Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/03b401ca-d902-3849-accc-bd68ffcb57e8.roa
File: 03b401ca-d902-3849-accc-bd68ffcb57e8.roa (raw, json)
Hash identifier: vyAQGlht+Fn+dCtkUH4KIUrg6EX7mO9Dq5pOxJIYfjQ=
Subject key identifier: 0F:6E:C9:99:1E:95:E7:6E:C3:35:C0:5C:7A:C0:2A:BD:26:6D:42:DC
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858483271F3355C1496AE85F95800
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/03b401ca-d902-3849-accc-bd68ffcb57e8.roa
Signing time: Fri 13 Dec 2024 21:46:54 +0000
ROA not before: Fri 13 Dec 2024 21:46:54 +0000
ROA not after: Thu 13 Mar 2025 20:46:54 +0000
asID: 398787
IP address blocks: 45.40.144.0/22 maxlen: 24
45.40.148.0/22 maxlen: 24
45.40.152.0/22 maxlen: 24
104.238.68.0/22 maxlen: 24
166.62.104.0/22 maxlen: 24
166.62.108.0/22 maxlen: 24
166.62.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:71:f3:35:5c:14:96:ae:85:f9:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Dec 13 21:46:54 2024 GMT
Not After : Mar 13 20:46:54 2025 GMT
Subject: CN=7666d32a-329d-46af-8454-744a051bf9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:20:99:b0:45:78:37:40:7e:68:c6:73:ee:
5c:43:38:9e:e1:80:d5:f4:78:75:96:0c:5c:ee:48:
58:d6:54:5d:b4:8a:44:d9:a2:02:eb:93:1f:10:70:
46:4c:98:e5:de:d9:50:29:27:2d:e1:24:ea:5d:84:
eb:7c:1b:ae:b8:c0:62:10:96:80:f1:16:fb:10:94:
2b:56:9c:7f:04:bb:1e:d7:de:c9:ca:6f:9c:bd:3c:
46:fe:f2:78:0f:4e:74:0e:50:17:0d:2c:33:1b:18:
1d:cd:3b:b2:6e:7f:76:0a:46:fa:29:a5:97:90:e6:
3f:95:5e:97:01:2e:12:8d:32:ec:a3:64:e5:c1:c7:
03:d8:d2:23:bb:60:0e:3d:34:fa:a0:78:72:bb:ef:
6d:59:5a:fa:c8:c9:e1:0d:f2:95:49:65:37:a3:e2:
f1:68:38:8a:da:34:2c:95:a9:c8:4d:96:92:ea:96:
0a:93:55:40:be:b1:97:dc:31:ee:bd:12:1d:1c:3e:
d7:ac:1e:28:f8:86:d4:8b:68:2b:8e:9f:d4:27:cd:
77:36:13:2b:55:5d:17:2b:4a:11:6f:78:7f:a6:a3:
3e:b2:a0:3c:66:2d:c4:ac:a7:6f:af:70:1d:b4:81:
45:70:3a:81:63:6c:bf:0e:1c:68:77:69:62:72:9b:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:C9:99:1E:95:E7:6E:C3:35:C0:5C:7A:C0:2A:BD:26:6D:42:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/03b401ca-d902-3849-accc-bd68ffcb57e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.144.0-45.40.155.255
104.238.68.0/22
166.62.104.0-166.62.115.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:cc:fb:68:71:8e:04:6e:ec:fa:94:f1:00:74:55:db:ac:5f:
8c:f1:23:75:36:57:11:b1:dd:27:49:e0:bf:42:a2:a5:15:5f:
cd:29:80:c4:2d:31:38:7e:37:2a:ec:c8:0d:36:56:f9:40:75:
61:c1:59:f6:95:90:77:3a:38:e7:03:76:ef:71:13:10:ce:e1:
c6:52:38:4c:6b:4e:00:95:1b:63:61:bf:71:58:00:94:77:61:
f5:56:3f:88:ef:fe:32:c4:b0:11:8b:ba:ab:3f:e8:13:0b:bf:
08:e0:08:67:07:3a:9c:6d:d8:0b:25:e0:6a:c1:73:a4:83:ff:
63:f3:da:f7:25:32:78:5d:21:8f:6a:08:6b:82:7b:9c:9e:3c:
e2:2f:3d:ff:6c:f4:2b:18:6e:cb:d7:a7:71:63:b1:d0:b0:11:
ca:fb:35:d0:3a:7a:fa:d2:0c:f9:22:b6:25:d9:57:11:94:fc:
b6:23:c5:5d:f9:3b:91:6f:27:88:aa:ff:0c:46:8e:34:82:70:
11:a7:7f:3d:85:b2:73:32:94:91:10:fe:f6:6d:18:7f:ba:46:
05:97:d0:24:24:19:b4:25:50:29:b0:f3:e9:bf:0d:f9:0f:60:
41:33:40:6a:8a:a5:0b:fa:db:39:72:aa:2c:2a:09:01:76:ce:
fb:60:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:29:16 2025 by rpki-client