Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa
File: 7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa (raw, json)
Hash identifier: KaGhQ45Kz73qW+hOKcjqVSJlAkMNNYgG2sNL+chwtEs=
Subject key identifier: 1C:C8:3E:74:3B:06:8F:54:E4:E5:02:70:BC:B0:2C:BC:5D:5E:8C:E1
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858491C0C200E46BBA3DB240D2C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa
Signing time: Fri 07 Mar 2025 14:00:52 +0000
ROA not before: Fri 07 Mar 2025 14:00:52 +0000
ROA not after: Thu 05 Jun 2025 13:00:52 +0000
asID: 30036
IP address blocks: 45.59.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:0c:20:0e:46:bb:a3:db:24:0d:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 7 14:00:52 2025 GMT
Not After : Jun 5 13:00:52 2025 GMT
Subject: CN=693e0787-380d-4537-94de-11d43f1228d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:15:cc:9c:80:73:28:f8:a6:e0:54:5f:e0:
38:27:8d:b6:d9:36:0c:40:db:b5:85:36:c1:c0:c6:
2b:e4:fd:96:2f:5d:4f:d2:cc:4f:49:46:ab:93:aa:
b2:8a:f4:62:6d:ab:a7:13:aa:37:5c:e4:67:b1:6a:
4d:dc:d2:3b:ee:a1:fe:c6:d8:44:6a:d4:d9:8e:0f:
9d:6d:55:91:24:f1:cb:52:93:56:bf:49:e1:66:d7:
df:1e:ae:42:4d:92:41:d8:a5:36:82:b8:fd:2b:a7:
54:b7:e0:41:6d:8b:09:47:33:d5:11:fb:e9:ff:e9:
35:8f:55:91:71:b9:06:00:5a:05:c6:af:3e:67:fe:
69:57:7c:6d:2a:0f:10:9e:3b:38:04:ed:12:f5:89:
48:b9:83:6a:2f:bf:72:86:a8:a4:8d:f0:07:4d:e3:
2b:e8:6a:fb:42:a9:74:f3:ca:31:5a:dd:5a:3a:c1:
00:3a:ce:80:90:22:58:5d:63:6a:0b:97:69:4b:ca:
f6:10:ea:a4:b2:97:44:7b:e5:bd:50:94:97:98:af:
2c:91:fc:c2:c7:01:cf:3e:4a:49:76:e8:bf:73:8c:
70:f3:04:f7:e8:04:ce:f8:6f:ad:32:84:f2:44:c6:
d6:ec:7c:e3:50:36:2a:68:10:b7:40:5c:37:36:2b:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:3E:74:3B:06:8F:54:E4:E5:02:70:BC:B0:2C:BC:5D:5E:8C:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7c3d53e9-5cbb-3aab-961a-679cfb87b3f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:be:0a:a8:a9:04:4f:a0:f3:e9:c4:80:84:0d:f5:90:a9:d0:
e2:6a:9b:af:51:e9:24:0e:9f:94:df:32:eb:aa:c9:55:dc:d7:
4e:39:59:4c:6e:0c:5f:59:ba:5c:cb:e9:a9:f0:5b:d5:b1:37:
b3:54:88:6b:02:eb:e1:3e:63:cc:db:bf:77:44:fa:61:61:e4:
e6:e4:f7:0f:63:2f:10:52:4a:2a:0f:63:df:03:0c:24:58:22:
2e:9a:7c:39:1c:0f:88:7d:fc:6d:f0:40:4f:76:10:9f:1e:3d:
87:64:b1:dd:b3:70:ee:12:ef:2a:f6:07:ef:da:38:db:61:ea:
2a:f5:aa:c0:85:ec:c6:e7:92:73:d8:3d:41:db:6b:3f:d7:a0:
78:e1:33:76:b0:c4:e5:d7:1c:55:06:77:b6:d0:50:a4:cb:42:
80:2d:f2:9c:74:38:22:41:8f:17:3f:9d:f1:0a:cc:2d:94:1e:
82:7b:7c:8f:d8:70:56:61:b3:1f:fb:5a:cc:c7:06:e6:88:1d:
8f:f2:85:07:be:c0:d6:86:3e:26:34:a7:f7:ae:a5:f2:8e:6b:
39:88:03:fa:98:b1:7a:f8:3c:a3:a3:4e:d1:61:a8:e0:d4:a1:
f4:db:de:f2:5e:f7:30:34:4b:e7:13:99:85:43:17:fc:0a:43:
aa:ad:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:55:59 2025 by rpki-client