Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa
File: a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa (raw, json)
Hash identifier: cDo/wqPEfzFWxN7akCng5O0MTIpY8kjln9nOK45xWwc=
Subject key identifier: 3B:70:DE:78:DB:87:9D:8F:83:C8:34:71:8F:A7:A9:85:46:4E:F9:2B
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F4328584882808E9A7F7F73EEB8263470
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 21743
IP address blocks: 45.42.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8e:9a:7f:7f:73:ee:b8:26:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=4576aefc-efb0-40c4-a7a0-56cd9667b293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:8d:3a:fc:a1:4f:51:cc:33:9d:87:0e:0c:
76:ac:50:36:4f:8b:74:dc:77:1a:73:2c:a9:c7:80:
09:89:c9:63:8d:b3:41:56:97:ee:35:03:95:cb:2f:
e5:9a:c5:80:f1:25:3e:aa:e1:0c:d9:d8:79:5d:90:
a9:5f:b8:7d:55:ed:8a:d9:5c:0d:63:90:79:c0:69:
1d:17:83:6f:66:c9:08:69:ce:21:6d:54:93:c5:5a:
54:43:d7:1a:18:92:b9:a5:b3:83:e5:11:59:58:41:
21:ca:3e:bc:50:db:5b:31:94:41:05:9a:50:02:ca:
c0:7f:98:05:14:13:94:91:5d:c5:05:31:3e:33:bf:
61:2e:e2:cb:b1:d4:1f:76:7e:1d:03:c1:6a:72:ce:
c6:98:5d:8e:51:56:f5:a2:02:38:af:42:01:b8:d1:
88:7a:20:90:a2:3c:e5:ab:c7:e7:2b:a5:09:86:9c:
4d:18:9e:28:13:e8:46:43:3a:b9:2a:11:36:b9:b1:
59:03:3f:06:61:57:4f:1e:c2:0d:28:24:56:53:61:
3f:38:83:fd:64:6c:70:95:dc:11:83:3f:a1:1e:41:
22:14:f6:95:44:3f:33:29:52:3e:43:f5:b0:b4:21:
bf:f7:19:7f:94:26:c9:34:76:54:aa:40:fc:cb:34:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:DE:78:DB:87:9D:8F:83:C8:34:71:8F:A7:A9:85:46:4E:F9:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/a68019a7-c61a-39c2-8f6c-4d3fc7d47e5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:1f:e3:1f:fc:21:8f:c7:62:6e:8d:b9:8a:c3:cb:44:18:6c:
bd:f4:48:db:9c:6b:b9:c5:c5:a8:11:70:b1:ba:19:d4:88:e4:
b3:04:00:a4:97:77:63:e1:32:c3:35:9c:fd:cc:ed:45:d5:a8:
cc:df:ac:87:52:6e:73:22:7e:38:79:6b:22:8d:22:51:62:74:
0f:f6:e4:9b:0c:ec:96:ee:b2:af:cb:41:bf:0e:9c:ad:b9:4e:
c3:05:21:f2:15:0f:8a:3c:76:c3:3c:7c:83:c6:b8:48:2f:09:
49:76:b5:f1:f6:cd:23:82:4b:23:75:72:b7:99:bf:ea:36:b5:
36:8f:9c:5c:fe:a8:74:71:a0:99:c3:dd:45:5d:d2:29:8c:99:
2d:dc:47:2a:58:1f:23:2d:54:98:80:b7:f8:01:98:4d:29:29:
39:cc:62:d4:31:a6:cf:80:1a:66:6b:cb:11:ef:01:d9:8b:c3:
62:e7:7c:7e:50:fd:e2:13:a5:07:2d:78:99:86:ff:ad:8e:cc:
f9:8e:7f:f5:0e:6c:6e:09:aa:01:a8:d7:ee:e7:30:4d:01:00:
4a:73:01:c3:30:41:38:cc:8d:18:2b:ca:c0:e1:7e:d0:2e:c2:
ed:52:ae:6e:a4:53:9f:aa:0a:94:96:b8:8e:f9:87:47:e4:1a:
01:82:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:43 2025 by rpki-client