Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e338dbb8-4727-3213-b597-26ddc41ce3c5.roa
File: e338dbb8-4727-3213-b597-26ddc41ce3c5.roa (raw, json)
Hash identifier: 2VyCB938i0qDIKXrMssySa+ZZEO7FPciI9de2ZWkkTA=
Subject key identifier: F3:8D:39:05:6F:D4:2F:3C:6D:D0:FA:15:C3:AE:C2:79:9D:9F:C7:43
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858488C45CC3B0A4CE7103024F580
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e338dbb8-4727-3213-b597-26ddc41ce3c5.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 399244
IP address blocks: 45.59.171.0/24 maxlen: 24
174.136.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cc:3b:0a:4c:e7:10:30:24:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=51e71c9e-f82b-4149-9d8c-f77b89f7c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:1f:0e:65:23:f0:2e:cf:76:92:6b:26:bd:
47:73:ba:b2:a4:05:c7:c9:bc:e7:40:84:64:cf:18:
a5:e0:7c:94:9f:88:70:53:dd:14:61:56:19:0b:49:
af:06:66:4d:8e:92:ab:a2:a1:93:6c:b2:d4:f9:b0:
de:38:f5:57:56:9f:55:36:11:ab:49:6e:fe:3a:46:
bc:64:b7:c6:ff:79:c1:1b:ef:45:b4:05:13:1e:d6:
bd:5c:ab:43:e3:53:15:19:3f:c4:6e:3b:26:13:f7:
b2:6a:30:b9:1d:76:06:2f:1a:1a:17:e5:39:1f:2f:
e7:7c:79:45:47:0e:30:b1:b1:15:f8:bb:3d:8e:23:
dc:97:05:43:e3:2d:49:bc:e0:24:b8:3f:68:b8:05:
86:31:73:ba:54:da:83:e9:7e:7e:22:3b:71:74:12:
fe:c5:f0:9c:c8:1b:28:94:8f:2d:a7:c5:81:ac:80:
2e:a5:91:b3:52:80:ab:79:22:d6:77:f7:ac:f3:cf:
df:be:99:b4:07:98:fd:c8:35:93:16:c2:4e:69:d3:
2a:7a:56:4c:ca:1b:32:b6:91:3d:23:c6:ff:f0:67:
79:31:81:11:e2:8d:a0:a7:b5:96:8b:13:75:48:08:
4b:18:58:6d:e9:dc:2b:4f:9a:db:7b:42:4c:3b:aa:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:39:05:6F:D4:2F:3C:6D:D0:FA:15:C3:AE:C2:79:9D:9F:C7:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/e338dbb8-4727-3213-b597-26ddc41ce3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.171.0/24
174.136.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:81:e0:70:bc:81:d8:a0:58:88:f1:4f:52:08:f2:cf:52:f1:
61:c3:e8:40:75:27:c5:9d:54:ba:a4:e9:6c:58:6d:51:c1:64:
10:96:ca:cd:59:be:c5:5e:b9:ce:35:ae:9c:64:06:b2:cb:74:
a7:51:67:d6:13:97:ea:26:65:3f:cb:02:40:d4:fc:95:4c:a3:
9e:23:8a:9f:d2:10:b7:37:34:c1:a3:05:fa:f7:bd:3e:50:6a:
8a:9d:17:12:36:57:86:13:94:bb:60:e0:4b:22:47:74:f0:44:
4e:ef:04:bd:82:b3:0e:27:c0:4d:46:6b:0a:ce:a7:10:dc:6a:
47:d5:90:e5:bb:e2:6a:22:21:a7:8d:0c:ff:a7:a6:3f:6a:6d:
7b:89:1a:12:fd:a4:ef:3d:ff:ff:f0:e7:e7:43:0c:b8:fd:6b:
e3:00:09:9a:72:4a:b4:a9:4d:ca:80:95:4f:81:4b:bc:50:b7:
b0:14:fa:ed:3c:6f:ab:06:80:f0:fb:b0:7f:72:1a:cc:97:8d:
fe:3d:08:08:e7:9c:63:59:40:89:34:0e:22:10:77:e6:2c:88:
e3:2e:16:bf:18:49:87:56:b0:90:e8:f4:67:e7:6a:cf:65:e0:
52:29:9a:ac:93:69:f9:e5:1c:7f:6a:9f:ae:6f:db:88:7c:08:
88:a9:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:26 2025 by rpki-client