Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d69cc58f-258c-3dc0-82b8-f8455be00268.roa
File: d69cc58f-258c-3dc0-82b8-f8455be00268.roa (raw, json)
Hash identifier: 8W4YHHgcH9UwVPuMRujKED/kXlXMsmLoejtRHr/Z+1s=
Subject key identifier: 7A:22:A3:3C:16:EF:2D:F5:06:20:93:15:45:21:0E:A2:73:C7:E2:E3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE240EBEDAD5A35897F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d69cc58f-258c-3dc0-82b8-f8455be00268.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 45.74.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e2:40:eb:ed:ad:5a:35:89:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=39617abc-1771-4c43-a75b-6fcec9ee0de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:0b:d9:08:b2:68:67:1c:e5:db:38:a6:73:
f6:19:12:3b:2a:a7:ee:65:c7:b0:2a:d0:28:67:b6:
0b:d2:ce:0e:f8:dd:3a:7b:8d:75:b3:5e:7a:ad:17:
44:d5:7a:3e:42:7d:1d:7e:76:19:4d:41:e5:d6:0d:
96:4e:b6:dc:06:ef:55:17:4d:34:76:10:d8:db:4e:
a0:03:9f:69:31:e8:82:2e:06:62:79:aa:e0:30:5e:
43:ec:32:29:52:49:f6:dd:30:ec:b7:ad:e5:81:d4:
7c:07:04:7b:19:05:f5:68:a8:ab:6b:0c:39:13:0d:
da:1f:ba:ba:fb:9a:d6:4e:0a:bc:44:8d:04:fa:e7:
d2:2d:cf:f4:03:f0:ba:07:cc:21:6b:46:c4:6c:05:
26:e9:0c:7b:e8:40:8a:71:c2:66:23:a4:03:67:53:
32:30:28:14:82:d1:e9:16:77:9f:8e:48:65:4d:44:
c1:e9:72:10:64:1a:d6:ed:89:8e:c1:65:41:68:31:
c5:d8:36:1b:0a:7f:e7:f1:19:5b:6f:e0:e9:ee:05:
aa:90:72:38:72:bf:b1:c6:c5:1b:a6:c3:9e:6d:63:
65:59:f4:0d:09:e9:ca:3e:c7:29:ce:8f:f6:f2:af:
43:bc:59:ba:0d:22:af:17:59:c3:3e:00:70:31:e3:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:A3:3C:16:EF:2D:F5:06:20:93:15:45:21:0E:A2:73:C7:E2:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d69cc58f-258c-3dc0-82b8-f8455be00268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e8:7a:6f:ba:d9:d1:99:65:b1:61:9c:70:c0:d2:09:e2:9e:
28:b2:1e:61:15:f4:00:ec:30:01:01:bb:16:52:b7:29:16:e9:
f2:0e:00:03:d6:cb:b7:3b:c8:00:4e:a4:39:89:fc:66:97:83:
bc:11:f9:bf:ac:b2:ba:5b:24:ad:5d:75:77:61:2a:cf:56:88:
4e:7a:f8:5e:1a:35:76:54:22:b3:e1:81:5e:00:6e:96:fb:39:
38:b6:7b:5f:4f:ea:8e:cf:92:ad:6c:c9:54:c5:fa:ff:3a:d2:
30:78:0e:03:d7:6b:5d:50:af:89:4f:74:b2:77:95:fb:5b:42:
5b:40:84:bb:74:6d:4a:5f:2d:69:a3:0d:7c:95:70:e1:a4:06:
d5:b3:ad:a4:b5:c8:05:8e:4c:2b:9d:1e:b8:f1:87:45:02:34:
a7:ed:45:8b:5a:42:e0:1c:52:cc:89:49:5b:16:4e:eb:87:e2:
f9:02:28:98:e2:6c:b8:4c:e0:6d:70:1c:93:cd:7b:ca:1e:28:
4f:82:64:ed:20:57:e0:35:00:33:85:6d:55:64:26:51:73:a7:
79:2a:6b:8a:3d:30:b6:88:c6:e9:af:be:f5:15:b6:f4:0d:4f:
df:55:4f:09:fb:81:46:be:20:a6:79:ba:95:e8:56:0c:45:52:
d1:4f:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:05:10 2025 by rpki-client