Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/061a2d21-97af-3af8-b844-b43f04cb7ffd.roa
File: 061a2d21-97af-3af8-b844-b43f04cb7ffd.roa (raw, json)
Hash identifier: b85amaT33Bzr3cXvVeqSEjNJ1UJwt+pSAftS8NG4k5Q=
Subject key identifier: 67:90:33:6D:31:2E:35:17:BB:2B:1E:85:3B:64:47:D1:A9:8A:99:E7
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F4328584855D59C69F04AFD324994BAE0
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/061a2d21-97af-3af8-b844-b43f04cb7ffd.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 399244
IP address blocks: 45.59.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9c:69:f0:4a:fd:32:49:94:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=21043751-cbac-4130-812a-116e3ee4e36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:c5:95:f1:73:0c:20:49:f6:83:2c:d9:a9:
87:f5:28:cf:29:e7:be:47:9a:8c:0b:09:47:a5:db:
c8:11:79:79:84:2f:59:06:1d:ee:5e:37:d2:aa:c0:
fd:d4:39:6f:99:b7:06:4f:98:0c:51:16:07:ad:74:
d0:bb:2b:8a:3d:3b:64:78:0c:04:19:b5:3e:47:39:
a6:65:69:39:02:90:8b:88:5a:3d:d4:03:fd:e0:03:
95:2e:2b:83:45:7f:a0:7d:e1:db:d2:c5:a1:85:59:
71:8c:33:da:63:32:91:59:2d:58:aa:8f:18:2b:d1:
44:6b:5c:0b:34:00:ca:1d:4d:3f:29:2f:87:4b:01:
e2:e0:75:f3:1f:95:7f:55:e8:db:31:86:07:97:8b:
19:c4:2b:6e:46:0e:a7:49:28:28:77:3a:b9:bf:59:
27:f1:77:a1:06:68:3e:30:bf:7e:42:15:41:d7:69:
5f:7c:d4:ec:09:47:cc:ca:b4:96:36:e8:f7:32:26:
d9:7e:e9:44:1c:dc:d2:45:f6:ea:fa:a4:f0:d1:8f:
bb:d3:a9:d2:35:5e:6a:b0:2f:4d:cb:e8:80:d6:cf:
28:58:5d:ab:46:23:f8:75:63:77:bf:f2:87:76:fd:
ee:a9:4c:ed:9e:ad:ab:d8:39:32:2c:43:fb:7f:3e:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:33:6D:31:2E:35:17:BB:2B:1E:85:3B:64:47:D1:A9:8A:99:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/061a2d21-97af-3af8-b844-b43f04cb7ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:0f:b2:47:0f:fa:6d:b7:14:4e:c6:71:8a:fb:1a:12:f3:88:
ba:7a:7c:ff:60:45:55:00:78:bb:ab:29:eb:5b:45:8c:26:0d:
a6:29:4c:db:03:01:f0:a8:77:64:e4:30:2c:cc:e5:a6:e8:d6:
d5:b8:07:3e:80:47:92:67:3c:8c:1b:92:90:9d:9f:cb:e5:47:
59:59:cc:87:48:d5:fd:54:0b:3d:6b:4a:20:b8:d1:73:c2:d2:
b0:61:cd:8c:bb:87:6d:7a:b6:d9:3f:f9:9f:a6:92:88:b6:2b:
c3:18:eb:6f:d1:36:53:db:e6:a9:44:00:41:ae:de:a3:af:e7:
72:ea:a2:9b:8a:d5:cf:7e:7e:a6:77:ec:35:48:a6:dc:a5:9c:
0d:03:52:59:01:3d:0d:a5:5b:a3:07:f4:2b:e5:2f:f1:b0:9e:
38:a1:1f:87:7f:5e:d4:ff:d0:f7:2c:ae:5f:6b:b9:2c:8a:98:
ca:ae:72:c7:e1:d8:14:09:24:f8:5f:4b:5e:20:e9:37:dd:b5:
7f:50:96:7c:d2:e1:53:3e:97:bc:a8:15:a9:e9:64:a1:1e:04:
be:47:13:0b:a6:e0:85:72:3d:fa:e4:8b:1f:9c:76:53:bd:b6:
cb:aa:6c:6b:f8:8d:c6:b4:e2:a5:ea:04:bd:b7:1d:1c:e1:4a:
36:6f:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:01 2025 by rpki-client