Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa
File: 66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa (raw, json)
Hash identifier: 3ibuxiO4fH8jFHp4eg+y9YX/7kV4pRszZ6WGyaHEUqw=
Subject key identifier: 80:79:8E:A1:0E:F9:14:29:8A:72:AD:90:1B:70:F8:19:A1:4F:CF:D9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848222FE4411D3197A326A08280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 45.74.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e4:41:1d:31:97:a3:26:a0:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=a1b51d53-9ec6-4e3d-ab6c-afc16f5f11e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:da:fb:08:86:23:81:2b:5d:f6:38:37:36:
4f:47:95:67:ff:31:d3:65:48:76:51:e9:ab:e6:97:
21:dc:c4:0b:f5:2f:0e:ae:9a:67:e4:28:5b:92:41:
52:d6:71:72:84:87:8a:5a:54:e6:cd:ce:7f:2e:5d:
fa:fd:05:83:af:3c:0e:09:77:2d:7e:2d:78:11:e3:
77:f0:c3:09:21:5c:99:a2:9a:aa:4f:7f:ce:aa:b0:
69:76:52:a9:ce:0a:1e:85:72:83:71:d2:5f:63:ee:
16:79:b6:76:80:09:3b:00:5b:a6:13:f0:b5:22:d9:
2e:0c:1a:96:41:60:1c:c1:47:79:3c:a7:d1:d3:11:
1b:11:1c:69:ef:a1:1f:16:1d:3a:9c:3c:bd:d3:d5:
00:71:92:07:03:5f:08:ac:69:56:80:77:bd:00:69:
47:85:2f:e3:25:84:9d:26:6a:19:d1:e1:b2:d2:af:
3b:73:de:f4:0e:3e:a6:45:a5:3b:52:f0:ea:2c:15:
2d:32:be:66:f8:d1:eb:68:5c:83:97:0e:95:7d:cd:
ee:40:c1:52:c4:af:2f:04:8a:42:c3:e0:1b:e9:be:
0d:2a:c9:38:88:01:39:26:f0:53:da:18:b5:8f:73:
32:ab:f6:2b:de:38:b0:93:68:03:78:9a:2f:ed:73:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:8E:A1:0E:F9:14:29:8A:72:AD:90:1B:70:F8:19:A1:4F:CF:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:f0:e8:a9:5c:4a:01:57:88:71:76:19:ca:69:01:b9:a5:a2:
69:6d:cc:3e:d3:9a:0f:2b:6e:a5:45:00:e1:54:0c:ea:eb:bb:
8c:b4:5c:e2:bc:42:f1:c9:1d:e5:bd:19:33:b8:15:70:9d:99:
13:cb:ee:a9:66:d5:14:4e:3d:fb:2d:5f:a2:53:22:3c:84:90:
00:b8:32:c2:9c:32:0d:28:aa:ca:67:c6:f6:5f:a2:74:e8:ab:
69:83:40:31:c0:5b:b8:e2:28:c1:62:41:dd:98:ea:49:b9:38:
9b:1c:1b:5f:77:26:93:e1:f6:c8:dd:c8:44:5a:0a:02:07:2b:
18:1f:d3:8f:e7:a5:1f:b6:bd:ed:ee:b0:19:ed:d6:55:6d:d6:
ba:36:c5:24:d1:57:f4:5d:b3:10:53:66:6b:bd:1a:63:34:1c:
fd:ae:c9:c3:9c:2a:17:e0:55:b8:4c:8c:e7:74:c4:a8:68:fe:
39:05:e2:af:ae:e9:2c:25:34:9d:2b:d1:e9:e4:c0:64:2f:ef:
f5:c6:ea:20:2b:40:f6:6b:8b:4d:1f:47:c9:77:88:f1:ae:da:
44:df:80:16:00:a4:47:e7:df:36:1d:8f:c9:83:ab:56:32:22:
45:64:d0:fd:4b:74:64:c6:8a:90:31:3d:db:62:1e:10:4a:42:
ee:40:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:16 2025 by rpki-client