Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
File: c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa (raw, json)
Hash identifier: ZgjEZkzo644acbc+LnMZ8UYDLmzPQSj2TBzuWkBWdko=
Subject key identifier: 5E:BC:0D:C6:10:E2:92:AC:13:39:74:11:5B:D3:94:96:1E:E5:D0:2A
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584854701E39FFCFE53F1F68DD60
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 10747
IP address blocks: 45.42.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:1e:39:ff:cf:e5:3f:1f:68:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=34105727-021e-4728-93b8-588c6fe50c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:f2:4d:c9:2e:7b:a9:76:0e:02:f1:c0:8d:
50:35:a5:a2:e9:16:79:a2:b6:d7:87:cf:13:ca:a1:
0c:34:cc:1b:d8:00:3e:19:33:b5:6e:b6:86:05:09:
65:59:6a:05:54:a5:14:a2:11:d9:4d:54:68:da:8a:
49:b2:13:ad:d3:16:eb:39:6d:78:50:7e:5a:24:98:
eb:4e:8d:31:1c:18:d4:37:34:de:51:d1:0f:ac:23:
53:5d:b7:63:b8:db:51:ca:04:91:75:a1:af:75:6a:
cf:3c:e4:c9:51:fc:ab:38:9e:1a:08:4b:1a:76:f0:
21:9e:8b:e2:5b:cd:8d:3f:b8:07:1a:62:17:09:fc:
ba:52:f3:d9:df:42:02:b4:ea:8b:c4:fe:fc:d0:7e:
72:01:ad:aa:07:f2:89:e4:18:70:02:90:9b:e5:3d:
b6:77:e6:66:c0:3c:3c:3e:15:51:92:0f:f5:19:44:
6e:3f:19:82:a3:31:80:9b:27:d7:5c:16:a9:04:c9:
1e:54:ba:14:31:c3:48:46:a9:44:4e:ed:01:4a:ef:
a0:dc:ca:f2:64:a8:c2:7b:ff:a6:3d:87:86:98:5e:
42:0f:9d:35:98:51:b7:ae:5a:5c:af:d9:9b:52:4f:
63:33:7b:c9:a7:74:9f:51:a4:26:6f:3c:d9:4d:4c:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BC:0D:C6:10:E2:92:AC:13:39:74:11:5B:D3:94:96:1E:E5:D0:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c7deab7e-d3b7-33fb-a2a6-fb8f6f91d319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:50:28:2b:ad:ea:0f:99:9a:8a:f8:33:0e:9c:84:cd:ed:a7:
b9:5d:09:d1:a8:9c:84:61:07:30:4b:e6:36:80:d3:ed:d9:be:
ed:e5:76:6b:cd:91:d3:e1:6f:a1:f3:25:fb:32:0c:f9:1c:3b:
48:b0:c8:49:65:c7:6e:88:fd:67:de:2f:99:6f:45:ac:cb:5e:
0f:0f:d5:72:45:e4:b0:1e:be:4d:55:a2:bf:42:0b:13:f7:36:
4f:b0:d0:56:50:a7:96:e7:83:9b:0e:8a:3a:a2:73:6d:b9:b4:
7d:1a:00:b5:53:35:fb:42:fb:13:77:fe:a9:d9:33:31:64:d0:
0d:90:eb:6e:a3:eb:26:8f:c1:ff:50:91:47:57:d2:9f:6d:63:
01:46:c6:7e:21:0d:32:80:10:05:22:89:4c:cb:20:e2:24:64:
6e:b8:6e:45:b9:63:69:29:0e:18:8c:71:43:8a:28:ec:56:a9:
e1:b6:b1:c4:a4:dc:00:f4:5b:c2:3a:be:55:67:ae:d9:ff:eb:
72:b7:9d:f8:1f:9e:77:ff:b0:94:97:b6:73:a4:25:32:f1:bd:
a7:0b:c0:0b:25:9a:29:5c:62:fe:22:c0:79:e4:1b:db:a7:da:
94:e7:f4:5d:94:30:0d:c8:66:e8:84:81:49:8c:31:d4:81:41:
e6:86:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:44 2025 by rpki-client