Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
File: 639cc8ac-4937-3f41-868f-e73eeac09322.roa (raw, json)
Hash identifier: 7aCUeZFyr24VzXucZQYD0tlc5Mk11m5Jmtvrm0Ckg1U=
Subject key identifier: 90:6E:F9:1B:95:D6:2A:94:3C:2B:D9:D6:CF:CD:62:3A:4B:08:16:A5
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F4328584827C532BB9078B6B0BFE4A960
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 398395
IP address blocks: 45.59.115.0/24 maxlen: 24
45.59.121.0/24 maxlen: 24
66.23.194.0/23 maxlen: 24
216.126.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:32:bb:90:78:b6:b0:bf:e4:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=017c5f72-3d08-4579-a202-c9c395cbc23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:6b:b8:e2:20:83:c4:57:cf:44:62:c3:b0:
1b:1b:de:92:bb:0b:6e:ae:05:c3:e9:e5:f6:ec:91:
15:12:bd:53:54:64:eb:aa:b1:4f:91:0f:93:f2:4c:
b4:02:d8:ca:18:5c:11:31:34:41:04:3b:2f:e5:fc:
d4:e1:6c:18:bd:b8:8f:06:38:c5:a1:92:e4:1e:0d:
7e:22:a9:ad:82:2f:a0:be:81:6a:75:31:cc:ea:5b:
a7:2b:04:17:1b:4b:52:ff:78:26:6e:56:c0:83:16:
be:09:c6:d6:57:37:88:18:28:40:57:81:2e:4e:58:
77:af:1d:72:7d:43:8b:b5:bf:eb:f1:69:13:bd:a0:
73:1b:f5:2b:bd:d8:27:cc:2a:69:ce:e6:af:fa:2b:
85:d6:91:67:a4:ac:dd:ac:c0:f5:4b:63:3a:40:6b:
c2:4f:39:61:af:4e:b3:07:d2:80:f8:0e:b8:e3:30:
8c:44:43:f2:28:15:fe:85:25:0c:84:4b:3d:50:3d:
a8:6a:cc:40:a7:30:ee:69:fc:7d:11:2b:f4:7c:16:
f8:5f:5c:18:40:d4:ad:bf:8a:4b:d7:75:6d:7b:7a:
6d:85:40:7b:03:63:b9:4d:33:a8:97:fc:05:68:b4:
82:b7:09:12:99:42:d5:fd:8a:85:de:e4:c9:bd:5d:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6E:F9:1B:95:D6:2A:94:3C:2B:D9:D6:CF:CD:62:3A:4B:08:16:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/639cc8ac-4937-3f41-868f-e73eeac09322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.115.0/24
45.59.121.0/24
66.23.194.0/23
216.126.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:db:59:21:be:f1:2f:f5:10:ac:fe:27:aa:65:6f:4d:20:62:
f0:94:42:8e:7c:68:4b:f7:cb:4c:60:b6:d3:96:f4:5e:7b:2d:
d1:9a:ea:22:e5:4f:4d:d8:19:45:63:5c:8f:84:6b:3e:f7:45:
61:66:a3:56:c9:0e:70:30:a9:b1:57:40:3b:2a:9a:af:08:31:
56:e8:1d:60:b5:50:b9:73:15:c6:43:9c:5f:b7:be:24:97:c3:
61:3e:ff:96:f2:a1:8d:95:e2:de:87:6e:b3:4b:f8:69:6e:79:
11:e5:aa:32:05:4f:ac:2c:86:25:04:5d:ac:90:74:74:12:df:
a8:7b:0e:ca:03:87:46:e7:2c:ed:b9:87:8b:d5:98:55:c1:58:
a9:e0:43:0d:65:b3:51:3d:7a:bf:69:e1:83:0a:43:05:f2:87:
5c:cd:19:34:c8:8f:49:79:6c:d6:ea:33:82:cf:0e:6d:8d:43:
f2:2a:71:f7:82:a0:22:1c:3b:31:9e:86:5e:3c:e3:25:a5:6d:
8b:eb:01:68:f9:f6:9a:fb:8e:8a:5e:89:5e:30:de:95:26:44:
54:09:6b:11:c4:b4:92:a3:c3:8d:64:eb:16:09:e5:33:d0:ee:
69:cf:73:c1:a2:99:6b:30:24:fd:75:be:2e:8e:19:3f:f0:9b:
ef:58:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:50 2025 by rpki-client