Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa
File: e2967c2e-2806-30f4-a0d3-1c441f02033d.roa (raw, json)
Hash identifier: 1jAGJ/ryMmqfqdEb0NZyBR1XEHSOEMv7yQb7+b/hrZ0=
Subject key identifier: EF:48:D3:27:DD:1A:32:D5:06:8D:D5:AA:22:01:05:3B:30:08:A5:4B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584851A580680DE939BC4E2A8A80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 9009
IP address blocks: 45.74.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:80:68:0d:e9:39:bc:4e:2a:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=48314ddc-aee8-4a56-b0d3-9f9b31a8af12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:32:fd:97:a1:3b:8b:a6:9a:18:22:fb:7c:
2b:cc:8c:73:3e:a9:f2:55:30:af:60:59:76:c1:74:
86:01:f5:53:a4:5d:6d:6f:6f:bb:a4:b4:2d:80:5c:
10:f7:43:5b:65:ef:0c:20:eb:1a:cd:ae:97:0c:dc:
74:f8:bb:f7:16:09:7b:ec:aa:43:af:d3:98:69:9e:
f6:b1:40:b5:08:4d:81:09:d3:18:a5:24:34:15:20:
94:66:c8:2a:fd:49:00:4e:37:84:d8:42:19:18:72:
55:db:e2:b7:ae:6e:96:e6:6a:38:53:4a:7c:e5:a5:
b1:21:89:4f:a5:a3:92:f6:e1:3c:54:59:3b:7a:3a:
d9:a6:d1:e0:14:59:75:eb:6e:6e:77:5c:04:35:8b:
d6:42:b1:e4:d3:a3:da:0a:9f:28:25:e6:7d:cf:2e:
b6:a6:42:aa:73:bf:9c:98:4e:77:25:68:2c:69:8d:
03:60:fc:c1:0b:57:22:87:3e:22:cb:b6:7e:12:ba:
38:bc:18:4b:23:e0:8d:ad:f4:e0:fd:40:9e:97:58:
ba:30:7b:dd:a2:cf:98:fe:c3:f6:7d:a0:e3:14:fe:
04:16:f0:3a:65:6b:90:c1:1b:da:d8:26:3b:f9:20:
b0:c2:a2:1a:0e:3f:81:71:d5:97:a7:3d:00:0b:d9:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:D3:27:DD:1A:32:D5:06:8D:D5:AA:22:01:05:3B:30:08:A5:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e2:4a:8a:32:9c:dc:8d:bf:b2:0c:69:5d:ba:e4:18:60:71:
0a:9c:06:42:b6:95:04:35:80:db:35:7e:42:ee:44:71:a1:ae:
ba:cd:95:25:ce:8d:9e:5c:a7:4c:90:7a:f8:be:d6:e9:0e:54:
8a:10:20:06:3c:4a:13:16:b3:38:e2:68:16:fd:94:5d:df:04:
b7:6e:1c:c8:a8:71:ec:35:56:07:e9:75:2b:1b:1e:4e:c8:5e:
5f:b0:21:5c:ac:24:ab:8b:67:8b:c3:3d:a7:61:cd:c4:8e:e2:
43:95:d3:c3:d3:1c:be:6e:b1:43:dd:a4:49:24:60:f7:d5:b8:
0e:79:a4:a9:a5:d5:c0:20:1f:28:a1:04:bb:34:8c:f3:fc:9b:
fe:61:02:88:71:fe:27:c0:5e:e7:69:87:d7:44:b3:3d:60:0f:
7a:45:4b:94:de:01:bc:fa:e5:00:4b:91:bc:4f:55:6e:6e:3f:
a5:e1:8c:d5:1f:1b:ec:fc:2b:36:c8:4e:b0:a7:c9:aa:32:e3:
bc:d9:f0:95:b3:d6:24:9a:a4:40:ed:cf:97:9c:37:f9:f1:f7:
e2:bb:65:8a:8f:1c:c3:1c:2b:c1:35:05:7f:7d:bf:8c:4a:b2:
7f:4c:93:7b:1d:13:07:f5:84:d8:9d:8b:65:41:f6:31:2a:e2:
ef:4b:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:21:43 2025 by rpki-client