Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9ef21d06-701d-345b-9dd4-aa9144994d9d.roa
File: 9ef21d06-701d-345b-9dd4-aa9144994d9d.roa (raw, json)
Hash identifier: Qg4uEq3+aG2PY97Q7ScRVwoYdvBpwjVWMkNRiISrK6g=
Subject key identifier: F9:7F:02:E9:AF:F1:60:CB:01:61:26:C9:92:3F:4D:EC:77:2B:C6:D5
Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial: 010D0C9F432858480EA5112344D860400CA9DE80
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9ef21d06-701d-345b-9dd4-aa9144994d9d.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36007
IP address blocks: 45.61.48.0/24 maxlen: 24
45.61.56.0/24 maxlen: 24
146.71.76.0/24 maxlen: 24
209.182.216.0/24 maxlen: 24
209.182.217.0/24 maxlen: 24
2604:bc0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:11:23:44:d8:60:40:0c:a9:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=03ca35a1-6d24-427c-834a-8c1a1b023c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:88:ae:72:27:73:22:7d:61:50:66:4b:55:
3d:f9:41:d3:87:57:df:00:43:2c:93:0e:7c:29:70:
ec:78:c5:9e:a6:0b:ba:b5:21:80:c4:fb:f4:6b:90:
76:6b:3b:63:fb:80:00:5b:fc:e0:90:e6:9d:6c:43:
23:39:61:42:3c:d4:93:0f:2d:ab:92:67:15:29:1b:
67:0c:03:59:08:9c:02:09:93:bc:e1:0a:0c:4f:4a:
ac:7a:21:7b:6a:1b:19:a4:ed:c5:ec:80:89:ba:85:
46:6f:b4:18:de:36:3e:b7:a8:34:4b:89:2e:49:c5:
2f:90:42:43:3c:ea:c4:95:b8:a6:e0:f0:fc:fd:a1:
d1:fa:ab:06:fc:75:bd:7f:af:74:69:b3:e2:fc:fb:
dc:66:f2:9f:05:c8:a8:b6:6c:4f:c2:e5:b8:21:36:
f8:d8:84:fc:9f:b7:29:5b:a9:d7:f4:76:0a:cc:b8:
c6:f7:66:76:da:67:8a:b6:39:42:4e:fe:bb:d0:29:
a1:10:f7:1d:24:e2:c5:c1:a8:ae:2f:af:68:b9:39:
37:31:77:05:c9:9e:e0:50:d6:6d:87:7c:c1:fb:b5:
51:52:3a:06:38:7a:f7:96:a6:ba:d7:58:67:aa:c4:
50:48:39:93:f6:18:c3:34:15:0f:37:4a:04:6e:00:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:02:E9:AF:F1:60:CB:01:61:26:C9:92:3F:4D:EC:77:2B:C6:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9ef21d06-701d-345b-9dd4-aa9144994d9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
X509v3 Authority Key Identifier:
keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.48.0/24
45.61.56.0/24
146.71.76.0/24
209.182.216.0/23
IPv6:
2604:bc0:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:32:31:81:f6:99:e0:3f:a0:f5:d7:a8:3d:49:93:94:a7:97:
bf:08:97:98:86:c5:9c:b1:e8:6b:17:06:5d:c5:99:b9:37:94:
dd:e4:1f:e2:79:af:ab:34:5f:86:4f:89:8c:fd:ef:d4:af:c7:
a1:3c:36:d8:ce:93:33:ac:32:d2:4d:14:76:ed:be:47:59:23:
32:39:63:eb:92:9c:5f:1b:fb:45:40:5f:30:7c:63:a9:7d:44:
53:e8:b5:59:84:53:8e:a2:55:06:b9:c1:80:57:19:b1:ca:50:
6d:5d:d4:f9:5a:b9:17:91:3e:bd:58:f6:68:6a:8b:dc:b3:0a:
81:58:1e:00:80:a4:14:89:0f:cf:ff:d1:79:da:db:40:90:e1:
8b:fb:ec:11:f1:3a:99:13:6f:e9:4b:a4:60:d9:8b:fe:d1:6c:
59:d9:41:4e:ab:fc:30:ac:b1:1c:e5:e0:61:80:73:e2:9e:6b:
bd:0a:5c:ea:5d:ea:7e:3d:b1:1d:73:90:a3:52:0b:cf:dc:8b:
8b:04:78:71:b3:ec:c1:c6:73:fc:a0:24:6e:a3:31:a9:61:81:
d9:e5:2a:bc:97:06:16:b2:d3:bf:7b:8c:c6:e1:b8:be:3e:8c:
bd:00:82:9f:c5:3a:96:f1:3e:8d:45:68:d3:1d:9c:bc:98:f2:
26:e0:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:25 2025 by rpki-client