Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa
File: e1245ecc-016c-3d87-a13c-64934969ef40.roa (raw, json)
Hash identifier: ISkf9trzQIUGVAMwfP6FTtIW6IbHtUOkr0rINNy5lxg=
Subject key identifier: B0:CF:07:5A:FA:28:3C:77:E9:AA:D4:F1:53:52:08:7D:AD:DE:8A:D1
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584840E55AEB74107B501F1E5CCA
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 212238
IP address blocks: 45.33.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:5a:eb:74:10:7b:50:1f:1e:5c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=b2569ad2-b876-4911-866a-365cbbaf78c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:c2:96:df:f4:76:40:22:2c:6b:07:a8:43:
99:86:d3:32:9a:1e:80:66:1c:46:a8:a3:44:fc:69:
48:e5:e2:38:4b:35:0c:ec:46:47:bc:a4:0a:6f:1d:
19:e3:eb:02:e4:c9:83:33:34:df:1d:f8:7d:4b:a0:
96:e0:d8:d2:b8:a4:bf:6e:6b:4b:2b:7a:6c:18:2c:
f9:55:92:89:b4:dc:46:45:e0:5d:db:f4:6a:2b:d4:
88:6b:78:20:aa:15:07:f5:82:3b:8d:85:f8:85:d4:
4d:fc:e8:2a:04:8b:8b:4b:6e:a3:6b:91:b0:26:0f:
61:2d:15:29:97:11:f3:5a:4d:9b:dc:a2:e7:24:d6:
57:19:98:01:2f:d2:5b:df:31:20:79:b2:8e:39:50:
2f:d4:01:f7:72:09:8d:0e:b2:d8:26:20:cd:92:2c:
88:36:5c:ba:1c:06:4a:a8:68:55:46:28:d8:65:b2:
ff:dc:b5:f0:7e:aa:99:f8:8e:7f:c4:7e:ee:06:11:
e3:e8:44:fe:89:73:e0:a9:ec:77:0f:13:5b:93:25:
ae:60:4a:d3:ea:0e:a5:5c:11:33:fe:dd:7b:fb:e4:
72:4e:1e:6e:01:cb:18:53:5e:5d:68:a7:b4:c4:47:
04:f5:ae:b3:9e:19:e6:da:b5:27:6b:93:f9:55:74:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:07:5A:FA:28:3C:77:E9:AA:D4:F1:53:52:08:7D:AD:DE:8A:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e1245ecc-016c-3d87-a13c-64934969ef40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b2:c3:78:bf:dd:c4:23:54:97:45:55:25:8e:12:e9:f9:9b:
3d:22:45:ae:0b:b3:8a:bd:03:33:c3:91:bf:41:1e:a5:1c:d0:
55:df:c6:1d:e7:4b:6b:39:bb:31:17:a3:43:bd:50:5b:77:14:
e3:86:7c:fe:70:9b:72:2f:c9:1e:7b:d0:c2:a4:55:1d:fa:9d:
62:6f:1c:cd:0e:ba:17:1b:2b:53:12:bf:12:af:96:d1:04:15:
a7:25:47:c7:15:6e:19:cc:25:5f:82:e6:4a:37:ed:fd:01:cc:
3c:e4:ab:f9:3b:1b:a0:97:77:75:bf:21:46:17:73:dd:67:8f:
34:9c:0c:d2:45:97:42:e5:40:be:83:a1:bb:77:b2:59:85:99:
5b:b7:fe:35:28:94:9f:93:44:c5:fc:c9:47:e5:71:0d:c7:ea:
f3:a6:fe:6e:9d:12:91:c8:8e:15:12:0a:55:98:5e:72:ce:a4:
74:fd:be:f4:b2:27:1b:1e:49:c3:e8:7b:a7:bb:61:ad:e2:77:
c1:80:d2:df:ff:47:a4:ec:44:26:92:c5:3f:28:0d:a1:16:ea:
fb:f6:0c:1a:c6:8f:3f:a2:62:7c:14:01:a3:b3:81:89:88:47:
dd:1b:cd:b8:fe:47:8e:be:b6:ba:e0:67:36:53:7e:98:1e:57:
3e:51:77:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5VrrdBB7UB8eXMowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YjI1NjlhZDItYjg3Ni00OTExLTg2NmEtMzY1Y2JiYWY3OGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGTClt/0dkAiLGsHqEOZhtMymh6AZhxGqKNE
/GlI5eI4SzUM7EZHvKQKbx0Z4+sC5MmDMzTfHfh9S6CW4NjSuKS/bmtLK3psGCz5
VZKJtNxGReBd2/RqK9SIa3ggqhUH9YI7jYX4hdRN/OgqBIuLS26ja5GwJg9hLRUp
lxHzWk2b3KLnJNZXGZgBL9Jb3zEgebKOOVAv1AH3cgmNDrLYJiDNkiyINly6HAZK
qGhVRijYZbL/3LXwfqqZ+I5/xH7uBhHj6ET+iXPgqex3DxNbkyWuYErT6g6lXBEz
/t17++RyTh5uAcsYU15daKe0xEcE9a6znhnm2rUna5P5VXRe8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDPB1r6KDx36arU8VNSCH2t3orRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTEyNDVlY2MtMDE2Yy0z
ZDg3LWExM2MtNjQ5MzQ5NjllZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSGaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuyw3i/3cQjVJdFVSWOEun5mz0iRa4Ls4q9AzPDkb9BHqUc0FXfxh3n
S2s5uzEXo0O9UFt3FOOGfP5wm3IvyR570MKkVR36nWJvHM0OuhcbK1MSvxKvltEE
FaclR8cVbhnMJV+C5ko37f0BzDzkq/k7G6CXd3W/IUYXc91njzScDNJFl0LlQL6D
obt3slmFmVu3/jUolJ+TRMX8yUflcQ3H6vOm/m6dEpHIjhUSClWYXnLOpHT9vvSy
JxseScPoe6e7Ya3id8GA0t//R6TsRCaSxT8oDaEW6vv2DBrGjz+iYnwUAaOzgYmI
R90bzbj+R46+trrgZzZTfpgeVz5Rd0I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:14:48 2025 by rpki-client