b71-783e-3d89-b96a-8cd2d6619738.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 46261
IP address blocks: 45.33.144.0/23 maxlen: 23
45.33.146.0/24 maxlen: 24
45.33.147.0/24 maxlen: 24
45.33.148.0/24 maxlen: 24
45.33.149.0/24 maxlen: 24
45.33.151.0/24 maxlen: 24
45.33.153.0/24 maxlen: 24
45.33.155.0/24 maxlen: 24
45.33.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:78:99:de:a1:ea:d0:64:31:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=013e3224-05a8-43d3-a1ac-2186b0a85fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:9a:a2:87:0e:cf:0d:65:5e:d7:65:61:cd:
9d:a6:39:3c:75:c2:38:79:f2:25:75:f7:89:ed:3c:
38:79:51:e5:8c:32:68:6b:ad:8b:80:cf:0e:ca:ef:
4f:a7:61:f5:35:8d:b1:d7:7d:75:84:95:4e:b1:ba:
6f:4d:c0:7f:77:52:0d:86:ec:b6:1f:0f:08:5c:80:
b5:50:4d:83:cb:d6:1a:a7:5c:13:f2:d3:a3:9e:4b:
e4:68:97:75:3b:c5:19:5c:6d:e2:39:af:2f:f2:79:
51:95:66:cf:1a:0d:f5:0e:83:7e:f7:fa:86:e3:c9:
ed:c7:5e:e0:27:72:da:58:68:33:c1:2e:a5:c0:c2:
b8:4a:ed:af:a2:c3:08:c9:4d:23:c7:6d:e7:32:7b:
27:7d:f3:50:70:fb:81:84:e2:57:28:34:7f:75:69:
bb:c2:4e:ce:42:c6:ca:7b:6a:c3:6f:c4:66:67:0a:
c0:3e:f8:cd:85:97:8c:89:0c:64:a1:f3:bd:4e:58:
ff:ac:08:e8:77:ab:c4:d4:e9:e3:f9:42:e5:e1:a0:
3b:9b:d4:57:bc:2e:20:f0:45:81:0d:d1:6d:01:d7:
cf:9d:62:86:a7:60:5d:aa:37:30:44:35:f2:26:1c:
08:3d:90:a6:7c:44:c4:fb:06:e9:fe:e8:cd:6b:c6:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:48:7D:BC:E2:EC:3F:D2:4D:08:BC:E9:7A:7D:94:0E:C5:74:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/44c53b71-783e-3d89-b96a-8cd2d6619738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.144.0-45.33.149.255
45.33.151.0/24
45.33.153.0/24
45.33.155.0-45.33.157.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b6:64:14:57:90:29:0c:ab:21:d9:3a:51:5a:5d:f8:91:08:
89:21:7d:f8:c9:41:17:aa:06:72:84:98:d6:c8:dd:69:69:fd:
13:39:03:7c:8a:f0:91:cf:bd:a0:3e:41:84:9f:dd:24:69:9d:
86:57:bd:93:f6:68:54:44:a3:6d:d2:df:6e:24:96:78:68:51:
88:60:9a:36:3e:b1:4f:49:c7:fd:75:2a:eb:b9:66:ab:46:04:
43:67:61:28:02:f6:df:61:58:28:62:3d:d8:12:7e:c5:fa:7b:
65:b1:ae:db:07:5a:6b:51:47:9d:9a:58:9a:75:ba:d1:75:45:
a1:af:91:eb:d8:a7:e2:82:2a:d9:2f:a5:0c:22:f1:c8:15:02:
b9:43:78:f6:a7:b0:9c:07:2a:dd:12:df:fc:68:4f:4f:2a:64:
9e:d0:3d:e7:8b:58:42:85:e4:1c:44:08:7d:86:04:cd:7f:b2:
9f:6a:ef:70:f8:0e:47:86:65:1e:81:7d:54:a3:59:89:74:b0:
e3:60:25:a2:4a:58:1c:27:9a:ad:cc:e2:cc:66:c0:9b:4d:f1:
e2:b0:1e:7c:32:25:bd:08:42:9c:ac:54:65:ee:60:b2:40:45:
70:12:24:f3:52:57:6a:5d:dd:cc:c1:59:60:f8:96:21:23:39:
2b:9f:2c:28
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEhRpXiZ3qHq0GQx20AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
MDEzZTMyMjQtMDVhOC00M2QzLWExYWMtMjE4NmIwYTg1ZmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSSaoocOzw1lXtdlYc2dpjk8dcI4efIldfeJ
7Tw4eVHljDJoa62LgM8Oyu9Pp2H1NY2x1311hJVOsbpvTcB/d1INhuy2Hw8IXIC1
UE2Dy9Yap1wT8tOjnkvkaJd1O8UZXG3iOa8v8nlRlWbPGg31DoN+9/qG48ntx17g
J3LaWGgzwS6lwMK4Su2vosMIyU0jx23nMnsnffNQcPuBhOJXKDR/dWm7wk7OQsbK
e2rDb8RmZwrAPvjNhZeMiQxkofO9Tlj/rAjod6vE1Onj+ULl4aA7m9RXvC4g8EWB
DdFtAdfPnWKGp2BdqjcwRDXyJhwIPZCmfETE+wbp/ujNa8aMiwIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFCvTSH284uw/0k0IvOl6fZQOxXQeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDRjNTNiNzEtNzgzZS0z
ZDg5LWI5NmEtOGNkMmQ2NjE5NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAQtIZAD
BAEtIZQDBAAtIZcDBAAtIZkwDAMEAC0hmwMEAS0hnDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRtmQUV5Ap
DKsh2TpRWl34kQiJIX34yUEXqgZyhJjWyN1paf0TOQN8ivCRz72gPkGEn90kaZ2G
V72T9mhURKNt0t9uJJZ4aFGIYJo2PrFPScf9dSrruWarRgRDZ2EoAvbfYVgoYj3Y
En7F+ntlsa7bB1prUUedmliadbrRdUWhr5Hr2KfigirZL6UMIvHIFQK5Q3j2p7Cc
ByrdEt/8aE9PKmSe0D3ni1hCheQcRAh9hgTNf7Kfau9w+A5HhmUegX1Uo1mJdLDj
YCWiSlgcJ5qtzOLMZsCbTfHisB58MiW9CEKcrFRl7mCyQEVwEiTzUldqXd3MwVlg
+JYhIzkrnywo
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:48:21 2025 by rpki-client