Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa
File: 708838d8-8559-3142-a30e-932c38e17aff.roa (raw, json)
Hash identifier: rTjZdZDnYUAFDGVUi8WMkv6zVqBJ5Z9fwfyzJp4SIw4=
Subject key identifier: 57:D5:AE:EC:27:8C:BA:5E:C8:95:66:CD:0B:06:F9:88:46:DC:8D:4F
Certificate issuer: /CN=4d929512-7541-4207-be46-8af4cc4a4800
Certificate serial: 010D0C9F43285848A1361DA35E68169CA70310E0
Authority key identifier: 50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 26658
IP address blocks: 45.33.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1d:a3:5e:68:16:9c:a7:03:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d929512-7541-4207-be46-8af4cc4a4800
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=b477cac9-4d70-487e-badb-1c6c046bd308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:d8:6a:0b:f2:bc:9d:a0:0e:dc:e7:20:e9:
44:1e:ff:23:f6:1f:4a:d5:76:b3:f2:99:df:7a:59:
ae:01:66:5d:53:8a:86:c8:12:0c:28:a5:b4:6b:f6:
44:61:14:79:40:a3:5c:39:51:29:0f:f4:ee:a4:05:
94:91:2d:68:06:5f:6d:60:8f:fc:34:83:b2:c3:5b:
70:05:d6:53:19:23:2b:86:71:07:8f:cb:47:1f:ee:
db:37:56:4f:93:fc:a8:d9:81:e9:de:92:6f:5e:82:
05:b4:93:bd:ba:bb:05:c4:c1:63:b9:e2:dd:42:62:
ce:84:59:01:63:e7:10:83:bc:e3:bb:da:27:11:5e:
d5:ed:18:c0:16:a6:06:84:ae:92:39:fb:97:93:20:
b7:6d:46:c4:84:6a:97:dc:d2:60:3b:06:e5:0a:5c:
83:99:b3:4b:a9:66:a2:95:42:2f:66:9f:73:7f:77:
91:9b:e9:bf:d1:8c:7a:6e:86:1b:77:09:24:9a:96:
c6:67:d9:6f:f2:10:b7:cc:05:8e:3a:ea:28:7b:d7:
de:4a:b7:c5:22:7a:1c:4b:98:db:06:08:d4:b6:16:
79:d1:c1:7b:f7:58:5d:42:f3:1f:8d:8c:9d:84:8d:
ac:a7:55:b5:4f:69:5d:1f:c7:d5:e1:61:6b:55:e8:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:AE:EC:27:8C:BA:5E:C8:95:66:CD:0B:06:F9:88:46:DC:8D:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/708838d8-8559-3142-a30e-932c38e17aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800/4d929512-7541-4207-be46-8af4cc4a4800.crl
X509v3 Authority Key Identifier:
keyid:50:76:C6:B0:0E:4F:BF:DD:EB:45:FC:C4:02:E7:4F:56:CB:5D:35:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4d929512-7541-4207-be46-8af4cc4a4800.cer
sbgp-ipAddrBlock: critical
IPv4:
45.33.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:88:68:10:18:a6:e4:b4:37:8f:b5:5c:98:98:a9:f3:5b:d0:
ee:4e:2b:f0:a6:5c:72:04:ea:05:0b:2b:26:02:e6:32:b4:23:
f8:54:ab:e8:7f:df:38:7a:d0:19:70:16:07:64:25:f1:3d:30:
2d:07:c6:b7:39:44:da:89:77:e6:73:c8:65:77:0f:4b:e9:4b:
a7:cf:b9:ed:48:fb:a4:05:52:bc:f8:e8:2e:76:aa:f1:2a:04:
95:05:74:e0:17:9f:93:fd:9d:d3:e5:b0:7a:4d:6a:ae:bb:ef:
77:21:ba:ba:72:79:7b:9a:1a:9c:77:d6:8e:11:5f:d7:43:c1:
95:8f:3d:b4:52:ee:b0:ac:57:05:71:bd:18:e8:42:d2:4f:12:
d8:ef:fe:a8:91:77:38:64:0d:47:dc:3c:5b:da:32:5b:1f:f1:
ae:2e:77:17:06:07:df:f8:f4:85:ca:40:4a:f4:6e:52:8e:40:
1f:1c:62:ad:92:80:ff:cd:85:a7:9f:12:b8:7e:91:68:58:2b:
fb:23:00:d9:22:27:1f:9a:81:81:e6:07:16:9d:65:1e:d0:86:
e5:8d:16:c4:2f:67:b8:96:62:bf:d7:f0:91:35:3a:0a:4d:41:
f1:99:ab:0f:65:eb:1a:5a:42:e9:73:36:62:64:15:24:13:95:
08:0d:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:11 2025 by rpki-client