Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/b1092ca2-b958-3c5d-8bdf-636565de7687.roa
File: b1092ca2-b958-3c5d-8bdf-636565de7687.roa (raw, json)
Hash identifier: h028SI5ANzhETdgxAkH9Vf/B+hv7JTiGvRUnXcjVhwI=
Subject key identifier: D8:F1:9D:5C:7B:15:6A:FC:B2:85:6A:C6:73:B4:11:29:7D:0E:B5:79
Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial: 010D0C9F432858486AC598D3FD9B06CDDAB5F6E0
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/b1092ca2-b958-3c5d-8bdf-636565de7687.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 399924
IP address blocks: 45.41.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:98:d3:fd:9b:06:cd:da:b5:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=d29b0f69-46db-46c3-9979-487da507a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:d7:7c:74:b1:96:27:5c:58:63:20:bb:8c:
6f:34:5d:d8:f0:ee:64:a8:0b:8c:f8:d6:00:5e:d7:
82:3f:66:8f:cf:bd:cd:49:60:8d:d4:b8:ec:74:02:
aa:09:cc:27:f0:8b:bb:bb:aa:8a:12:7e:4f:03:33:
06:39:50:80:43:6f:c5:dd:a6:fd:0f:9a:96:59:12:
e6:e2:65:59:6b:74:6f:cb:53:0c:2b:d2:e4:46:eb:
92:9f:25:be:53:06:d0:0e:e8:1e:ee:d0:ed:45:41:
22:7b:7e:d7:0a:5a:c9:04:2e:31:c4:37:c4:58:69:
6f:7e:3e:0c:48:87:35:04:d0:8a:29:83:50:3d:00:
9b:20:a1:13:ef:ac:f9:e1:43:c0:9f:3e:02:57:7d:
87:8d:15:9c:9e:08:54:04:a2:4e:fd:87:b8:9d:ad:
93:73:83:d7:4d:76:8c:ea:46:42:9c:7d:7a:c9:67:
00:c3:30:9b:87:d2:43:c2:e6:7b:63:b4:56:89:df:
99:5c:a4:81:53:ec:64:67:ae:26:e1:07:ce:07:0c:
d9:4b:c4:51:74:85:86:b5:98:29:45:82:23:8d:b8:
5c:d2:a4:5a:d2:f1:18:44:58:b1:32:71:48:0e:0e:
64:a3:7a:e3:24:03:9d:79:ad:99:10:ce:2d:5f:f8:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:9D:5C:7B:15:6A:FC:B2:85:6A:C6:73:B4:11:29:7D:0E:B5:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/b1092ca2-b958-3c5d-8bdf-636565de7687.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
X509v3 Authority Key Identifier:
keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:15:67:f7:84:85:00:9f:d2:13:8d:56:0f:98:3e:71:f5:a3:
aa:2d:03:5b:39:24:87:50:dc:86:1c:d9:7e:02:d8:92:af:d0:
42:80:97:4a:75:0e:ab:05:4f:5e:d7:0b:03:76:4e:a7:70:2a:
10:ab:c3:92:16:92:7c:89:06:5d:ca:85:76:62:92:ee:e4:d6:
f3:56:a7:6e:02:ad:6b:48:9f:17:3c:0a:ea:33:25:d9:a6:9d:
4e:c4:4e:d0:2f:ec:8e:94:0d:60:54:50:91:3f:ef:64:e7:bf:
23:ba:5f:59:17:a2:00:7d:da:74:ce:77:21:85:3a:bb:13:da:
c2:a7:4c:a7:2d:76:72:9c:46:a3:3c:04:ed:44:1f:d7:c7:96:
e8:4e:7f:6a:f0:ac:ac:cb:83:82:e3:a5:4d:ef:6f:01:cb:67:
b8:d3:21:10:b4:df:1a:e5:ba:a4:6a:b3:16:1f:ff:07:20:b5:
24:97:cd:93:f0:3d:d5:94:38:df:90:bc:06:8f:b9:31:4b:cc:
6b:27:32:41:8e:9e:33:21:7c:6e:76:b0:c2:14:bd:a3:2a:50:
fa:bc:6e:ab:75:06:f9:27:3d:87:c5:84:d7:b8:4e:a3:77:ee:
87:b8:66:db:22:82:97:85:2f:2f:8d:fb:bc:75:96:ce:13:29:
b6:d4:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:00 2025 by rpki-client