Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f713dc5-d1a8-3198-be92-e47e57a551fa.roa
File: 5f713dc5-d1a8-3198-be92-e47e57a551fa.roa (raw, json)
Hash identifier: f7QsZvBFB0oxTWrNKgOcdM1ZleKRlsSjtTFvUpboyoY=
Subject key identifier: 7E:62:A0:BC:AC:6E:9C:40:90:92:8D:9F:FF:7B:94:4C:01:2B:07:72
Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial: 010D0C9F43285848530AF1F0F3DFF6C4F0A04A80
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f713dc5-d1a8-3198-be92-e47e57a551fa.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 45.223.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f1:f0:f3:df:f6:c4:f0:a0:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=b9efba9f-ef8a-4fd0-902f-6f7241023cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:41:94:2e:e0:11:db:81:9e:5c:51:f3:56:
fb:a5:da:b4:ad:78:f4:5f:4f:33:44:a2:85:3e:c4:
e5:46:78:d7:ce:06:3d:4f:7e:f1:26:08:d6:65:f7:
9b:31:5d:4a:be:df:68:e3:0e:3e:ee:a9:65:6f:fa:
26:84:24:ff:ae:41:68:9d:b0:95:e7:ca:1d:f7:27:
89:1b:5d:83:45:26:41:aa:ca:4e:08:6c:23:e8:f7:
92:46:8d:c3:19:5b:23:bc:48:11:c1:3d:5a:3b:02:
02:c0:72:ef:6f:82:cc:da:12:74:52:f8:71:12:e7:
1c:4b:5b:e4:53:72:cf:ad:7d:98:e9:a9:a1:68:ed:
57:dd:61:a2:dd:a6:ba:7b:ce:0a:2d:34:1b:0f:fb:
a2:00:8a:bf:18:51:6c:10:bd:84:be:3c:69:94:cb:
86:04:2b:67:3e:9c:cf:a2:40:31:b9:94:72:ab:78:
87:82:6c:88:d5:60:f0:bf:22:6c:3f:c3:02:d6:49:
9b:c2:ab:4e:51:cc:3b:f2:62:8e:74:fa:1a:04:8c:
cb:aa:79:c5:4f:0d:7c:08:04:28:0c:f0:fb:55:56:
d3:28:74:35:58:6a:0c:4b:fa:45:2f:a2:2d:b7:b0:
22:cc:9f:36:11:52:7c:cf:d5:19:43:8c:d6:29:20:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:A0:BC:AC:6E:9C:40:90:92:8D:9F:FF:7B:94:4C:01:2B:07:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5f713dc5-d1a8-3198-be92-e47e57a551fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
X509v3 Authority Key Identifier:
keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
sbgp-ipAddrBlock: critical
IPv4:
45.223.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:82:cc:36:2e:d6:15:5d:65:02:55:0b:25:60:eb:77:e0:81:
9b:b2:ac:88:84:3c:0f:f7:d2:19:6b:40:a0:21:2b:5f:5a:4a:
b5:5d:85:51:7a:87:b3:fb:f1:9f:6a:c7:db:3d:89:6e:fe:4d:
7a:9f:b6:7e:e4:42:e0:e2:fd:36:4e:2d:5d:fe:a1:8b:f3:61:
03:15:a1:71:b7:58:c8:6f:f7:fc:d1:33:8f:e2:49:bd:51:d3:
b8:8f:33:a2:35:59:54:2e:f7:94:c3:d7:5d:d0:03:f7:ba:97:
ef:06:c9:0c:c4:31:af:cd:4e:b5:0f:78:32:ad:85:cb:1e:0a:
01:11:f2:52:ef:b2:9c:25:8e:13:f0:fc:01:8c:50:d7:3f:77:
2b:77:6d:34:c7:02:55:cd:b5:97:04:c1:70:cc:e2:5c:6e:0a:
f8:dc:a2:6f:70:f5:97:19:33:4a:c8:ae:7b:44:eb:c8:70:72:
2f:fa:0b:05:74:f0:6c:ec:5f:07:01:52:fa:82:56:e2:03:21:
76:a2:9f:cb:a7:51:b4:5e:e2:c1:6b:20:90:24:7c:39:7e:33:
9e:de:0d:f1:0c:a1:9c:ca:d0:ae:24:34:56:45:05:8b:af:8e:
26:45:28:32:52:a7:50:e4:bc:94:d0:7b:eb:48:fc:0e:c8:61:
c4:3f:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:44 2025 by rpki-client