Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
File: 277b2757-57cb-3198-b437-d291ac9f9a85.roa (raw, json)
Hash identifier: 94DH2LqUrn1ca3C25pRqtzS3TRUD8VzS3ZPOa1U8YkQ=
Subject key identifier: B9:2F:0A:47:27:A3:A3:A7:98:CD:44:66:5E:E7:C0:E0:97:1B:07:BE
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F4328584827C531A1280B944F9B001B00
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 45.42.136.0/24 maxlen: 24
45.42.137.0/24 maxlen: 24
45.42.138.0/24 maxlen: 24
45.42.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:31:a1:28:0b:94:4f:9b:00:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=c95b0b5a-c1df-489a-8254-d729b2536704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:37:47:45:37:d0:90:b6:14:e0:8d:bb:a0:
78:d9:26:19:2a:a1:8e:76:20:e1:31:f7:f5:b4:f8:
f8:9e:0d:d6:39:10:44:06:37:9c:80:c0:2b:0f:e4:
ff:ba:43:3a:ac:7a:e4:c3:c1:f7:95:43:09:95:b9:
50:48:b1:0e:ca:9e:78:4c:67:e0:10:d1:d4:93:41:
ed:b7:a2:de:1c:d5:25:71:39:d3:2b:d6:d5:f1:c2:
20:54:58:8c:e5:72:68:d9:b2:5b:b8:88:06:8e:ff:
11:51:31:7d:0e:c9:5b:e1:07:5b:33:66:29:d3:39:
51:6c:6b:c4:7a:15:a0:c7:d1:38:3a:04:db:c4:d4:
76:91:57:c5:d5:1c:35:18:19:30:21:aa:c8:ff:0a:
17:39:71:5c:f1:ad:07:b7:48:87:3c:49:5c:67:23:
4d:02:35:22:04:91:c2:5e:21:21:ca:92:4d:8d:68:
23:c1:88:ee:b2:ca:ef:18:22:19:c7:b8:c8:84:d4:
69:e4:5e:47:6f:87:8e:c5:f3:bf:4a:e5:e2:94:94:
1e:5b:55:e0:ab:47:9a:17:2e:c7:0d:d2:eb:79:11:
b0:e9:02:f8:e7:03:fb:f6:42:03:7b:62:db:f6:63:
b7:bc:42:6e:57:23:ab:55:01:f5:06:0b:e9:da:6f:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:0A:47:27:A3:A3:A7:98:CD:44:66:5E:E7:C0:E0:97:1B:07:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/277b2757-57cb-3198-b437-d291ac9f9a85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d4:9a:a1:98:95:50:a4:7a:e7:cb:78:7e:fc:48:30:a2:59:
f3:00:01:d8:c4:fd:0b:e1:a8:2f:9e:07:98:e0:22:2d:43:bc:
3c:d9:12:09:5e:ca:b3:40:40:c7:63:c4:61:c3:71:f4:cf:aa:
47:ee:97:df:0f:72:5b:cb:e9:64:98:20:fa:e6:f8:c7:69:de:
e4:de:0b:26:7d:89:6e:27:cf:10:08:99:e7:4a:e0:5e:8f:4e:
f5:c3:95:df:c4:7f:82:44:a8:c7:d3:cf:35:53:04:c3:e0:6a:
02:03:e9:6f:2a:5c:ad:5d:98:73:39:c6:9e:05:e3:7c:96:5f:
b7:45:78:5c:21:f9:9d:91:5f:8d:b1:c8:8b:18:f5:a5:6a:d3:
27:26:f1:ae:4d:37:7e:08:ca:50:4a:14:cf:62:4e:3c:c7:01:
3c:90:a2:00:ac:e5:84:98:80:0b:02:8c:bc:24:af:19:55:ca:
f2:11:7f:12:c9:91:3f:02:b5:cd:4c:87:8b:c0:21:11:7f:7b:
25:fc:e4:db:fb:d0:10:e9:55:20:cb:77:8f:89:a6:66:fc:74:
17:0d:db:77:72:c8:4e:62:f2:e6:af:9c:0b:c2:5e:6c:6d:16:
cf:6a:45:81:f2:66:b9:68:ca:26:6c:f5:e1:ac:c5:a0:19:52:
ba:f4:b5:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxTGhKAuUT5sAGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh
OTY5MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
Yzk1YjBiNWEtYzFkZi00ODlhLTgyNTQtZDcyOWIyNTM2NzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpg3R0U30JC2FOCNu6B42SYZKqGOdiDhMff1
tPj4ng3WORBEBjecgMArD+T/ukM6rHrkw8H3lUMJlblQSLEOyp54TGfgENHUk0Ht
t6LeHNUlcTnTK9bV8cIgVFiM5XJo2bJbuIgGjv8RUTF9Dslb4QdbM2Yp0zlRbGvE
ehWgx9E4OgTbxNR2kVfF1Rw1GBkwIarI/woXOXFc8a0Ht0iHPElcZyNNAjUiBJHC
XiEhypJNjWgjwYjussrvGCIZx7jIhNRp5F5Hb4eOxfO/SuXilJQeW1Xgq0eaFy7H
DdLreRGw6QL45wP79kIDe2Lb9mO3vEJuVyOrVQH1Bgvp2m8G7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLkvCkcno6OnmM1EZl7nwOCXGwe+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj
ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvMjc3YjI3NTctNTdjYi0z
MTk4LWI0MzctZDI5MWFjOWY5YTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4
ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj
YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2
N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSqIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzUmqGYlVCkeufLeH78SDCiWfMAAdjE/QvhqC+eB5jgIi1DvDzZEgle
yrNAQMdjxGHDcfTPqkful98PclvL6WSYIPrm+Mdp3uTeCyZ9iW4nzxAImedK4F6P
TvXDld/Ef4JEqMfTzzVTBMPgagID6W8qXK1dmHM5xp4F43yWX7dFeFwh+Z2RX42x
yIsY9aVq0ycm8a5NN34IylBKFM9iTjzHATyQogCs5YSYgAsCjLwkrxlVyvIRfxLJ
kT8Ctc1Mh4vAIRF/eyX85Nv70BDpVSDLd4+Jpmb8dBcN23dyyE5i8uavnAvCXmxt
Fs9qRYHyZrloyiZs9eGsxaAZUrr0tSA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:23 2025 by rpki-client