Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
File: d5309ef4-02ef-32b1-925e-116cefdf66ee.roa (raw, json)
Hash identifier: ejpMYGjsgUcpUCfiLRZpJNy2LGO1fMqpWqGZ/2o8k30=
Subject key identifier: 0F:CB:85:34:71:61:D5:64:9A:14:E3:85:3E:60:C1:DD:5F:29:8D:73
Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial: 010D0C9F43285848CDE1117C6BEC280D56126A80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 58061
IP address blocks: 45.62.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:11:7c:6b:ec:28:0d:56:12:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=26e65140-c43f-4979-ac91-02a9c11f186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:bc:cd:c6:d6:70:7e:28:f3:68:39:4b:82:
bc:80:68:a9:5b:20:a4:20:a3:42:0d:42:79:7c:08:
74:f6:f9:55:9f:30:a7:ed:c8:61:f0:86:c1:61:18:
6b:ec:98:be:4e:c5:f6:2c:be:3b:96:03:c8:f3:de:
12:1d:ec:fc:73:e5:03:54:b9:8e:be:84:fa:63:ce:
9b:7d:9b:a0:f8:b3:65:ac:63:2d:b3:f5:37:23:45:
b9:04:be:1c:38:6f:05:15:7f:f6:ce:55:00:c1:66:
84:c5:5a:fc:11:ac:70:0f:a1:ec:f9:b0:75:ec:a3:
00:a4:47:01:23:6b:7c:cf:c8:db:c0:2e:d0:5b:40:
8e:89:11:99:06:c6:66:3b:93:b2:60:13:15:eb:af:
fc:d9:74:38:de:39:59:e7:1b:c1:82:78:43:10:48:
dd:59:4c:74:f0:55:69:41:58:4e:36:b8:4b:35:03:
63:a0:83:2c:bf:5a:36:d7:ca:ca:cc:76:88:e8:2a:
9a:1d:86:63:21:59:fc:62:2d:e7:8d:4f:8c:6e:bd:
54:75:0d:d7:1f:4b:02:6f:c0:77:27:c3:8c:96:a0:
4b:87:87:2f:89:87:0e:10:25:a4:39:1b:01:bd:9b:
36:0d:14:bc:49:2f:80:23:b7:a2:c9:d7:5a:27:a2:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:85:34:71:61:D5:64:9A:14:E3:85:3E:60:C1:DD:5F:29:8D:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/d5309ef4-02ef-32b1-925e-116cefdf66ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
X509v3 Authority Key Identifier:
keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:cc:8f:1e:a3:1e:1c:df:b5:a2:33:7d:bc:e0:cd:f3:61:71:
0b:49:49:a6:2a:e8:04:d6:09:f8:5d:93:bc:60:d1:6b:0c:12:
4e:9c:28:06:83:b6:9a:f5:41:2a:c5:d3:ff:3c:03:14:d9:a0:
78:44:a4:b6:6d:9b:4b:a6:04:dd:1d:86:9a:84:83:5f:c1:3c:
48:10:de:0f:53:40:9a:7f:42:39:e8:06:f1:2b:d0:b3:de:d2:
46:7b:4d:f4:5a:59:af:44:71:3a:50:a2:bb:5d:c8:a9:57:0b:
e5:62:6b:3b:cf:de:47:70:bc:a5:17:0d:fe:63:76:0f:7b:19:
42:07:de:3e:16:e5:e3:b8:36:06:e7:e1:e1:0c:14:6b:8c:30:
47:f2:07:07:62:d6:45:6f:8d:13:89:b7:0d:39:3e:37:54:84:
a6:6d:a3:ca:49:35:47:45:71:9b:19:66:c6:d3:f7:e1:38:cf:
f5:c4:73:d9:06:19:c0:34:b5:d0:bb:f9:bd:d9:dd:0c:89:e6:
23:a7:20:bd:bd:6e:c5:87:05:a9:10:92:c0:c4:e4:6b:6d:35:
ec:f2:de:51:3f:9c:df:56:c5:54:89:65:b4:b8:53:60:58:e4:
45:8f:07:29:1a:cb:ec:da:3e:57:90:b7:10:26:be:15:91:e6:
2f:3f:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:22 2025 by rpki-client