Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa
File: 43eb115a-2968-3e76-bd9b-b0925731c484.roa (raw, json)
Hash identifier: p4ZDpda1ebx0ob7qjo/hejZHgy1zy770ArXnjpiBB3w=
Subject key identifier: 2E:CD:DC:79:8B:5C:C1:E9:2F:9F:8F:4B:3D:26:DF:D7:88:5A:64:9B
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F432858482C66A6CDFAC2C9C349D6C400
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa
Signing time: Wed 11 Dec 2024 17:49:17 +0000
ROA not before: Wed 11 Dec 2024 17:49:17 +0000
ROA not after: Tue 11 Mar 2025 16:49:17 +0000
asID: 0
IP address blocks: 45.41.248.0/22 maxlen: 22
68.69.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:66:a6:cd:fa:c2:c9:c3:49:d6:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: Dec 11 17:49:17 2024 GMT
Not After : Mar 11 16:49:17 2025 GMT
Subject: CN=f2b09cf0-ae65-4b2f-b8cb-ca896c978334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:b7:a3:6d:9b:c6:3d:d4:ad:70:30:0d:f7:
1f:a9:46:d3:86:f4:cd:38:4c:4c:8a:ee:d0:1d:c3:
d5:57:a5:96:5b:34:6a:aa:f9:cc:06:59:dc:4c:07:
95:3c:6e:a6:85:9b:73:40:4b:19:4d:9e:a8:cb:66:
49:68:05:6a:9c:1e:96:04:ca:49:8d:3a:bd:b0:1d:
1a:32:2a:d9:8d:94:5a:5a:c6:2b:a0:18:41:3a:53:
13:26:f3:d6:b3:de:b2:c9:01:81:c8:f9:81:bb:cb:
81:0b:4d:cc:40:11:3b:f8:eb:c9:27:8f:3c:bd:5d:
dc:1c:09:a9:67:6a:71:54:aa:78:32:ee:a2:b9:5c:
b7:12:fa:38:6a:f7:4c:41:c9:7b:2a:29:62:56:1e:
f8:de:47:0d:8b:0c:70:b7:88:4a:f0:b5:02:0f:f9:
c7:15:30:6b:5a:8e:5c:7f:ee:27:c8:fa:fe:1c:2f:
21:6e:fc:2b:79:05:5d:3b:4c:ae:ca:43:de:ab:9e:
6e:67:53:39:c9:aa:ab:44:38:b4:ae:50:34:bf:2f:
80:08:98:c4:88:62:4e:c8:1a:a4:3c:23:ee:ad:50:
11:7a:60:3b:b4:03:6b:f3:82:27:e7:9b:ef:59:ba:
9a:79:e5:0a:9e:8b:fb:d1:89:00:e6:f2:88:6d:d3:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:DC:79:8B:5C:C1:E9:2F:9F:8F:4B:3D:26:DF:D7:88:5A:64:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/43eb115a-2968-3e76-bd9b-b0925731c484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.248.0/22
68.69.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:56:9b:e2:fb:f4:80:b0:16:0d:ab:dc:60:48:df:d1:70:03:
99:4d:d2:27:75:86:47:4a:a2:8a:42:f4:e1:c6:f0:66:59:24:
a1:49:7a:aa:6a:88:5f:de:f2:64:36:b9:c4:18:2b:a9:e0:06:
bb:32:50:dc:60:06:89:0b:54:19:a9:1d:ce:2b:ef:5f:fb:24:
2a:2f:de:71:24:4a:f8:0a:49:ef:50:eb:5f:12:15:fe:70:62:
8f:4c:38:3f:55:ba:2b:89:35:d0:30:9f:a7:9b:ad:f5:f2:86:
22:4c:63:aa:55:2e:32:74:ca:66:98:b3:8d:1b:d7:63:ea:1b:
37:a0:70:fc:80:12:64:02:47:7f:4a:e5:a7:3d:ec:83:b4:8a:
ff:40:5c:9c:97:12:34:70:0f:18:bb:1d:7d:b6:59:8d:2e:49:
1c:4c:cf:ce:97:15:1a:4e:f1:33:ef:e1:d8:59:c1:8a:8d:b6:
f4:5a:67:8f:3d:7e:56:a9:b9:0a:93:b4:a1:b9:b5:fd:55:74:
06:0d:f9:64:2c:90:c3:77:52:bf:c0:c4:1d:6b:92:55:a2:0a:
0b:72:d7:57:57:01:63:69:b4:a7:35:42:89:64:9e:30:c9:b5:
f0:ba:b4:7c:c2:3f:43:4b:fa:2c:ae:c3:82:75:c5:f9:79:47:
a1:b1:a0:82
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgsZqbN+sLJw0nWxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4
OTc2MB4XDTI0MTIxMTE3NDkxN1oXDTI1MDMxMTE2NDkxN1owLzEtMCsGA1UEAxMk
ZjJiMDljZjAtYWU2NS00YjJmLWI4Y2ItY2E4OTZjOTc4MzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3C3o22bxj3UrXAwDfcfqUbThvTNOExMiu7Q
HcPVV6WWWzRqqvnMBlncTAeVPG6mhZtzQEsZTZ6oy2ZJaAVqnB6WBMpJjTq9sB0a
MirZjZRaWsYroBhBOlMTJvPWs96yyQGByPmBu8uBC03MQBE7+OvJJ488vV3cHAmp
Z2pxVKp4Mu6iuVy3Evo4avdMQcl7KiliVh743kcNiwxwt4hK8LUCD/nHFTBrWo5c
f+4nyPr+HC8hbvwreQVdO0yuykPeq55uZ1M5yaqrRDi0rlA0vy+ACJjEiGJOyBqk
PCPurVARemA7tANr84In55vvWbqaeeUKnov70YkA5vKIbdMhKwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFC7N3HmLXMHpL5+PSz0m39eIWmSbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh
ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNDNlYjExNWEtMjk2OC0z
ZTc2LWJkOWItYjA5MjU3MzFjNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy
NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4
ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj
YTU2ODg5NzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSn4AwQC
REWwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGxWm+L79ICwFg2r3GBI39FwA5lN0id1hkdKoopC9OHG8GZZ
JKFJeqpqiF/e8mQ2ucQYK6ngBrsyUNxgBokLVBmpHc4r71/7JCov3nEkSvgKSe9Q
618SFf5wYo9MOD9VuiuJNdAwn6ebrfXyhiJMY6pVLjJ0ymaYs40b12PqGzegcPyA
EmQCR39K5ac97IO0iv9AXJyXEjRwDxi7HX22WY0uSRxMz86XFRpO8TPv4dhZwYqN
tvRaZ489flapuQqTtKG5tf1VdAYN+WQskMN3Ur/AxB1rklWiCgty11dXAWNptKc1
QolknjDJtfC6tHzCP0NL+iyuw4J1xfl5R6GxoII=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:21 2025 by rpki-client