Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/3138d61e-371c-34a3-8cef-2676fd7214af.roa
File: 3138d61e-371c-34a3-8cef-2676fd7214af.roa (raw, json)
Hash identifier: 6VTuxrodrZyiudAC7k9t2LaurWa7ROmpjEusQJkOyL8=
Subject key identifier: 11:E3:28:C0:B9:7D:2A:2F:D8:08:B4:49:0C:B7:69:F3:E9:3E:6B:7F
Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial: 010D0C9F432858489479D2143F8747E555911200
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/3138d61e-371c-34a3-8cef-2676fd7214af.roa
Signing time: Sat 18 Jan 2025 00:31:59 +0000
ROA not before: Sat 18 Jan 2025 00:31:59 +0000
ROA not after: Thu 17 Apr 2025 23:31:59 +0000
asID: 834
IP address blocks: 45.62.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:79:d2:14:3f:87:47:e5:55:91:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Validity
Not Before: Jan 18 00:31:59 2025 GMT
Not After : Apr 17 23:31:59 2025 GMT
Subject: CN=49b728c7-2f3e-4b3b-aff6-552adbb72549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:3f:b3:d3:a4:98:ec:1d:dd:f4:33:73:2a:
9c:17:15:84:5f:67:fb:eb:66:5b:9b:83:c0:29:0e:
2c:32:79:58:85:ad:30:96:2a:d5:2c:a1:33:71:a0:
b4:d4:6b:e7:34:3f:84:1a:12:76:94:32:9f:67:ba:
e5:90:a6:46:40:dd:8e:ab:9d:54:e4:94:d3:0a:73:
47:69:6a:c4:82:81:c9:9e:e1:f2:59:e9:34:26:8a:
52:6d:91:eb:ca:e2:5d:39:e0:cc:38:33:3b:ec:12:
9e:1c:b3:0c:66:30:0e:d7:41:ea:01:4b:0a:94:a4:
a7:c0:3a:4f:ac:33:26:d2:5d:46:9a:b8:5c:dd:02:
74:8c:e9:e9:c0:a1:63:78:2d:99:e9:ea:ed:9f:d0:
1a:27:fe:8d:f4:03:9b:9e:7e:8d:01:14:d7:57:ac:
2d:1d:ff:0f:2f:15:1a:b6:2f:c0:93:33:e3:36:45:
47:b1:9b:ea:9f:46:a4:05:5a:0e:41:77:c6:a5:2b:
48:5f:e5:16:2c:9b:43:1e:35:d1:ad:4d:20:45:6e:
26:46:fb:16:71:b4:2b:70:58:34:aa:d8:52:6b:b0:
f2:a8:a9:c6:f8:a8:12:ca:af:e5:b1:66:7e:2a:49:
31:ff:57:c3:68:22:82:55:83:ae:97:a7:e7:0d:6c:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:28:C0:B9:7D:2A:2F:D8:08:B4:49:0C:B7:69:F3:E9:3E:6B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/3138d61e-371c-34a3-8cef-2676fd7214af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
X509v3 Authority Key Identifier:
keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:16:ca:6c:a4:fa:ca:b3:cc:7b:d8:65:3d:57:c6:fd:4e:38:
5b:03:43:3e:95:a3:84:bf:9b:09:b1:df:ab:09:d8:d6:04:a6:
39:79:06:6b:bb:02:fa:8c:c6:7a:17:72:eb:66:eb:ae:b3:1f:
d9:4e:0e:05:1b:d8:f7:49:7f:fe:38:f9:f0:31:27:a4:b0:67:
8a:c2:85:92:7d:a4:f6:26:a0:01:64:70:25:53:70:4d:b7:80:
0b:ec:7d:23:33:e0:6f:e5:33:28:5e:b6:ae:18:45:f5:11:c4:
14:ff:56:d6:8c:e7:65:1b:7f:12:78:44:e5:d7:ad:5c:aa:72:
9f:8c:6a:9e:e8:0c:eb:b2:0d:60:f7:5b:45:3c:a7:39:24:93:
d6:83:5b:a5:6a:a4:4b:a9:ec:40:81:dd:34:7d:aa:f9:0a:20:
ba:67:a3:30:64:4d:19:78:65:5e:87:1a:33:6b:15:83:09:d7:
d7:96:59:d0:05:c9:4d:e4:fa:2a:3c:97:e8:0b:72:49:6a:0c:
01:85:18:cc:73:a4:21:bc:4c:ff:a1:a1:c6:13:30:5a:f6:32:
ee:af:b8:3b:b6:d9:8a:c3:c8:11:0d:05:8e:96:78:8e:8a:af:
c2:bd:e9:0a:fe:00:3f:74:3a:6c:7f:bb:7c:b3:a3:d3:e7:7c:
df:d6:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:26 2025 by rpki-client