Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa
File: c17bd2db-0678-321a-bb95-79f534638930.roa (raw, json)
Hash identifier: p1e5jkLVY+rrixePh0YOBXHKHYVNHQlU3BZXQrjW9E4=
Subject key identifier: 2A:19:39:53:55:85:49:A1:F0:0A:29:3C:12:93:EB:89:24:CC:12:00
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484C10356DADC0206D24548080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 9009
IP address blocks: 45.74.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:35:6d:ad:c0:20:6d:24:54:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f207d668-d081-46cc-82c5-ff2d3f616156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:95:a3:8c:b6:56:7b:ad:7d:d0:de:53:7a:
09:7b:2e:f1:69:03:9b:41:0f:65:72:50:cf:32:15:
14:d7:4a:4a:61:cd:52:fa:b3:45:9a:aa:fd:5e:e2:
81:bb:c0:f5:4a:c8:34:81:91:e7:e4:31:40:8c:48:
2d:0a:ca:7c:be:9d:d8:ec:3b:10:79:ce:12:96:cb:
0e:52:04:bd:c5:d4:61:5d:4e:a0:3f:fd:23:b4:8a:
fb:ca:ef:8f:23:5f:34:ef:8b:d2:5a:d7:bc:5f:df:
22:2e:00:78:e9:a9:db:fe:51:7a:53:20:37:f1:a3:
a3:fb:fd:11:46:f1:51:b1:09:72:cc:ec:02:a7:7f:
ef:30:63:61:31:95:b1:e1:72:74:f9:e4:80:e6:7d:
94:63:03:bb:fd:b8:4c:bf:96:88:d3:38:1d:ac:aa:
87:bf:a8:88:54:d5:6f:00:52:d2:54:ef:4a:07:ec:
a2:f4:0a:c3:34:05:96:bf:98:22:4d:3c:f0:ce:77:
bd:23:0f:c0:29:d4:d2:ce:f5:91:aa:26:e6:21:c0:
05:93:ff:f7:0a:48:be:1a:d5:dd:a4:5e:17:aa:70:
93:85:65:07:90:0f:78:51:8b:9c:0d:93:18:43:6a:
a1:86:81:58:bc:63:5a:02:d1:0b:2b:6c:30:16:01:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:39:53:55:85:49:A1:F0:0A:29:3C:12:93:EB:89:24:CC:12:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:19:7e:fb:3f:dd:28:52:32:7b:8a:43:89:ae:8a:1a:52:8d:
3e:14:f0:1e:5e:d5:db:5c:78:03:de:65:5b:ee:97:cb:da:da:
4e:42:73:c7:09:8e:29:78:f6:df:49:e7:53:83:f4:fc:fe:45:
9a:8d:d0:cb:34:ce:a5:ac:42:1b:51:bf:fb:97:cc:ae:56:1f:
b8:c9:1c:fb:ce:0c:d9:61:a2:5e:f3:a9:ad:1c:75:49:cc:1c:
42:7d:bb:61:d6:95:e7:9e:f7:e6:9b:83:84:d1:0e:ec:12:81:
e4:f4:e7:12:89:0d:29:37:25:5a:7e:91:dd:71:b4:98:c6:b7:
0f:1a:9b:f2:2a:ba:42:4b:c3:d2:a5:67:16:ee:be:31:dd:06:
fd:36:e9:a6:ea:3b:28:ad:6d:11:c1:ff:66:cb:6b:3d:11:87:
43:db:f8:46:cd:ef:01:a3:1a:ad:31:7f:1b:bc:65:f2:09:7a:
70:56:5c:4f:37:43:c6:a0:d3:62:d9:6a:20:96:c5:b0:4e:bb:
73:ca:7f:b6:a2:57:53:0d:33:1c:23:13:2d:3d:31:3b:3f:a8:
9d:b5:b2:e2:53:d1:71:01:6e:73:6f:f1:f4:aa:30:44:d7:ad:
8b:e9:42:7f:fa:4c:0d:8e:52:12:10:d9:0c:5a:1a:9d:8a:38:
6d:89:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:47 2025 by rpki-client