Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
File: f82f5044-0067-38a4-988f-171ba4f694e4.roa (raw, json)
Hash identifier: YWlkQ1RstIRJSXQpIucJgNWa8Cgf0YS4KgGQyP/l6P8=
Subject key identifier: E6:D3:C6:2C:E0:FE:FD:E8:CB:07:9C:CA:95:37:CB:5B:F6:08:75:E4
Certificate issuer: /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial: 010D0C9F43285848530AF1CAFD291E8C1A23A300
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 45.223.208.0/24 maxlen: 24
45.223.209.0/24 maxlen: 24
45.223.210.0/24 maxlen: 24
45.223.211.0/24 maxlen: 24
45.223.212.0/24 maxlen: 24
45.223.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f1:ca:fd:29:1e:8c:1a:23:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=8adec4ad-0f60-4bce-8b90-5bc24b4bf49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:94:0c:eb:9f:31:d2:b2:3e:2a:f1:84:47:
23:3a:4f:6c:b9:2d:70:12:e9:67:e6:bd:15:eb:90:
8a:c7:61:84:08:8f:e6:0e:30:5d:f3:99:b3:2b:f0:
e0:50:2a:e0:14:1a:c9:cc:c0:96:62:76:d1:f7:4f:
61:2a:4d:6a:63:de:7a:17:06:bc:86:89:0e:e9:b7:
59:b8:a7:bd:da:52:9e:7f:51:a2:1b:86:f0:3a:ae:
83:47:5e:bc:af:19:f1:a6:f3:79:c9:df:31:0e:ad:
c9:c2:5e:1d:29:6e:44:d4:b0:38:76:d3:b9:2b:d1:
e1:9d:ce:33:b5:d2:13:64:95:6f:92:ef:3e:a5:76:
65:78:d9:99:a5:70:4f:13:fe:56:da:c4:bb:d4:c5:
65:c6:06:49:f6:24:2c:bf:a0:5c:40:9e:c8:2d:5c:
be:2e:ea:b1:97:75:05:e4:7f:d2:2c:da:0b:cf:62:
f3:6b:d2:6c:e7:a1:a5:21:5f:2e:cf:c0:1a:26:d1:
a8:aa:b3:75:b9:ef:80:dd:08:b6:13:f6:9d:64:dd:
75:6d:4e:5f:c2:0a:15:fd:24:31:d8:75:25:32:00:
dd:b8:d8:c6:d9:1d:31:6c:46:48:56:e0:71:f2:2a:
bd:c0:00:ba:d5:75:46:4b:90:d0:3c:0f:41:a3:21:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:C6:2C:E0:FE:FD:E8:CB:07:9C:CA:95:37:CB:5B:F6:08:75:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
X509v3 Authority Key Identifier:
keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
sbgp-ipAddrBlock: critical
IPv4:
45.223.208.0-45.223.213.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:72:85:05:cf:35:a1:82:8d:3f:44:b3:11:48:a8:89:53:31:
67:8a:01:88:b4:69:ea:e6:c4:c3:fc:c8:0c:24:da:6b:c3:d5:
46:57:18:8e:e8:9f:19:23:0c:5a:05:58:51:ff:fb:61:44:94:
f0:5b:00:18:91:4e:bf:66:d5:2f:85:86:c0:55:f8:34:41:10:
c0:9d:ca:e4:6e:88:7b:13:c8:1a:ee:22:9f:64:d3:86:e7:32:
5d:e0:ee:8e:b8:cc:ee:66:89:0a:22:08:6d:2c:24:b6:9f:5d:
14:be:36:c4:94:2e:39:32:19:94:2f:3d:b2:7a:95:8a:91:78:
1c:99:a8:cd:ad:7d:38:7b:d7:00:3a:8e:34:e2:b6:74:fb:fc:
41:e2:50:7f:93:1a:96:fc:9b:12:62:d4:4d:ab:30:cb:fe:49:
42:dc:d4:f9:fc:05:e1:c5:fb:1a:22:fb:b0:58:73:ad:b1:e3:
c9:34:89:7f:2a:a8:df:01:b7:66:6a:48:e1:5d:ab:0e:c9:7c:
f8:6a:fa:a6:4a:f5:f9:28:65:69:e0:82:3d:02:0d:f8:80:c2:
1d:be:1a:d6:62:14:4d:31:08:45:8d:8e:5d:4a:65:36:0d:f6:
b1:66:cb:08:d0:c6:05:16:29:29:73:e9:63:22:6b:ba:32:a6:
e0:7f:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:08 2025 by rpki-client