Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa
File: 7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa (raw, json)
Hash identifier: PE+NX/duYkkg6QWoIngsl5x2okYlhJTnRlTfKGzMUR0=
Subject key identifier: 1D:B5:79:3E:B3:F0:8F:B0:D9:93:C3:FC:C9:CF:00:F8:BE:B6:51:E8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695C202B68FB59F25176E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 9009
IP address blocks: 45.74.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c2:02:b6:8f:b5:9f:25:17:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=d0acf9cf-9ca6-46a2-b71c-2bd74c452626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:1c:fc:10:f3:a3:06:11:55:0d:f5:4b:85:
70:52:fc:8c:5c:43:82:86:d2:ca:e4:fd:df:4e:31:
63:3b:cd:64:6b:f7:d2:34:ff:8f:5c:be:69:63:a9:
50:34:cb:0e:2f:55:ed:b0:e8:e8:1b:26:0a:bd:8d:
81:59:9c:d8:99:14:d8:ac:66:ef:ad:36:09:53:d5:
dc:f6:aa:50:42:d5:7a:78:93:f4:1c:c5:75:16:60:
59:2c:78:36:43:35:0a:c0:cb:30:0d:11:72:9e:48:
9f:03:fc:11:49:64:c5:b9:bb:de:1c:b8:58:a6:d9:
cd:87:92:4a:88:b9:82:54:a4:ac:23:a3:2a:3b:d1:
55:ca:c5:26:75:fc:35:76:aa:94:c2:6d:d5:de:a7:
6c:36:07:bd:3b:91:08:1b:bc:80:98:f1:10:ee:9c:
ca:1d:e3:64:81:2f:d3:d2:a7:bb:e0:23:0c:0f:9a:
a6:33:e6:ce:4c:19:2e:7f:ff:5a:7c:ca:2e:16:73:
73:16:94:c0:44:e1:80:19:8e:a5:bc:bd:ca:85:ef:
6b:b7:54:60:81:1a:60:63:a5:25:a2:08:ca:65:43:
f5:89:ff:1a:d2:6c:55:97:7f:df:94:18:3a:a9:b3:
0f:a9:d0:46:8e:ec:b6:a1:2f:66:b7:90:a7:f0:67:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:79:3E:B3:F0:8F:B0:D9:93:C3:FC:C9:CF:00:F8:BE:B6:51:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:70:e3:5e:3b:8b:68:b6:6f:e5:9c:98:f7:42:6f:3a:19:9b:
2f:6c:ad:90:e7:3f:67:06:c1:22:c7:4a:31:eb:4a:53:5a:26:
97:70:94:04:49:92:7b:91:2d:4b:14:cd:a9:05:57:43:b6:9d:
69:68:27:5e:38:e0:cf:cc:74:e6:a0:3a:62:01:60:b5:76:bc:
d2:82:b6:b9:2d:a7:a0:da:2e:d7:50:18:0c:ec:16:a8:6a:b0:
b8:9c:3c:2b:1f:2c:31:d8:2e:bc:b9:09:06:9d:5c:ff:4f:cb:
0d:55:6f:d5:65:7c:6f:4d:08:c6:a3:53:03:e7:d6:28:f1:1e:
9d:a9:56:90:67:76:fe:d9:d0:70:af:2b:29:8a:ad:ab:e5:b5:
ce:55:54:1c:db:4d:18:2e:a5:c2:45:ec:14:64:3b:80:2c:eb:
14:19:36:4b:e4:38:30:c9:43:c2:c6:81:d4:b0:2d:de:db:2d:
f9:c5:60:6b:75:e1:97:d2:40:5c:92:c2:53:bf:96:fd:18:e5:
0f:0a:9d:ed:92:30:bd:07:7f:7f:3c:0d:83:eb:79:60:28:11:
fa:63:aa:c2:e1:17:26:41:e3:6f:da:57:a2:92:96:22:67:55:
aa:ea:71:ac:9f:ce:5f:1b:d9:47:c0:5d:61:b5:17:5a:2c:79:
0f:68:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:25:50 2025 by rpki-client