Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/2b6eec24-74e5-3602-9e65-2ce32e261580.roa
File: 2b6eec24-74e5-3602-9e65-2ce32e261580.roa (raw, json)
Hash identifier: xgF7knUCpcLq2Ah9itDZPz9gRfGRQlZgWYk6KIaRY4w=
Subject key identifier: 94:D6:BD:BD:D3:88:B5:AD:F9:49:2F:B2:70:B7:1D:E0:DB:E3:58:45
Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial: 010D0C9F432858494B63FF4C4F9858DF0D4E47C0
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/2b6eec24-74e5-3602-9e65-2ce32e261580.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 399924
IP address blocks: 45.41.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:63:ff:4c:4f:98:58:df:0d:4e:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=1350610e-4fff-4e17-b83c-34602cb9a0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:6a:20:51:ce:51:6e:d3:04:27:f7:b1:ad:
e5:41:1f:f1:63:51:7d:10:7c:9f:d3:44:d8:6c:36:
98:18:d4:c1:20:67:0f:b2:c4:bc:c6:b9:59:15:d9:
f2:e9:0c:94:ba:be:23:2b:c0:ee:41:c5:2d:09:f4:
48:bb:a6:8a:7e:cc:4a:10:a5:0e:d4:17:04:52:b8:
45:f1:4d:77:90:01:f1:63:27:80:35:12:93:98:68:
95:d3:88:b1:93:ef:9f:d5:99:06:80:c5:29:2f:a1:
de:59:e5:c7:45:24:84:cf:40:f0:f1:de:5c:ae:4d:
4c:9b:96:6a:ed:22:8a:97:26:ab:8f:86:49:c3:c7:
14:5e:0d:bf:93:03:37:8b:76:f0:c9:4b:f2:aa:20:
38:a8:4c:3a:37:00:da:be:7f:65:07:d9:7d:26:aa:
8b:71:09:6b:40:36:9c:d8:17:95:a2:d0:35:13:7c:
1a:1f:b6:61:03:6e:40:9f:41:62:fb:bd:42:db:70:
86:0d:1b:46:56:99:8c:76:e4:77:5f:1c:1e:b2:ce:
1b:89:c2:e6:b1:80:9c:fc:84:d4:c7:6e:fd:24:5b:
0f:2e:c2:99:fa:2e:14:ea:6c:ed:13:68:8d:c8:b5:
71:19:96:e4:f0:ae:80:2d:52:cb:5b:69:65:4b:6c:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:BD:BD:D3:88:B5:AD:F9:49:2F:B2:70:B7:1D:E0:DB:E3:58:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/2b6eec24-74e5-3602-9e65-2ce32e261580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
X509v3 Authority Key Identifier:
keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:1e:34:2a:00:0f:1c:68:e9:1f:71:80:53:fe:b0:3b:03:76:
e6:79:24:32:13:fe:87:9d:d0:03:ea:61:a9:72:38:5c:b9:85:
fd:54:4b:39:e2:ed:e7:c8:c1:4c:ff:bb:dc:9e:83:fe:5d:fd:
2d:31:73:48:89:9d:c3:30:85:42:88:42:d0:92:52:dd:8e:87:
88:4f:2b:1a:be:1b:44:a3:12:08:97:45:f6:08:7a:af:cd:66:
ea:5b:3c:86:f5:1a:20:54:1c:c1:a3:40:ed:62:c9:97:2b:46:
c3:03:65:fb:1f:86:63:ef:bb:c5:8b:6e:c4:66:be:5b:92:cb:
f1:88:03:5d:1e:81:bb:fd:90:4c:58:a2:9e:59:b5:41:c1:b7:
4d:db:2d:7a:cc:7e:ac:17:ad:fd:bd:dd:5e:fc:c5:09:04:bb:
af:41:e0:eb:09:f3:78:6b:6a:b5:02:96:0c:2b:fe:93:85:ca:
17:cd:53:65:29:c1:03:04:a2:d7:23:3a:3e:b6:fa:ce:20:a0:
17:6a:d4:26:13:07:92:5f:da:a5:2b:2f:a7:aa:4f:37:10:d8:
c5:e3:fc:e3:53:0f:56:ea:55:a9:24:0f:ed:ed:e5:88:15:01:
c2:f1:9c:b3:a2:f0:ff:0b:20:5b:20:0c:a7:6d:26:11:2f:db:
66:99:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:56:18 2025 by rpki-client