Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e4f323f-9e40-377f-afd6-c70bef8712b2.roa
File: 2e4f323f-9e40-377f-afd6-c70bef8712b2.roa (raw, json)
Hash identifier: 3wW1/IXfyj6+KWRE7FR4kv26PfpQFLaTGeKRi7hpL0w=
Subject key identifier: CC:E1:0E:3D:FB:CC:75:BA:8C:81:D2:82:10:F0:A7:A9:D7:18:8F:16
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848186A92807E84788E7342EF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e4f323f-9e40-377f-afd6-c70bef8712b2.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 212238
IP address blocks: 45.74.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:92:80:7e:84:78:8e:73:42:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=de5e0b92-badd-4402-b688-42330763b81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:a1:22:9c:24:76:4a:18:bb:f6:62:c4:84:
c3:1e:54:be:b6:bc:31:cc:5c:2f:5c:d2:91:84:72:
7b:1a:db:0e:5d:80:07:8d:29:15:7b:b4:2b:b8:85:
76:8a:27:8f:c9:0a:25:36:84:08:57:0a:30:1e:0a:
19:19:f1:22:88:e3:a1:1a:f8:1b:d1:76:02:d7:c6:
02:9e:23:e4:ee:dd:40:86:c8:0e:1e:90:16:4c:6b:
ba:b6:c8:47:25:be:6f:5a:c5:0a:0f:2b:72:09:8a:
41:76:7c:56:ff:11:a4:69:68:e8:4b:0d:b8:65:54:
97:a6:00:f7:48:31:b8:e3:4f:df:4e:f8:f1:bb:22:
5c:79:7a:3e:9c:7a:45:f2:ea:0d:6a:6f:60:c4:c0:
6d:04:8b:b7:57:94:43:25:86:42:02:73:df:55:fd:
f3:d6:f6:ae:c8:6e:a0:23:ac:4e:e7:f2:39:25:37:
64:22:28:57:d4:9d:6e:4e:09:8b:7f:92:3f:24:2a:
d9:8d:4e:95:39:65:81:88:a5:31:17:51:15:90:ce:
e4:0f:d0:a9:ae:ad:04:f1:27:9c:d5:1d:99:51:81:
cc:3d:e3:37:13:b7:7c:38:d2:d2:cb:81:de:11:47:
24:4e:8b:f7:2f:ea:91:8f:a5:e8:8f:f0:29:55:c7:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:0E:3D:FB:CC:75:BA:8C:81:D2:82:10:F0:A7:A9:D7:18:8F:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e4f323f-9e40-377f-afd6-c70bef8712b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a3:57:52:bd:6d:95:20:58:5e:72:8d:d3:b0:39:1c:a7:dd:
4a:37:a3:8b:77:91:af:9a:31:dc:15:0b:04:c8:dc:15:c2:88:
98:62:7a:38:e8:b2:47:de:4b:15:09:44:1e:ad:7b:74:77:a7:
a6:f5:ca:54:7a:8a:72:a4:45:83:b6:22:6f:56:20:62:44:ea:
6a:8c:ae:27:7e:4a:b6:4d:b7:cd:61:ae:26:f8:c0:18:41:09:
32:34:60:0e:83:e1:d7:22:67:27:e5:68:73:36:b1:c3:91:03:
31:bb:77:90:33:b1:6b:74:43:08:89:40:e3:f1:cb:f3:f1:37:
ba:9d:d4:39:24:3c:1a:de:00:07:9f:42:2b:a5:73:82:b7:67:
bf:65:36:5e:9d:c0:2e:29:bf:31:29:06:40:3d:6c:35:9f:73:
66:ef:de:95:46:d9:83:27:0d:b7:7d:21:fc:b0:36:c5:13:4a:
41:35:64:ab:d7:e0:08:7a:93:2f:1d:0e:af:43:db:70:f8:94:
10:83:76:dc:11:27:54:42:30:83:85:73:6c:b2:dc:cc:29:dc:
5e:03:ff:eb:26:de:3d:44:3a:95:37:dc:07:c0:65:e1:fc:c1:
86:0c:49:81:49:b3:80:cd:7f:bb:2d:fc:7c:33:da:63:45:4f:
a6:3d:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:58 2025 by rpki-client