Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa
File: d1ce1a33-08c7-3209-8312-de68c758aa76.roa (raw, json)
Hash identifier: bS/oz2nDVwhfkS22gdwPLosZmruYBezA/9aGwvq3ldg=
Subject key identifier: 30:C4:6E:5D:43:B2:29:B4:21:B8:0E:07:CA:B1:61:C5:35:94:30:41
Certificate issuer: /CN=4a7f2143-6131-414b-81ad-be960f2a78c1
Certificate serial: 010D0C9F432858485F9AE67FA8AB36D458899780
Authority key identifier: 6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 398335
IP address blocks: 45.42.156.0/22 maxlen: 22
64.32.52.0/22 maxlen: 22
209.172.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e6:7f:a8:ab:36:d4:58:89:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f2143-6131-414b-81ad-be960f2a78c1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=ce74ce34-7be6-4de8-941c-b9231fc1b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:02:8c:bb:ae:0c:4b:95:63:7b:bc:05:2e:
4e:f7:76:8c:d4:4b:bd:fc:c5:a2:55:60:7d:d0:49:
88:d2:cd:d8:a8:f5:8e:fd:c0:0c:51:5f:5a:7c:30:
fd:4a:b9:fe:5b:86:c6:bb:37:34:cc:9f:f9:8b:14:
99:94:12:92:d5:c7:81:c4:2d:4d:cd:7c:8b:02:7e:
ae:3e:d1:20:c8:9b:31:91:43:b4:c9:4d:42:4f:2d:
67:5b:e3:ec:28:fd:23:bb:33:7a:9e:53:22:bb:c7:
c3:75:f1:33:cc:e8:db:8f:6b:27:56:03:02:bd:c4:
55:5d:d6:10:b0:9a:89:b5:e1:ae:62:81:c1:8d:4a:
57:ac:98:e3:9b:25:06:51:97:c6:53:ce:49:27:c2:
22:db:34:ae:a0:1b:f2:53:61:01:a0:b4:13:ec:56:
3c:a6:be:00:c8:9c:51:0b:25:4a:6d:da:09:19:d8:
65:ef:2a:99:da:b6:44:cd:4c:e8:01:4b:ec:c3:73:
e9:32:06:61:a0:b0:ab:79:a9:a4:53:be:d3:eb:c6:
f0:2c:6a:5c:0a:69:16:6b:88:bd:98:26:04:7f:e8:
a9:f7:3b:99:af:c5:63:62:ea:76:85:48:1f:0a:2d:
63:07:12:2c:81:db:ee:fb:9c:e3:7c:d0:b8:6b:6a:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:6E:5D:43:B2:29:B4:21:B8:0E:07:CA:B1:61:C5:35:94:30:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/d1ce1a33-08c7-3209-8312-de68c758aa76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1/4a7f2143-6131-414b-81ad-be960f2a78c1.crl
X509v3 Authority Key Identifier:
keyid:6A:C8:C5:11:64:5E:EC:E9:6E:D6:6C:DC:9C:EA:8F:DF:1E:04:F4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7f2143-6131-414b-81ad-be960f2a78c1.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.156.0/22
64.32.52.0/22
209.172.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:51:aa:5d:f7:7b:5e:90:2a:d2:5c:0a:92:b4:d4:0d:bc:2b:
c9:ad:4d:7a:9b:7d:c7:cf:fc:bf:93:c8:5e:f2:b9:88:cf:13:
c8:7b:6a:6e:af:19:9f:ed:f4:7e:d2:74:08:2d:4d:51:86:84:
10:ce:6f:5e:93:9f:05:f5:8e:b8:c6:d7:7c:d3:0f:93:eb:e6:
86:8e:d5:a0:10:73:d5:13:6a:f1:94:fe:0f:ef:2f:1a:5c:f7:
f8:c5:bd:ad:03:e3:f8:af:2c:c0:8c:7d:40:1a:1d:19:82:ee:
a0:7a:1b:6a:30:12:17:f9:52:75:4d:a7:77:b8:ad:01:20:c2:
a2:3b:cf:b6:dc:d5:06:92:77:32:56:b1:36:49:16:cc:56:bc:
3d:ba:d9:dd:1f:ce:0a:96:f1:1d:e9:0d:10:4d:5c:b7:56:b5:
26:11:ac:e2:01:db:7d:0b:c2:30:e1:3c:7a:ea:67:8d:8c:fc:
04:d9:6e:58:98:32:4f:60:9a:9a:5d:fe:46:58:33:01:f3:5a:
14:95:7b:98:e5:81:01:74:87:d7:90:94:ae:ef:37:b7:65:2f:
1b:8e:22:02:dd:a0:0f:9d:51:d5:c8:4e:99:45:7a:a6:3f:b6:
f1:78:b3:24:dd:74:8b:d4:b8:86:d9:4a:b0:3c:8d:8f:2c:1f:
7f:27:3d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:50 2025 by rpki-client