Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ae4ce20-4f76-35b0-97c8-3f0fd023f3b4.roa
File: 6ae4ce20-4f76-35b0-97c8-3f0fd023f3b4.roa (raw, json)
Hash identifier: fVpDK+7wK3zkqUCbAR0TTzZG5oniPEzNn+WMCYdXEhk=
Subject key identifier: EA:05:B0:1A:E3:D2:AC:DF:6B:4F:78:17:04:B6:ED:37:25:E8:D9:74
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848748B18AF4A663BC64DF7DF80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ae4ce20-4f76-35b0-97c8-3f0fd023f3b4.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 17639
IP address blocks: 8.45.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:18:af:4a:66:3b:c6:4d:f7:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=3d721425-665f-413e-8b48-9fa118a8e37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:89:07:a6:7c:93:3e:10:03:c2:0c:84:4e:
85:80:25:97:cb:93:d0:ad:2b:fa:03:55:c0:36:b0:
eb:c8:10:05:e9:6c:d5:e2:b0:d1:5d:78:5d:79:8f:
8c:cb:95:61:dd:51:61:aa:2f:10:03:32:bb:f9:8b:
06:26:fe:1e:b1:b2:95:07:da:be:d6:88:0c:60:89:
3c:fb:0f:f7:1d:72:95:ab:94:fa:88:db:c6:1b:07:
c1:06:56:72:1d:0b:61:ef:62:e0:f0:b3:c7:75:0b:
25:d6:93:d9:c5:ba:04:f0:35:3e:8c:b4:48:0d:57:
36:58:37:62:41:8c:f4:51:20:1d:e2:fa:fe:ad:98:
db:90:ef:d0:6e:fa:85:a7:66:2f:bc:9e:2c:69:01:
85:b3:7a:f2:9f:8c:f5:8d:da:c8:13:50:e9:8f:e2:
fb:59:75:64:a8:dd:43:c0:77:4f:38:5e:d8:e0:c0:
75:ca:b2:b1:18:26:56:30:3f:cf:53:70:ae:fd:73:
af:c6:38:87:c8:18:34:4d:00:b2:56:90:96:74:1a:
34:95:ac:24:3b:43:13:51:44:63:9c:ef:c3:8e:5d:
fb:13:f1:31:71:9e:0a:7c:7c:96:fd:59:23:66:39:
76:a6:d6:f7:0c:83:57:22:71:7a:ab:a7:e0:50:90:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:05:B0:1A:E3:D2:AC:DF:6B:4F:78:17:04:B6:ED:37:25:E8:D9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ae4ce20-4f76-35b0-97c8-3f0fd023f3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.45.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:1a:fd:bb:da:33:4f:46:fb:bd:04:6a:1f:19:ba:80:40:72:
f0:80:f6:97:e6:39:ab:85:2f:1c:61:dc:e4:63:b1:1c:c5:72:
74:be:2c:ce:02:2c:11:8f:fd:2d:04:db:02:29:d8:07:aa:26:
08:85:43:ba:f0:0a:c7:89:a3:2d:c1:59:a7:f8:81:7f:ad:6d:
22:eb:8e:a1:20:72:08:92:2b:26:b5:3d:6d:78:4a:88:c6:30:
fa:40:96:82:f1:ef:11:01:bf:48:a9:86:8b:8e:c3:fc:67:66:
92:79:ed:ff:41:58:66:40:fd:de:48:44:95:29:34:42:ac:8d:
64:3d:7b:53:46:81:9e:ca:a4:37:be:6c:83:42:f2:5c:4a:73:
56:5b:fb:d7:c5:84:1b:98:d4:e4:b1:49:b8:9e:2a:c3:f3:d7:
9f:be:d6:35:b3:bb:d2:38:46:73:2f:88:87:86:e5:93:53:26:
fa:82:d6:7a:da:50:90:48:d2:96:a7:4d:aa:41:00:54:e1:de:
46:dd:11:30:b1:55:a6:a9:cd:03:02:f1:39:72:17:81:c6:67:
05:ee:88:6a:e9:52:08:a9:c0:27:4a:bc:0c:3a:28:2f:36:6b:
d0:00:c6:4a:0c:ea:3e:13:e7:a7:4d:b4:97:b0:20:83:ed:74:
63:5d:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:10 2025 by rpki-client