Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
File: aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa (raw, json)
Hash identifier: 4ebOtCdoAjtrZf2YtLR3NBQY7Jkv0ETghzlWNoOkDkk=
Subject key identifier: 05:2D:D8:AF:27:42:54:04:6E:62:68:1A:ED:21:7C:20:33:25:CD:4D
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848DBD66EFA88FECECFF97F9380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 62610
IP address blocks: 45.40.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:6e:fa:88:fe:ce:cf:f9:7f:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=45ec5505-2de7-45cd-bed5-4f88a1564acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:19:20:4d:5a:83:00:3e:23:db:65:57:96:
1d:8c:66:28:f8:b8:f2:9b:d9:ae:de:1a:ca:d0:a2:
5d:d3:35:52:e8:56:f5:47:7d:82:d1:ca:8f:65:fd:
16:a3:7a:c9:0a:49:3e:23:93:bd:1e:01:a2:31:a0:
8d:d5:da:fc:f0:f7:87:8a:36:69:24:15:1d:e7:74:
0b:79:56:d2:fd:86:49:81:24:07:dc:76:72:12:2f:
d2:22:74:db:25:b5:3a:2b:e0:13:14:82:4b:bf:6b:
ee:2d:ff:7c:b8:8a:95:d0:e7:1f:80:b0:08:0f:33:
e6:4e:a1:e1:3d:4c:a3:12:46:24:8f:21:5f:86:3f:
9d:b0:68:e5:f0:a7:b9:cf:11:30:58:75:30:c1:21:
0d:8e:fa:0b:66:f3:d7:7b:0a:3b:ad:c5:b8:ea:e3:
10:cc:9d:27:1f:12:44:be:14:14:92:5b:9d:61:39:
02:69:3c:fe:5d:db:2b:e7:47:16:d2:99:8b:8b:fd:
bb:26:23:e1:3e:52:b3:fc:36:17:a4:1c:1a:ae:ae:
2e:4f:5a:19:10:9d:83:9c:3a:a2:d6:a8:51:5f:51:
32:de:fd:84:7c:ce:ec:4d:49:72:9c:1d:7b:71:d5:
ea:12:11:74:ea:b9:39:22:33:d3:33:2f:de:b1:52:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2D:D8:AF:27:42:54:04:6E:62:68:1A:ED:21:7C:20:33:25:CD:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/aabc9ac0-a28e-3f13-99f4-a8cfa8236056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ff:24:0a:df:a5:92:a9:46:c8:c0:b0:16:6d:78:30:f2:09:
55:a0:54:e7:68:24:da:48:2f:a0:92:15:cf:dc:19:b6:99:eb:
6c:eb:a9:8a:dd:b5:d2:7f:0e:14:5b:1e:27:a2:b7:7b:a1:75:
1d:0b:04:80:b1:e6:8f:ae:f3:e6:d2:3a:76:ae:61:4d:93:11:
18:a2:bc:69:6d:a3:2f:7c:56:e5:bd:0d:16:b3:ee:7c:2e:7f:
4d:05:14:1b:0a:e8:31:32:be:50:41:b2:01:a4:07:c8:1a:03:
63:37:2c:91:ec:87:b6:44:4e:b4:2e:ee:ae:c5:18:58:e2:e6:
20:34:87:e9:f5:f0:b1:c7:18:03:40:27:41:3c:2c:fd:8a:df:
1a:9f:d9:b4:b2:4a:bd:a2:e0:d4:c5:ea:76:a8:50:d2:e3:f5:
c4:8d:32:f1:4c:ca:1e:59:17:1a:56:69:d4:c4:17:67:0d:fe:
79:b4:27:b4:aa:df:d7:e9:80:7a:2f:19:12:78:35:25:93:bd:
70:16:32:d8:58:4f:24:40:c8:bb:c1:62:03:f9:0f:6e:34:d8:
4c:7c:39:3b:46:5a:6c:6e:82:a3:1c:2b:8b:ac:c5:fc:3a:b7:
44:7f:08:ff:ba:79:7d:b4:5c:d5:94:88:64:e7:f3:aa:f2:e3:
2d:13:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:30 2025 by rpki-client