Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa
File: 88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa (raw, json)
Hash identifier: xGTAo5O+P7u2Vb/Nzd+OB0SKlDv4cxj7/SmKYW+zwNU=
Subject key identifier: F3:E8:35:39:7F:DC:F2:73:32:A1:E3:1D:E1:58:F4:E8:5B:7C:F2:09
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F432858491C0C20D87D86DE707EEE6F00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa
Signing time: Fri 07 Mar 2025 14:00:52 +0000
ROA not before: Fri 07 Mar 2025 14:00:52 +0000
ROA not after: Thu 05 Jun 2025 13:00:52 +0000
asID: 30036
IP address blocks: 45.59.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:0c:20:d8:7d:86:de:70:7e:ee:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 7 14:00:52 2025 GMT
Not After : Jun 5 13:00:52 2025 GMT
Subject: CN=ebdf375b-c21e-4e1a-b866-8e99d83961a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:b1:34:5d:d2:fc:8a:c7:a7:8c:72:71:ef:
55:52:88:e9:15:48:41:0c:02:06:16:f1:0f:c9:30:
50:f3:0f:bf:ea:e0:6f:09:b8:08:33:5b:1c:66:24:
17:69:2d:ff:8f:c0:81:7e:78:c5:3b:02:4d:f3:3b:
41:70:73:11:85:c8:19:c9:d5:bc:47:8f:4f:54:3e:
e0:58:cc:5d:91:5e:bb:77:ec:4a:45:57:2f:59:96:
2e:fb:44:03:15:e0:7b:b1:85:e9:9d:05:51:49:0b:
80:9b:9b:d8:51:3f:a8:d8:94:df:ec:fb:e1:99:ff:
65:e2:b3:5f:42:34:9a:40:d5:99:0b:b3:ab:69:02:
d9:3e:e4:ab:9b:6c:f0:af:74:bf:10:e9:b6:cc:74:
44:be:3e:42:f8:72:97:eb:69:16:3e:2b:ce:f4:08:
e1:fd:2b:75:42:f5:4d:da:64:40:86:d1:88:8d:b0:
72:6c:be:c0:ad:68:df:31:74:d6:0b:fe:96:95:22:
9a:c4:d1:f2:24:65:a9:d9:af:26:7f:b2:8f:d7:21:
47:ca:3b:5f:80:a5:d0:0b:0a:b2:71:95:e1:a5:c6:
71:37:b5:a3:7f:f2:ed:1f:7a:50:67:95:f0:f4:62:
ee:6a:e9:2f:9d:b9:0e:77:8a:a4:99:29:c4:83:87:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:35:39:7F:DC:F2:73:32:A1:E3:1D:E1:58:F4:E8:5B:7C:F2:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88e1522b-7d36-3c0e-9f8a-509e899f8e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:7e:2f:53:13:cb:dd:65:b8:d5:34:42:ae:a8:32:49:88:1f:
20:43:69:da:c1:b0:d9:41:6d:17:a0:62:18:92:eb:81:8c:08:
69:7c:e9:74:1c:9a:18:cc:96:d1:71:bf:df:0b:6c:22:13:e1:
43:ec:4f:37:6d:df:20:18:10:10:26:1f:9c:4c:df:66:43:d8:
1d:af:d4:71:be:19:7f:f1:90:3a:a6:16:5b:12:7b:79:e2:37:
e7:8a:ab:8c:ad:b4:a8:13:cb:70:f7:21:1d:8e:f6:08:b6:f1:
6e:ec:bc:bb:bd:91:cf:90:52:7d:5d:37:c0:0d:0f:60:6c:7f:
6c:26:52:ac:cc:41:36:11:77:34:f6:a3:ec:d1:01:d1:44:d8:
83:fc:67:dd:fa:b6:b1:6a:f0:99:2f:f3:18:3b:0a:3f:f1:06:
37:09:70:54:af:72:fd:f7:e9:31:9a:a2:f8:80:e5:37:f7:39:
8f:40:fd:e9:13:4b:f7:32:89:b1:60:d7:a8:ae:71:d4:c8:37:
4a:fe:ca:6e:bb:af:9a:68:43:e5:67:85:a7:7f:e7:3d:14:e9:
3b:68:2e:ff:13:ac:8e:b1:e1:28:33:c7:fb:44:50:83:6f:14:
f0:f6:ee:85:06:31:3b:d6:ce:11:a0:55:c5:84:60:ba:d0:71:
4f:9f:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:32 2025 by rpki-client