Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa
File: cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa (raw, json)
Hash identifier: WZl+udV34AvLX4kGINk2P2DAmCyHmKdU03tTDdtN6bs=
Subject key identifier: FE:56:88:AC:22:76:E3:BF:A9:50:59:8E:EB:75:76:A5:13:F1:EA:AC
Certificate issuer: /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial: 010D0C9F432858484D759A863C6E44DAD66A0880
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 7018
IP address blocks: 45.45.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:9a:86:3c:6e:44:da:d6:6a:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=28189fd1-28f4-4717-b5a8-5b0297f8d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:e3:2a:30:ac:07:53:c1:e3:ec:0e:89:7f:
07:78:d4:6a:ad:22:73:57:ba:48:d9:e5:21:fb:91:
68:dc:c6:f8:e7:41:f8:c5:3a:5b:29:54:00:1c:b4:
73:4c:ce:25:8c:df:ab:eb:b0:c4:e9:c1:43:cf:14:
b6:40:3a:5b:6e:89:9a:19:47:be:b4:0d:8e:96:fa:
0e:37:dd:91:3b:78:ed:09:32:53:22:f1:9b:b4:a7:
ea:7e:04:5f:2d:38:6d:3b:72:29:8b:10:c5:c5:61:
50:f2:4a:e1:64:0a:6a:10:d3:c0:ed:59:15:cb:75:
11:d2:16:8f:a4:9e:c3:49:91:34:f5:05:0e:31:60:
4a:20:49:4c:c6:09:9d:b3:8e:45:a2:e2:2c:1b:00:
34:c8:59:6f:a3:aa:52:3f:5e:74:10:4e:8e:90:a5:
d1:4c:d7:c9:34:91:8f:db:15:00:20:a8:bd:05:28:
6f:01:3a:83:b7:40:41:98:c8:da:f6:d2:1f:1f:16:
a3:12:0f:6b:f4:4e:bf:43:20:b3:67:3b:63:ca:06:
9d:bb:fe:8a:0a:af:e2:8b:02:2d:20:d7:72:ee:52:
90:02:62:05:7f:08:ef:4a:fe:0a:c8:f5:0e:91:77:
58:08:4e:fb:60:04:b6:a0:52:47:e8:d9:02:11:34:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:88:AC:22:76:E3:BF:A9:50:59:8E:EB:75:76:A5:13:F1:EA:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/cd9d4c82-aa04-35e5-91be-f9ec82b9df42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
X509v3 Authority Key Identifier:
keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:3a:a7:ca:0a:78:30:71:2c:ef:72:ff:1b:a6:f9:f0:db:af:
53:a3:94:14:92:e8:f5:60:f4:d1:0b:78:38:3d:34:22:da:dc:
5c:9d:c6:78:59:f0:4a:43:26:80:6f:e3:d8:8f:37:26:e4:85:
0d:ec:48:6c:ac:4f:8e:d4:cf:51:bf:51:65:2b:07:81:f5:b8:
10:15:ea:e6:07:13:d4:14:46:40:6a:46:28:a4:59:4f:3e:33:
fb:53:e5:af:d4:bc:f4:9c:14:dd:ad:9a:9c:dd:04:b9:22:6a:
36:c0:d1:84:52:b9:6a:6b:66:16:65:aa:8b:df:73:d2:f9:ad:
e6:b4:3e:7e:e8:1d:d2:26:e2:c0:c0:3c:f7:5c:12:28:c2:6c:
8f:2d:dd:66:98:8f:a3:0d:96:28:17:0c:11:cc:e3:1e:c1:04:
a1:a7:0a:c5:35:1b:2a:13:e4:e1:b7:5d:13:57:ee:f3:d9:bd:
cb:42:24:1d:74:c5:3a:f4:52:da:80:8c:7f:2f:93:5a:49:3a:
60:92:3f:82:b7:9d:81:1d:07:c1:e4:e3:27:dd:3b:b4:d6:aa:
5d:76:58:11:7a:e1:20:87:6f:82:9f:bb:ad:19:91:3d:4a:9c:
d8:04:8e:c3:2f:b7:7c:8b:64:1d:3d:af:fb:43:bc:85:5d:f3:
31:76:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:13:39 2025 by rpki-client