Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa
File: 5f4d50f2-be50-305a-8739-6a8bf1882be6.roa (raw, json)
Hash identifier: 2DMoOe1O1dcKT9iBI1s9F7RCyP+js7d32kX9hKnPzfY=
Subject key identifier: 1E:4A:D3:1F:3F:C4:F7:59:F1:82:E7:83:09:ED:4A:84:E0:0A:A3:8B
Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial: 010D0C9F432858487CEB2B48B33F457A4E94E880
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 45.223.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2b:48:b3:3f:45:7a:4e:94:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2df4bab5-0944-4b78-adaa-71fef36befb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:5b:1c:5b:be:37:44:17:f6:3f:c0:f8:69:
ec:fa:9a:13:9a:66:06:62:47:2d:e8:86:81:41:fa:
11:1e:98:a5:a4:98:b4:8d:8a:29:ba:36:12:06:8c:
9a:37:0d:31:e7:de:83:61:33:10:81:93:ae:6c:57:
ca:0e:57:05:80:e7:1e:13:a9:10:f5:e5:f6:ba:88:
0b:4d:25:63:77:ce:4a:8a:58:e4:da:d5:2a:3a:aa:
61:cd:bc:2b:d6:1b:d1:a6:84:35:fa:51:29:ae:87:
82:9e:f9:f0:f6:c7:a2:63:63:cc:35:fa:66:c1:18:
01:d7:ca:e2:b1:21:79:d2:fe:bf:25:a3:c6:e1:21:
50:db:12:1a:f0:3d:32:3d:ce:1a:9c:eb:cf:d6:1f:
68:c1:f3:71:92:39:7b:6d:2a:2d:2e:6e:5e:59:9d:
83:65:60:a5:3d:1c:72:2a:59:50:0a:1e:78:e9:8a:
43:5b:e7:3c:6f:41:b5:6e:8d:23:8f:cf:3b:36:61:
88:db:a0:43:fa:bd:3f:8f:18:50:b1:c0:2f:a6:b8:
50:84:88:72:1e:6d:62:38:29:15:eb:88:9b:1f:7b:
7e:d1:cb:8a:1c:26:0b:87:6c:e4:28:23:a0:a0:4d:
b6:49:d6:48:a1:45:05:56:19:b3:be:64:f4:61:0c:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:D3:1F:3F:C4:F7:59:F1:82:E7:83:09:ED:4A:84:E0:0A:A3:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f4d50f2-be50-305a-8739-6a8bf1882be6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
X509v3 Authority Key Identifier:
keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
sbgp-ipAddrBlock: critical
IPv4:
45.223.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:34:b5:15:2f:d7:43:a5:0c:40:4e:79:9b:31:8b:81:77:ab:
a2:42:fe:26:bd:52:c0:24:9d:d5:81:b0:53:dd:c5:bf:16:79:
72:ce:60:05:69:06:5b:80:06:eb:5a:fe:bd:b7:2b:6f:f2:11:
6c:32:41:c7:b9:23:46:c4:1a:bf:7d:31:5f:2f:d2:05:03:df:
63:94:ec:d7:cd:7b:a1:08:77:bf:4a:73:ae:4d:da:06:b8:74:
a1:b2:9b:71:2e:5a:89:da:2f:a6:38:80:9b:d4:ec:46:a8:ce:
cc:c6:ec:4a:56:5d:93:ce:84:f1:74:74:7d:0a:f1:4a:cc:69:
04:1a:0d:16:fa:2e:68:34:e3:86:e2:c7:7a:27:95:2a:47:20:
e8:dc:f3:c6:38:71:44:1e:b8:94:54:d6:c7:89:c7:ad:a5:0b:
9d:89:3c:39:3f:d2:b4:62:d3:cb:e6:8c:5a:ac:e5:20:91:8a:
6a:74:d2:78:fb:da:50:81:4c:78:47:75:23:6b:c6:2c:e2:84:
fa:c6:e1:98:77:d7:7d:6a:f2:48:dc:d1:95:89:e8:e1:73:7a:
11:c2:8d:68:c0:0c:86:ee:da:5c:77:0b:a5:6c:5c:76:61:3a:
07:07:74:79:73:9c:58:dc:b3:24:32:b7:b9:9d:fa:e1:e7:25:
47:c0:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:05 2025 by rpki-client