Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
File: aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa (raw, json)
Hash identifier: LftS14TczegORWeIt0UHMSi0nc4SHLlPmAd6LB9FRBc=
Subject key identifier: 95:79:CE:4E:13:65:E5:BB:58:68:19:87:19:8A:26:9D:E4:6A:88:1F
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285847FC7F9F1B302A60162ABD55B4
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 62610
IP address blocks: 45.40.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:9f:1b:30:2a:60:16:2a:bd:55:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=a06fd481-410c-4c2d-842c-f39c39ae4ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:ec:7c:5e:1b:dc:ba:47:3c:52:ea:cb:5b:
fd:79:96:b8:c7:9b:48:80:0e:b2:c3:34:99:3c:5e:
ba:62:7e:4d:e7:93:27:83:4e:5d:8c:06:c4:ee:57:
37:a2:49:80:2f:2a:04:1e:e5:78:56:8f:1b:1e:d1:
79:9c:d5:d8:c4:d6:6a:f0:3b:49:ea:23:47:42:cb:
be:99:1f:a6:1a:b4:9d:92:ae:30:02:1f:0b:b3:3d:
a9:83:3e:ec:bb:62:1e:3b:44:91:f0:e9:55:00:00:
3e:b8:b5:a0:1d:86:1a:06:1f:13:af:b5:f4:40:42:
74:63:02:2f:14:81:f2:8f:12:be:61:9f:b4:fd:6b:
af:26:6c:77:70:bc:9b:93:1c:d0:95:30:36:c9:42:
0d:08:a8:fa:26:d9:db:97:c0:68:d5:56:4d:40:bb:
10:29:9a:55:2e:52:1f:9e:27:1e:df:ad:c0:19:38:
7a:93:54:58:1f:a6:73:01:6e:06:e7:8e:34:71:3e:
a9:55:09:a0:32:b9:de:2b:6b:ec:3c:69:98:d0:a0:
55:95:35:0d:51:e4:6d:7c:ca:4a:7c:c0:a1:d1:4b:
a2:de:d9:f6:15:b3:c0:c7:89:8f:21:c0:43:c1:81:
bc:f0:9a:99:56:8e:c2:bd:80:da:6a:40:0f:af:7a:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:79:CE:4E:13:65:E5:BB:58:68:19:87:19:8A:26:9D:E4:6A:88:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:0f:14:9c:62:be:08:7b:26:d1:a4:0c:6c:2d:72:c5:fd:28:
dc:a8:c2:e9:81:54:5e:77:1f:58:c1:8a:09:9a:2e:4a:de:fa:
c4:0e:c2:4f:42:7b:0e:68:70:0e:39:39:c5:04:d3:6a:4f:29:
4f:80:77:3d:55:6a:36:e9:b0:42:fb:e3:d1:cc:28:cb:f9:ac:
eb:b7:a8:bb:f7:41:01:26:aa:4f:e2:ac:ca:2a:a6:77:f4:4f:
96:86:60:5b:3c:dd:8e:7c:d1:ae:93:8e:b1:e9:f7:8c:83:1a:
b6:83:b6:78:85:fc:56:98:49:ba:ed:21:7e:a2:7e:d7:fd:7e:
07:6a:85:a2:e4:32:e4:bc:9d:ee:e0:22:68:fa:06:59:23:fe:
09:31:d5:15:5c:93:59:01:8e:aa:20:13:01:0a:1c:9d:89:59:
28:d1:2d:e4:d6:52:ec:9d:0d:e4:00:92:19:cd:c4:9b:f4:be:
b4:66:4a:41:ef:93:50:0d:63:2a:79:a9:7a:e5:3c:de:01:33:
41:71:db:94:18:90:fb:2b:81:c4:85:e8:92:19:f5:d6:1b:28:
b2:5a:72:1d:dd:33:d6:10:e8:47:6f:0a:a4:7b:dd:c5:5b:76:
54:9b:a8:d5:c7:91:67:a4:8c:1a:16:0b:36:66:e4:fb:fa:62:
23:89:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:46 2025 by rpki-client