Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/2b6eec24-74e5-3602-9e65-2ce32e261580.roa
File: 2b6eec24-74e5-3602-9e65-2ce32e261580.roa (raw, json)
Hash identifier: gTy8jaElmqphHyiHNX/ROSM9aH9oBJ9TeXFLzqI4QFc=
Subject key identifier: D2:E7:56:2A:FC:BD:0C:93:9D:2D:AB:50:04:5B:D5:4D:46:D0:26:A7
Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial: 010D0C9F432858486AC598EA414B4E834838FB80
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/2b6eec24-74e5-3602-9e65-2ce32e261580.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 399924
IP address blocks: 45.41.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:98:ea:41:4b:4e:83:48:38:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=496d5e2f-1b84-4e93-bc02-93daf2c54c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4d:fa:2f:db:10:f7:66:f8:cf:07:7e:d3:25:
16:3a:db:aa:0a:3f:4e:a7:3a:02:0e:df:06:c0:f4:
b7:af:90:46:0e:44:1f:c2:44:e6:09:7a:6f:43:de:
b2:15:7b:7f:0c:53:68:c2:d8:45:24:5e:ea:ff:eb:
b9:74:c7:0d:ae:6d:1b:6e:2a:aa:16:4d:cd:4f:53:
ec:1a:13:b8:f6:14:f5:2b:9e:8f:06:a3:96:62:c0:
cf:06:68:0e:87:82:eb:19:39:74:75:be:10:83:9e:
5c:07:6d:1e:2b:44:44:42:91:cd:c4:08:4e:70:00:
a7:34:b1:57:06:a8:3a:f0:25:e2:20:a9:2b:70:3c:
28:e6:55:f7:48:41:94:8c:f4:f0:71:ce:ac:3e:b1:
c2:58:15:54:6a:18:83:ad:be:82:50:47:c2:3e:28:
e5:32:90:23:bc:45:4a:ae:f5:5f:22:55:a8:cc:1e:
45:52:8a:cf:6a:d7:09:12:74:5e:18:2c:fd:40:74:
4a:d6:fb:82:a0:c5:09:0a:5a:8c:59:6f:75:5f:d3:
a2:b5:3a:87:cc:9f:9c:2a:8b:97:f6:ca:af:ba:c6:
90:f8:eb:f5:0a:67:5c:ed:ff:b2:37:3b:f6:a2:32:
db:f6:6d:e9:fb:c9:91:dd:1e:64:89:b2:24:a0:dd:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:56:2A:FC:BD:0C:93:9D:2D:AB:50:04:5B:D5:4D:46:D0:26:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/2b6eec24-74e5-3602-9e65-2ce32e261580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
X509v3 Authority Key Identifier:
keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:65:6c:be:42:d0:18:5d:eb:9f:ed:ce:d8:f5:9d:76:9a:9c:
a0:6f:0d:c2:42:b7:15:e1:d4:40:1b:dc:30:95:45:83:c6:87:
2b:2a:ef:63:15:60:3c:61:dd:6b:88:a4:b8:8a:e6:40:3e:74:
28:15:07:45:a8:3a:23:51:ab:59:b5:26:f2:51:76:34:55:fb:
db:03:0e:f2:2b:88:1f:6e:26:e1:d5:55:7c:af:63:42:af:95:
ab:35:84:16:b5:88:b8:0e:bd:d0:ac:a1:9b:8f:ee:fa:5f:43:
04:a9:3a:62:82:c3:e7:3e:38:4b:ea:04:b5:80:50:28:6b:02:
6f:7b:a3:ec:0b:e7:0e:6f:c3:3a:56:c4:aa:da:60:37:49:2c:
86:49:df:ea:f0:75:92:90:04:aa:70:e3:4c:b8:19:bf:19:2b:
03:79:ff:09:0c:e4:d9:df:bb:ec:e7:a4:2f:9f:a8:6a:38:d0:
ab:7d:ed:d1:53:aa:dc:f3:06:8a:b3:d0:29:68:2f:d4:df:b8:
3c:ed:3b:43:34:24:1f:93:8e:2b:05:ce:9a:24:1d:6a:ef:94:
ed:6e:55:ae:e5:31:2d:4d:0c:f4:a9:9f:7b:98:a3:24:e7:4d:
13:e2:ba:aa:3c:90:4b:0f:0d:a4:7b:ef:83:40:f1:2d:0e:6b:
db:80:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:27 2025 by rpki-client