Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa
File: b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa (raw, json)
Hash identifier: B2vw7rG6Rw7WG8gG+dJvz3EkEwyOJ/3yw5Os2Ui3kRk=
Subject key identifier: 1E:C9:2A:61:D5:2E:9C:B6:CA:D2:70:A5:F0:CB:B3:A0:DA:C1:CD:05
Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial: 010D0C9F43285848BA563C6298CB5D5DD7CD7400
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 396948
IP address blocks: 45.61.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3c:62:98:cb:5d:5d:d7:cd:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=90c22126-0e1d-4e1c-beb5-ba5fd69006a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:3a:63:89:25:a1:de:3f:b4:3c:95:ea:a9:
5b:5e:93:98:7e:02:cb:4e:a4:0a:a8:b4:1d:66:cb:
44:21:b6:33:e4:62:9a:5e:9e:1d:2c:e7:3e:33:23:
84:97:07:08:1d:fe:df:53:2e:3d:32:a5:04:23:f8:
af:cd:c0:33:88:b4:e8:9d:b2:3b:e5:f3:d9:ef:7c:
aa:98:52:00:92:7c:54:b4:3e:bd:53:82:b7:86:2f:
4b:64:0e:b7:5b:84:cd:8a:cf:19:ea:03:3a:55:1b:
27:fe:56:e0:5e:f7:13:1a:09:5d:cb:cd:28:fb:fa:
3a:a5:2f:d6:7d:fb:f9:1f:a1:2c:21:80:63:e0:06:
62:a6:27:94:44:26:b2:a7:b1:87:4c:83:fc:13:a1:
11:eb:bf:e6:83:f7:96:75:01:d8:ee:f0:97:ef:3c:
7f:3f:49:26:ed:82:e9:9b:c2:0d:00:40:91:e0:a8:
58:f1:72:0c:41:7c:06:ff:72:06:49:6b:7e:d4:0b:
42:be:83:5c:3a:f1:04:2f:5e:35:41:e0:b4:0b:82:
0d:29:ab:7c:2d:bb:85:a4:49:d6:96:5b:99:e6:2f:
07:f4:f6:a2:30:f7:b0:c8:e8:1b:08:f6:57:12:8f:
7f:cf:50:47:d4:5f:02:b7:53:44:4c:b5:67:21:40:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:2A:61:D5:2E:9C:B6:CA:D2:70:A5:F0:CB:B3:A0:DA:C1:CD:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/b5305974-b6a0-3146-97ed-a648a7e7cbb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
X509v3 Authority Key Identifier:
keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f8:51:00:0e:dd:28:d8:a9:e7:20:d9:2e:15:77:b5:ed:4f:
df:df:4d:0d:4a:5b:cd:f9:34:73:be:e4:17:b9:48:ec:c1:56:
d9:f6:90:9f:b9:d1:11:16:89:26:68:09:9b:e5:37:2f:59:46:
31:ba:e6:e6:d7:5a:cf:a3:99:0f:c1:a0:71:48:80:9b:b4:c4:
51:aa:9e:09:5e:b7:8d:52:c1:55:93:8f:41:68:fe:dd:39:95:
23:d9:ec:a9:7e:2a:16:b6:fc:11:5e:d0:a0:60:a3:86:6f:cc:
2b:32:73:67:c9:18:bf:8a:8e:02:76:86:08:f7:ad:23:15:b0:
9f:e6:a7:de:ac:20:1c:d9:92:20:17:4d:ac:d6:8e:7e:96:53:
17:2e:18:45:fc:5f:52:bf:4d:85:97:1a:20:27:e1:a4:58:ac:
ca:ad:7f:1f:b0:fb:cc:25:97:95:2b:a7:e3:f8:41:da:e3:1c:
12:8d:ee:b8:77:53:e5:f1:d8:64:b1:c3:b1:f0:07:5d:f7:76:
5d:6c:2b:8d:ff:bb:82:bc:20:d9:80:82:26:e7:74:3f:41:06:
21:55:90:34:15:48:18:51:3f:d1:f8:bb:3e:0b:79:37:63:a9:
32:72:68:8f:12:51:d9:fe:09:e6:da:de:cc:c5:71:0a:61:08:
68:20:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:52:32 2025 by rpki-client