Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2f8cb0ba-0a2f-3d0e-937a-ab33993ebbd5.roa
File: 2f8cb0ba-0a2f-3d0e-937a-ab33993ebbd5.roa (raw, json)
Hash identifier: 4qrROvRQpAeCjQI+O3tlJ1pWGye6jNZfcCPSKUSvkdI=
Subject key identifier: 9A:B5:78:31:D1:DD:37:99:BD:C8:3F:DC:F7:82:4C:B9:9C:C7:52:E8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848222FE46089B405BFADA59600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2f8cb0ba-0a2f-3d0e-937a-ab33993ebbd5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 45.74.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e4:60:89:b4:05:bf:ad:a5:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=1fa90e6a-ed5d-4289-9ccc-13b67b6243ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:21:a2:0e:c5:17:41:ca:10:62:5b:81:5e:
a4:fb:cf:f9:2a:50:69:92:75:e1:bf:e2:bb:81:a3:
d7:5e:4f:6b:ea:c8:cf:79:f5:46:34:24:3b:a8:cf:
b9:2c:02:5f:c2:7a:3b:6b:91:56:71:ce:d3:3a:3f:
c6:f8:bb:be:fd:f9:7e:a2:17:05:f2:24:5c:71:25:
92:75:32:01:b8:85:b0:78:48:9e:e1:a3:69:f3:20:
b5:99:71:f3:65:80:de:38:97:7a:40:08:50:fd:df:
7f:d2:0d:c1:d6:06:ce:80:8d:4e:e0:aa:00:d7:02:
31:fe:98:7a:ad:76:c5:66:6f:2f:0f:a5:4f:df:0a:
b9:71:5e:77:d9:73:92:85:2f:a2:0e:d0:96:50:6c:
65:1c:2d:00:c1:77:f2:38:a4:63:3d:f5:78:2e:f1:
db:55:9e:83:41:11:9d:e7:48:9b:53:a8:77:5f:e1:
74:bd:34:71:fd:a4:8a:98:33:37:50:e6:33:bb:38:
da:f3:0f:6b:20:5d:a6:81:52:43:73:74:49:7a:6f:
ae:5e:f3:7a:89:a4:42:8b:98:d9:d7:a2:d7:c1:a8:
9b:81:9c:6f:b2:9d:c8:fe:f1:e3:a1:c2:a9:93:e0:
e1:88:8f:b7:eb:c7:12:1c:b4:1b:46:44:57:09:3b:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:78:31:D1:DD:37:99:BD:C8:3F:DC:F7:82:4C:B9:9C:C7:52:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2f8cb0ba-0a2f-3d0e-937a-ab33993ebbd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:8a:42:4a:90:98:5b:41:93:46:d9:5e:7f:0e:28:e7:15:13:
9d:89:9f:a2:40:5a:ce:a0:b9:62:2c:b7:3a:2c:ec:4a:b6:fb:
89:c1:d4:cd:75:74:cf:cb:b2:1c:40:23:be:bc:b9:9c:72:52:
11:2b:a8:92:b8:51:05:f7:51:e2:14:d9:b1:49:2b:af:42:e2:
a6:74:b5:7b:fa:bb:31:b9:39:7b:28:c0:c7:ee:aa:ec:57:49:
cb:fc:f8:c1:2a:83:4f:6e:c7:06:7d:92:02:e6:58:57:27:0f:
80:7e:b4:e9:37:cd:1b:0b:2a:98:53:7c:b2:15:7f:be:ec:74:
bc:a4:db:a4:dd:eb:69:76:df:60:b3:b0:65:6f:0e:99:57:41:
59:a4:6b:8d:05:99:1d:f2:73:38:05:fa:4c:4d:ec:da:e9:69:
f2:34:a9:31:6e:ea:44:8d:06:d1:00:89:3b:27:d6:fb:cd:e9:
73:42:dc:be:7e:0f:00:7a:b1:c5:72:a3:5e:10:4a:a9:b9:e8:
9b:a3:16:a1:83:11:2d:37:fd:c2:b9:e9:50:b2:71:a1:f6:8c:
eb:7a:61:a2:19:0f:00:73:b7:cf:20:65:01:d5:8a:b3:32:6d:
c9:13:19:59:ea:3e:c0:bd:51:98:2b:a5:51:94:f7:1f:5e:68:
c0:51:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:44:23 2025 by rpki-client