Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa
File: 4a1f018a-6442-314f-b3c0-e11651be1890.roa (raw, json)
Hash identifier: HFvckqUrlBodEcVAZVqZ0umnj8IO+Ro/lrLIRSd48Co=
Subject key identifier: B7:7D:DA:7C:11:44:01:5F:56:83:00:76:03:D1:56:28:37:CF:B9:55
Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial: 010D0C9F4328584855D59A17CD1A7959A1B6CD40
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 45.45.196.0/22 maxlen: 24
208.74.168.0/21 maxlen: 24
2607:880::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9a:17:cd:1a:79:59:a1:b6:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=f7ce49b1-a814-4525-b583-494c03d0d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:f2:30:81:13:0a:9f:fd:ea:53:14:23:b4:
e2:d8:e4:46:9b:47:cf:f3:48:2a:48:99:db:d6:53:
88:3f:17:b1:5e:79:ec:cd:6f:1b:32:c6:7c:e2:46:
b7:14:73:5d:91:06:3f:8d:ca:09:96:16:c3:74:8f:
55:e1:1a:4b:72:fa:b5:03:e7:24:44:c4:c7:06:b0:
77:71:0a:05:b7:b3:54:df:d9:23:c7:4a:69:5f:e2:
ca:b7:13:56:99:c3:38:36:87:b0:ec:f4:d6:01:14:
ca:c7:3e:47:fa:8b:e8:99:f7:33:50:9c:29:87:21:
ca:ee:45:72:7f:cb:bd:77:68:02:30:f9:51:36:85:
c1:bd:b9:58:df:da:5a:5f:4e:3a:d1:1d:a3:53:c7:
80:b3:b2:ac:9d:3c:b5:59:99:aa:1d:2a:78:09:5d:
a9:c4:1d:e8:c0:5d:10:92:15:74:af:a4:31:47:39:
ef:d2:41:f9:57:85:00:b8:5b:88:b1:35:2a:41:73:
ea:69:3c:1b:83:62:45:30:18:7b:0c:94:8f:39:46:
fc:1f:07:91:1f:f5:b0:91:07:56:8e:c5:56:8f:81:
65:29:e3:7c:1c:18:31:f7:a2:8e:ba:1c:ba:b3:c1:
49:e1:e9:a5:b6:84:c4:38:cf:9c:5e:9a:42:fd:23:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:DA:7C:11:44:01:5F:56:83:00:76:03:D1:56:28:37:CF:B9:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/4a1f018a-6442-314f-b3c0-e11651be1890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
X509v3 Authority Key Identifier:
keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.196.0/22
208.74.168.0/21
IPv6:
2607:880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:1d:24:6f:a8:f0:55:48:10:c0:68:8e:5b:1c:ed:e7:39:8f:
2f:06:7f:0c:e0:c9:d7:b0:4a:00:c3:23:95:08:95:f9:e5:71:
d3:d5:e3:cf:29:31:04:8c:32:8b:da:2d:8f:07:80:91:8a:a4:
35:ab:e2:fc:bc:cd:30:94:e2:28:5e:4e:f5:a5:2d:60:c3:71:
0f:c4:ea:da:33:05:23:29:d0:50:05:51:ab:01:f1:95:3c:30:
7d:58:5e:ea:84:0a:12:2b:d0:eb:58:a7:0c:f0:76:53:15:c8:
ce:b7:95:4e:66:bf:ac:a9:e9:54:a1:d5:e0:2a:5b:25:d1:c3:
09:f6:1e:b4:d4:b5:c7:15:67:ef:89:43:3e:c7:24:16:b7:d0:
76:81:94:e8:25:f6:f5:bb:be:27:8c:fb:d6:dd:1a:21:be:6f:
16:34:c3:f5:56:80:ab:a3:c3:5d:9d:cf:32:19:9d:2e:34:c7:
3b:4d:e6:94:cc:ce:47:73:17:20:c3:aa:7a:ee:8e:8f:48:f1:
6a:6d:9d:df:3a:86:1d:37:19:c0:44:06:ce:6e:fe:3d:8d:7e:
6e:04:5b:59:30:f6:7f:94:df:15:c0:b9:6b:45:54:7b:bf:0b:
15:30:d0:5b:70:08:63:87:1d:6f:06:46:cc:63:95:be:f9:dd:
2f:7b:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:02 2025 by rpki-client