Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e684e54-b84c-32a4-80be-7c47c75a99b6.roa
File: 3e684e54-b84c-32a4-80be-7c47c75a99b6.roa (raw, json)
Hash identifier: wpICDOesnzQoFm1/C42zSbdOXpPqatwdnMJAs3MeeF4=
Subject key identifier: 6C:B9:8E:14:CB:4F:16:2C:F6:8E:1E:76:F1:F5:43:25:4A:43:36:D3
Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial: 010D0C9F43285848854B45D381FF9E6DBCDD2E10
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e684e54-b84c-32a4-80be-7c47c75a99b6.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 5769
IP address blocks: 45.73.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:45:d3:81:ff:9e:6d:bc:dd:2e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=d2b204af-fc29-45fc-b310-ced83dac8ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:9c:db:56:c3:8b:72:2b:ad:27:34:24:b1:
ad:47:b8:10:a0:2d:fc:d3:18:1e:53:e3:56:41:44:
43:4b:b2:6a:4e:87:0d:f1:71:28:59:b9:40:47:16:
d4:8f:5f:03:05:4e:c3:d0:b0:1c:dc:98:ff:99:34:
37:76:9b:ef:94:8e:95:b0:d3:c7:19:ee:f8:cc:f9:
0d:ef:5f:f0:e0:5e:7c:12:bb:3b:ca:d2:f6:7c:8b:
82:c9:ca:98:7d:de:5f:28:8b:b3:d4:65:50:d8:c5:
0d:6d:5d:1b:af:fa:39:56:8d:bf:7a:94:4b:2c:7c:
70:47:1f:53:c6:57:4d:8b:7c:1e:4a:eb:c7:fd:3c:
8c:52:76:8f:ae:8f:3d:5c:d5:66:3a:38:9a:2c:de:
d2:16:a5:8e:16:31:a7:3b:0b:a2:d5:68:c1:58:65:
9d:57:48:38:30:05:8f:35:7b:b5:b7:aa:cb:e1:02:
a4:de:3b:1c:88:db:24:d6:78:d9:86:91:37:9a:d6:
79:a9:27:75:b9:d8:03:b6:31:44:f7:9b:c6:45:e7:
d4:34:0e:a2:aa:5a:65:b9:58:45:10:09:10:d6:4a:
5d:8b:92:0f:81:d7:9d:50:70:c7:2a:a9:08:79:5a:
64:da:3c:51:44:df:cd:f8:d3:23:2e:3b:56:35:61:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:8E:14:CB:4F:16:2C:F6:8E:1E:76:F1:F5:43:25:4A:43:36:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3e684e54-b84c-32a4-80be-7c47c75a99b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
X509v3 Authority Key Identifier:
keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.73.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:52:20:d1:4d:c2:2d:2b:65:2b:2a:91:93:6c:3d:22:2a:b3:
45:24:c3:9e:b8:86:e4:15:02:fa:94:d1:9c:47:85:40:30:57:
e6:5e:ab:ee:d4:c0:58:47:cc:29:d0:00:ff:e0:d0:33:0d:b6:
4a:46:11:8f:f8:5c:3b:b9:42:4b:07:19:ab:9f:fc:b4:ef:d1:
54:c6:97:b7:f0:01:3c:6a:1d:8d:e4:52:4e:af:3c:db:1e:24:
dd:ee:30:63:5c:96:c3:c0:7e:f2:5c:e8:77:4b:cc:82:3d:97:
64:05:74:40:7c:e7:cb:b6:94:ca:ad:70:68:76:0a:a1:4f:85:
6f:f3:bc:3c:e7:08:50:33:73:6c:ff:7e:12:46:91:f3:2c:60:
12:02:ba:a7:15:f1:9b:bd:fa:11:b7:90:4a:65:dd:12:aa:e9:
e9:79:c7:1c:62:1a:7a:81:fc:af:59:8f:56:fa:9f:4b:c4:78:
13:bd:19:ac:29:99:18:a3:dc:00:8b:03:3f:95:66:a4:ee:de:
87:bd:7a:2f:61:d5:40:6b:0b:42:e8:ec:1f:36:1c:d4:5b:07:
68:e2:ef:67:bc:82:fd:6a:2b:8f:f7:0b:29:5a:a6:a1:d5:16:
c0:4e:bb:cf:dd:67:85:07:f1:4a:4e:87:04:8f:fe:27:77:f4:
e2:c7:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:53:58 2025 by rpki-client