Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa
File: 886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa (raw, json)
Hash identifier: iNfPdBp3dwDaLUXOOXe9O/1VRv+EE5caKe8uGM8MpTk=
Subject key identifier: 2D:20:DE:4D:F9:C8:E3:DF:73:A1:C5:B9:1D:03:6B:1D:C0:0E:4B:0B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848222FE4200B7C92CEC82252C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 45.74.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e4:20:0b:7c:92:ce:c8:22:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=530cbae5-c255-45a6-8677-b8e924e3da2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:41:67:c6:8a:00:10:79:ac:d5:83:51:44:
1b:3a:dc:4e:8f:ce:ba:9d:4d:92:ff:d1:93:c7:b6:
47:d0:86:9f:ae:9a:43:95:0e:f6:91:9b:9c:91:dc:
b6:1b:b4:2d:cf:5f:7c:00:0b:4d:77:cb:5b:a1:0c:
26:e7:e4:74:dd:e7:93:2d:ef:7c:c9:1c:c9:a0:61:
5a:92:5a:c0:18:ac:63:0e:91:ee:4a:4d:68:01:1a:
be:fa:33:2b:f5:32:4e:bd:3d:03:ea:9a:3c:16:0c:
e3:c7:d7:1a:1a:49:31:d2:98:b0:f1:eb:d2:51:e2:
07:b9:fd:9c:2d:82:90:d7:d5:b5:38:a9:87:2f:87:
44:4a:df:67:7b:14:d3:55:c2:8d:e6:d3:18:bd:5a:
d1:cf:f9:58:94:5a:29:5e:f0:52:7f:20:2a:ac:db:
81:4d:73:c2:62:3e:fb:0f:d2:52:9a:63:43:d8:ac:
6b:57:79:b2:23:08:3a:bd:97:0d:3b:ee:18:72:61:
07:d7:35:a4:67:d4:df:3f:20:b6:ae:cf:bc:94:45:
ad:e4:14:a3:59:35:93:2d:e3:15:96:ce:03:ee:98:
0a:1f:aa:e7:4f:9f:15:79:c3:cd:01:c1:84:00:71:
a5:47:6d:0a:56:14:08:76:da:40:f4:b7:7d:9c:af:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:20:DE:4D:F9:C8:E3:DF:73:A1:C5:B9:1D:03:6B:1D:C0:0E:4B:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/886a2b21-bb9a-3eda-bd5a-6fc3faf0479f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:32:42:41:72:14:fd:02:97:d8:fb:b4:7d:cd:5b:95:1d:d0:
e0:6d:a1:cc:25:2f:e3:68:7e:3a:b1:b2:1f:49:51:86:15:54:
98:ca:d9:0f:c7:59:09:4a:55:36:a6:9c:01:f2:f0:44:db:8d:
03:5c:ac:36:05:01:6c:34:61:37:84:2d:5f:2d:b7:db:b0:03:
26:9b:21:24:44:4c:3d:22:ea:aa:9b:80:03:e8:7a:b1:0c:bb:
6f:3b:bc:6e:f3:d9:79:f6:9e:a9:4e:87:47:ce:b1:a6:b8:bd:
c1:10:d0:80:e6:d2:ea:7b:37:92:8b:cc:53:3a:82:fd:f9:af:
71:97:7f:8c:9a:69:33:ec:c0:ee:3c:2b:cc:77:4a:70:97:02:
b8:9f:49:25:1e:c3:aa:0f:3c:7e:71:a8:f2:b9:e1:94:8c:7b:
e7:d2:77:15:66:bd:6c:86:49:06:30:76:2b:98:7a:90:8f:c9:
5a:86:11:6b:17:c6:89:66:de:7e:58:d3:9f:a5:65:dc:b1:46:
f3:dd:63:10:39:0d:34:5c:03:bc:2d:b2:4b:a0:76:b6:16:84:
04:7a:38:89:ea:13:b9:1d:75:2d:f2:5d:80:dd:99:42:74:6e:
7f:e8:f0:82:cc:b7:84:39:c5:0b:e8:71:50:c2:54:c3:10:cd:
7c:cf:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:18 2025 by rpki-client