Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/3d03469e-192a-3019-9c1c-13d24ee3cd2e.roa
File: 3d03469e-192a-3019-9c1c-13d24ee3cd2e.roa (raw, json)
Hash identifier: Ecm6gfzA8WrzD1l65pjyJOAO0kmSoHPMP+lz8UrylA8=
Subject key identifier: 11:14:93:3E:EE:16:83:56:1C:44:E3:7E:A6:6A:B1:21:DD:B4:A8:38
Certificate issuer: /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Certificate serial: 010D0C9F432858480BC9A6709A9F44934CACF3A0
Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/3d03469e-192a-3019-9c1c-13d24ee3cd2e.roa
Signing time: Sat 30 Nov 2024 01:27:05 +0000
ROA not before: Sat 30 Nov 2024 01:27:05 +0000
ROA not after: Fri 28 Feb 2025 01:27:05 +0000
asID: 20057
IP address blocks: 45.59.128.0/24 maxlen: 24
45.59.129.0/24 maxlen: 24
45.59.130.0/24 maxlen: 24
45.59.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:c9:a6:70:9a:9f:44:93:4c:ac:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Validity
Not Before: Nov 30 01:27:05 2024 GMT
Not After : Feb 28 01:27:05 2025 GMT
Subject: CN=9d0ea34d-c60b-4db8-829f-6a64a4a9b004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:06:4d:09:07:a5:0f:c8:4c:b7:e7:4d:6e:
a2:cf:0c:10:93:14:07:b3:35:f4:bd:9f:dd:17:83:
67:44:04:5c:e8:db:6e:06:f9:95:26:55:be:b6:c9:
96:d6:f7:c3:e0:15:14:ad:22:8d:86:7d:46:4c:05:
4e:67:70:f2:c2:df:01:2d:dc:5d:d0:65:e2:ce:3f:
4a:42:03:6e:cb:4a:0c:36:28:34:99:bc:ca:ac:3f:
12:a7:f4:59:9f:94:3e:02:cb:0c:53:95:6e:16:4b:
6c:b4:39:f3:73:df:73:7e:b3:8b:56:89:48:2b:ff:
0e:0e:04:73:d5:62:30:39:61:c3:37:6c:e3:84:e9:
1b:28:b8:c8:b9:67:04:8f:a4:0f:eb:4c:34:16:9d:
69:ae:27:bc:22:3e:bc:b8:bd:b8:3d:33:0a:7c:89:
87:84:bc:b7:3b:f3:b1:b3:41:91:d2:3d:c3:10:b8:
b7:10:d0:5a:c2:dd:b9:3f:c5:3d:b5:94:2c:a9:a5:
50:44:93:0c:6c:65:ca:d9:07:c0:1b:aa:e6:52:83:
d0:a7:f2:5b:68:9a:fc:48:2a:b9:cd:e1:47:0e:15:
c0:71:13:a9:6e:95:7f:3b:69:09:96:77:14:49:a6:
9c:4d:45:26:ce:6e:a2:78:d3:e1:fc:7e:b8:28:80:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:93:3E:EE:16:83:56:1C:44:E3:7E:A6:6A:B1:21:DD:B4:A8:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/3d03469e-192a-3019-9c1c-13d24ee3cd2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl
X509v3 Authority Key Identifier:
keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:75:1b:4b:d5:64:5e:8f:f8:5d:30:a0:2b:61:f6:e9:91:7a:
69:d3:2b:91:92:d8:fa:a2:32:76:75:44:87:0f:8d:32:be:1b:
18:13:c5:81:5c:99:68:f7:29:8e:71:17:98:54:87:fe:3e:27:
e4:e3:8c:43:dc:0a:e4:cd:37:03:c2:93:55:c0:8f:54:ae:25:
5e:e0:92:93:ac:b9:b3:a9:28:76:86:13:d8:d1:34:82:27:22:
e1:62:ec:5b:98:e9:96:d0:d6:fb:ed:7b:dc:7c:b4:37:ec:af:
c9:20:50:6d:5a:1b:63:73:33:39:f5:c7:a4:5c:6b:8d:37:11:
76:63:19:87:1e:10:d4:b2:de:fd:c0:6e:21:46:48:54:72:72:
ca:4a:4a:50:34:83:6b:ca:b8:09:56:99:53:8c:5a:2a:5e:dc:
e6:f9:19:6c:cf:13:3c:ab:2d:39:e5:8e:28:b3:8b:49:3c:96:
51:24:cd:e0:b9:50:77:8d:bb:a6:54:ac:0f:da:98:56:e7:79:
34:ba:e7:61:36:02:9f:62:c5:46:ef:db:4d:0b:a5:23:ec:d0:
24:4b:89:44:0a:68:9b:59:37:b4:08:9a:b8:93:70:dd:73:aa:
43:c1:fd:02:67:77:93:9c:ed:ae:99:fe:61:f1:a5:c4:28:8b:
94:7f:1d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:44 2025 by rpki-client