Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
File: fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa (raw, json)
Hash identifier: A+Btb1tfcT5FbPmSQ+Ao+areN0oBxSMuBHYGvML3veI=
Subject key identifier: 3D:3E:F0:1F:32:44:80:67:70:48:1E:05:DE:94:FD:0E:70:BC:21:40
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F43285847FDE4DE19344BC2CD51038CC0
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 53414
IP address blocks: 45.72.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:de:19:34:4b:c2:cd:51:03:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=bb29d045-363b-448b-b33a-fab8e9019616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:43:3f:36:ea:0e:b0:69:34:0a:ae:19:e3:
9b:9f:de:13:36:92:65:8f:6b:bb:93:f3:5d:5c:93:
96:b7:88:f4:80:e1:4d:9e:aa:f6:58:16:94:81:a9:
12:ee:45:2b:67:f8:f0:c5:03:51:e2:b0:c3:b5:66:
1b:fe:cd:aa:50:a5:41:44:0d:dc:92:61:aa:6f:8d:
60:2b:7b:75:8a:03:53:39:f8:10:3a:24:7f:ff:af:
c8:53:cb:66:e1:8b:48:5a:7e:b2:3e:29:58:3c:a0:
15:a8:3d:85:78:7a:f0:8c:52:19:a8:7b:1e:d6:7a:
56:a1:cf:ca:09:ee:e9:aa:e2:74:92:d5:7a:b2:27:
17:8d:ce:e7:3d:0b:dd:b9:cb:35:25:cf:e7:94:73:
7c:1c:5f:6e:d9:a9:b6:79:fb:f8:f2:dd:b4:fb:f4:
aa:fe:08:47:8f:b6:1f:14:fa:45:70:31:b8:1a:0b:
38:53:45:06:3d:aa:91:ba:b5:54:c0:09:57:67:fc:
55:d3:ad:0c:a5:5c:69:02:54:fe:aa:f5:0a:99:57:
7b:1e:e0:6e:6b:9f:85:8e:85:e5:3d:dd:a3:68:42:
bb:0d:23:72:e6:57:68:9f:a0:b3:f0:ce:6a:fa:f2:
53:f8:ed:2d:51:74:ee:b6:5a:22:0f:4e:20:ec:58:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:F0:1F:32:44:80:67:70:48:1E:05:DE:94:FD:0E:70:BC:21:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/fcf6d0c3-b711-3a5d-8f07-01f7c69a84fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
45.72.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:07:49:3d:55:6c:83:9b:6d:2c:8c:48:9e:3e:23:bc:70:e4:
59:86:d6:13:9b:1a:a2:8c:d5:a9:ac:40:28:a6:03:28:72:08:
52:3e:89:36:8b:28:2d:26:f2:ca:52:c1:cd:3e:65:24:60:45:
cd:71:87:01:2c:bb:3c:44:c3:32:a0:af:d5:8b:4c:fe:f5:14:
35:be:89:a1:22:ad:ef:60:d5:6f:44:96:cf:a6:a8:ea:b6:bc:
c3:11:fd:de:65:be:af:d1:89:2b:67:b6:cb:dd:79:76:52:87:
76:1d:e5:00:28:66:4c:e6:96:d5:97:18:2a:21:5d:ce:29:53:
9f:9e:15:15:05:90:69:df:52:1a:41:13:d3:3f:0f:67:7c:51:
1c:0d:af:79:95:e8:73:82:ff:da:74:6d:c5:4c:38:5a:81:19:
d7:cc:81:54:80:a5:50:51:e6:a6:c0:0c:ee:70:64:6e:0e:23:
e6:ae:db:05:50:4f:0f:a4:f6:e0:7c:22:93:90:e4:b9:d3:29:
65:fb:72:7f:70:ec:b0:22:1e:42:01:c0:f2:4d:3c:21:06:69:
9c:c1:0f:96:89:23:fb:a1:5f:b1:d7:83:35:ff:37:32:44:0e:
36:f8:05:0d:75:96:21:7a:f3:b4:af:c4:52:b5:01:17:7a:70:
b7:e2:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:51 2025 by rpki-client