Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
File: 2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa (raw, json)
Hash identifier: /Bv+FNznmo/N1ZElk2KNgc1lp9uPghaHuXuHQQtPrLo=
Subject key identifier: 5A:70:7B:A3:EB:53:07:C6:7B:E6:3F:3E:98:E5:5C:3F:90:FC:C4:03
Certificate issuer: /CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Certificate serial: 010D0C9F432858494C4D176854A8738523A33A40
Authority key identifier: BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
Signing time: Mon 24 Mar 2025 20:50:35 +0000
ROA not before: Mon 24 Mar 2025 20:50:35 +0000
ROA not after: Sun 22 Jun 2025 20:50:35 +0000
asID: 63023
IP address blocks: 45.42.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:4d:17:68:54:a8:73:85:23:a3:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49aa3661-0fa7-43a8-937b-3dbcc28b39d5
Validity
Not Before: Mar 24 20:50:35 2025 GMT
Not After : Jun 22 20:50:35 2025 GMT
Subject: CN=6b928043-62d8-4798-8986-265794986e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:07:26:82:a4:40:b7:a7:92:13:7c:1b:1e:
88:2c:a8:b0:22:e7:5b:25:91:36:81:ba:3d:29:9e:
32:29:db:32:58:68:6e:b6:c5:8f:f5:da:59:b1:6a:
64:ce:af:a8:57:2a:a4:ba:c1:c5:b8:4f:44:1d:0f:
76:00:cb:4d:11:69:fb:31:ba:0e:5a:8c:be:62:b9:
a0:cf:96:f9:58:16:d9:d4:9a:57:f0:ae:19:23:7f:
8a:91:d2:08:8e:24:51:9a:cc:42:19:bb:15:c4:06:
08:15:a4:64:77:0e:e5:78:d7:27:a1:98:39:d3:18:
ec:1d:ec:f1:eb:ba:b7:1a:a8:26:87:e2:e2:57:d4:
b2:7a:5b:16:dc:fb:1c:9c:5e:69:2b:97:d5:71:5a:
8b:78:b5:1e:23:7a:99:9d:e7:77:cb:a8:40:76:3d:
73:fb:34:c0:0f:91:dc:2a:a8:6c:da:f3:e1:d2:76:
38:50:7e:30:87:df:cc:89:a2:ec:cb:aa:49:d1:a1:
08:a2:eb:95:83:9a:e8:e7:d4:1a:24:fb:d7:4c:04:
11:b4:1a:c1:e3:45:b2:5f:25:af:3e:5e:79:7b:34:
48:8f:1d:36:00:25:77:4d:db:34:62:72:36:3d:9b:
3d:5b:7b:6e:a6:0c:7e:6e:35:09:18:f2:41:58:a5:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:7B:A3:EB:53:07:C6:7B:E6:3F:3E:98:E5:5C:3F:90:FC:C4:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/2abedf6b-aa32-3080-a9fc-0bcba5f2f8ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.crl
X509v3 Authority Key Identifier:
keyid:BC:D1:5B:DC:4C:F1:27:56:D4:0E:CF:F0:CE:C6:EC:7A:B5:B1:DD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/49aa3661-0fa7-43a8-937b-3dbcc28b39d5.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:a9:1a:bd:28:66:f5:5a:a0:b9:e1:b2:e4:bb:ad:63:22:6b:
83:82:cb:7e:4b:94:48:f9:42:b2:cc:f7:ad:27:03:19:bc:07:
30:11:7f:22:7b:53:e4:d5:18:2e:88:49:66:59:bb:19:61:c2:
7d:02:23:9d:85:aa:d7:bd:99:b6:4f:49:8a:c4:c5:a1:00:a8:
e4:f6:a6:2b:94:d0:a5:7e:47:a2:3d:46:b7:60:28:7a:31:e2:
02:92:01:e3:27:74:a7:c0:be:cd:aa:97:a3:e9:0c:b9:3f:9c:
7b:13:c8:ea:b4:59:33:9f:2d:de:e2:ae:dd:71:a9:13:64:6b:
69:1f:9e:87:ec:6b:5e:d4:60:f2:6c:db:a2:76:25:53:08:a3:
ea:e8:16:73:5f:85:7b:c7:3a:e1:5b:c5:be:ef:28:8d:c2:ce:
37:06:34:16:f9:c7:ae:b6:b7:cf:b0:15:7b:06:bf:74:ed:c7:
7a:0f:a9:7d:d9:03:d6:ee:5a:1d:80:3f:20:f8:90:e7:f4:5b:
f1:e9:80:70:06:f5:59:38:3d:17:7d:6e:bb:4c:1d:59:50:0e:
98:cc:b0:f9:92:e8:ef:5d:4b:29:f5:b1:b0:16:e1:f5:84:57:
39:1c:fd:21:19:95:af:4b:60:b2:36:06:63:39:01:62:a1:77:
1a:5e:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:54:53 2025 by rpki-client