Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa
File: 1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa (raw, json)
Hash identifier: XzjOnZ9biC5jDLzyvvR41g4xjnYNQNRI+sWHyujoCGc=
Subject key identifier: 7B:49:13:2C:34:09:2D:F5:4E:41:6E:28:7E:17:4F:C5:EE:B5:44:FE
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848100A8DC0EE50CB56548BFA00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 270564
IP address blocks: 45.40.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8d:c0:ee:50:cb:56:54:8b:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=8a8f8965-c0b4-4c00-9dd7-cdfdfbba1f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:7b:27:a3:84:9b:92:98:66:61:9a:41:61:
3f:23:fd:66:35:96:43:74:25:48:8e:e3:b1:cc:15:
4e:61:97:78:a2:e8:39:31:b0:4f:7b:dc:c6:bd:12:
94:ed:24:3a:80:89:db:c5:0e:6e:06:5c:ce:b5:bf:
1f:e7:b6:80:32:18:58:cf:96:10:15:a7:6b:8e:77:
15:61:f0:42:5a:fe:e7:d7:42:1b:19:db:e1:0b:85:
ad:1d:68:f9:1b:1b:44:c2:b9:a7:aa:98:bd:98:01:
7e:76:07:f9:97:7b:64:85:5d:60:d8:8b:1c:69:02:
7e:c6:74:1f:c6:88:4a:97:dd:3a:01:eb:27:de:29:
13:e4:ff:ac:a2:dc:14:34:9a:f9:27:8c:b4:4b:51:
90:94:38:49:12:2b:cd:91:74:07:2f:73:09:77:6a:
2c:16:67:78:a8:8d:bc:ea:37:80:e3:70:ae:3b:96:
70:68:53:ae:0e:18:75:80:1e:77:24:e5:c8:15:d1:
81:84:af:e3:c0:9c:18:e2:ba:d4:75:b8:7a:83:93:
ea:11:2d:36:69:31:c4:a7:8b:5d:7c:69:1c:4a:7b:
d2:50:7b:3e:9e:6e:46:a3:9d:34:79:f7:fa:08:da:
28:10:de:da:c4:6e:2d:b0:f8:f5:66:01:27:31:66:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:49:13:2C:34:09:2D:F5:4E:41:6E:28:7E:17:4F:C5:EE:B5:44:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1dc5a428-360f-39aa-adc8-a92fdcc700a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:69:df:0c:8f:4d:3b:e2:91:ec:48:85:c9:c6:57:e7:a3:8a:
3a:70:a4:6d:02:96:b6:d8:6e:5f:0f:51:61:fa:9d:c1:a3:23:
99:8d:54:9b:fb:8f:8d:d9:a4:d9:ba:22:0c:73:3b:3e:e2:0d:
7a:07:0b:b4:14:31:b1:2d:cf:07:66:5d:1e:80:92:98:48:b7:
c2:84:1c:13:df:62:bc:f5:14:13:5c:e4:f6:41:32:99:eb:44:
89:91:7d:11:68:ef:1d:24:e1:54:06:10:72:56:ce:71:36:22:
d9:d0:f7:38:a9:25:75:0b:31:38:e9:04:af:77:b6:6a:9f:77:
79:43:3f:f5:7a:18:2b:d6:9e:aa:55:24:21:ed:2c:86:01:1a:
48:d7:71:97:c6:bf:fd:2c:5b:98:6b:1b:c4:e3:42:6d:f1:61:
4e:36:39:90:f6:ab:ca:9b:92:2f:ec:86:26:c9:d0:fc:78:1a:
fd:4a:43:7d:7f:95:7d:10:7b:82:9c:6c:7f:a7:d9:4a:36:5c:
de:ea:5e:39:d7:24:e8:c9:47:5e:b3:b9:38:34:5b:8b:01:25:
ad:81:db:ba:8d:5e:ef:07:02:36:64:06:67:54:7b:d5:db:a7:
2b:b4:4a:0f:4e:9a:27:76:18:b1:e1:bd:69:da:86:5a:88:41:
23:a1:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:15:22 2025 by rpki-client