Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
File: 1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa (raw, json)
Hash identifier: n88lgCo58D7GbYx6nCBBjz4ZW6+Z6VnzW2oavA3KWn8=
Subject key identifier: F3:12:7A:A0:69:77:7C:0B:68:F0:DD:94:80:FF:5A:DE:C5:C3:90:F2
Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial: 010D0C9F432858484C10255B1B0CEB0AF9C47B10
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 3257
IP address blocks: 45.41.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:25:5b:1b:0c:eb:0a:f9:c4:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=fac8f72a-f261-4812-aa89-74540f5c3b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:cc:74:9d:1e:25:6c:8a:10:96:3b:78:66:
19:c1:9c:1b:e6:40:bf:50:dd:a6:68:26:f6:c9:16:
f0:6c:b1:99:60:c4:db:77:16:1d:bf:c8:6d:c0:17:
47:5b:d5:3b:b0:24:2d:dd:dd:aa:55:31:63:57:3f:
34:12:b0:d8:4a:8e:ea:47:cd:44:ca:a9:4c:0e:61:
c3:a2:df:3b:bb:f6:ab:b6:5f:67:27:a4:80:78:64:
5f:25:70:23:73:0d:b7:26:0a:4e:a8:f8:dc:e0:50:
bc:f1:1a:33:b9:2d:ae:21:89:16:66:d7:0c:b9:16:
d4:fc:a1:8f:b1:ee:92:ce:c5:24:d7:77:70:f3:cf:
76:e7:06:8f:c7:54:fa:7b:f6:8e:e5:39:5e:14:b5:
8f:7d:f0:8c:7e:a8:f4:da:3f:7f:05:63:df:4c:40:
a0:11:fb:33:1e:db:cd:ca:2c:de:d0:2e:a2:e7:31:
12:53:30:9e:44:cc:81:5e:a8:77:f1:df:a9:be:15:
b9:e2:0d:20:75:e7:37:68:07:2c:50:ac:b4:d0:77:
2e:37:88:99:7d:2c:d0:e5:bd:c5:e9:ab:54:48:91:
66:79:a7:7d:f8:a0:f5:03:bd:70:e1:70:d2:03:26:
0b:1f:b5:1a:09:07:8f:e2:6a:5e:d2:3f:be:9c:34:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:7A:A0:69:77:7C:0B:68:F0:DD:94:80:FF:5A:DE:C5:C3:90:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
X509v3 Authority Key Identifier:
keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:89:8f:d1:3a:4f:63:7f:0f:2c:e6:6d:7c:78:92:9c:fc:0c:
4c:bc:12:48:49:25:07:5b:f7:4f:47:96:61:7e:cb:23:a0:10:
cf:bc:c8:4b:94:5b:19:cd:86:7a:4e:5f:d7:d5:bd:49:02:0e:
7b:b6:ac:5b:90:3d:55:e9:f0:15:2c:5f:63:b9:b1:56:68:fc:
26:81:58:9d:bb:0c:53:8e:02:2c:ee:05:9d:52:c8:b4:b6:72:
76:7a:e9:2b:95:6f:6a:a9:f2:af:ff:7d:1e:0a:f6:64:c6:e5:
c5:b3:c7:d2:36:2d:64:4f:e1:66:84:2a:d3:ea:18:2a:00:0d:
e9:0a:02:e4:33:b1:22:fb:d7:7c:12:78:0a:69:a2:64:bd:48:
50:09:66:5f:fe:fd:64:53:c8:03:d0:fa:93:24:2a:10:bb:c5:
67:67:c6:c7:40:e9:1a:f4:ca:60:f7:ab:fe:25:16:e0:34:71:
f4:01:8b:a5:d9:41:28:8c:5e:38:3d:a1:25:0b:95:19:55:bc:
f9:7a:31:7d:a1:35:e3:55:c7:a3:e9:9c:77:00:4c:3c:39:55:
01:e0:85:73:68:af:68:4e:d7:78:18:0e:2b:1c:8d:c9:78:67:
b1:bb:77:00:bd:16:4c:ed:1f:f2:8a:47:c4:99:0b:3b:a7:56:
bc:ef:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:18 2025 by rpki-client