Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/9efb9894-0cb3-3a27-a614-f1fdf6a574b7.roa
File: 9efb9894-0cb3-3a27-a614-f1fdf6a574b7.roa (raw, json)
Hash identifier: kxl1Xy75gXwLLx4cTdZ9fASmiQ1IJmKuniPYu2xXIlA=
Subject key identifier: BD:FF:E5:E0:FA:EA:88:68:E0:01:3F:43:F9:B8:D2:C2:F4:42:DE:76
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F432858494CC94FDED6BBB1FE5349F2C0
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/9efb9894-0cb3-3a27-a614-f1fdf6a574b7.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20473
IP address blocks: 45.32.0.0/16 maxlen: 32
45.63.0.0/17 maxlen: 32
45.76.0.0/15 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4f:de:d6:bb:b1:fe:53:49:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=f6e3ddb6-7bdd-467d-b014-081f14b7a66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:fd:6a:69:41:e7:ab:ea:a7:9b:19:e4:42:
a2:be:a3:ee:7e:ca:18:49:95:ab:b3:68:81:a4:4d:
ec:eb:3c:c1:5c:ce:c4:05:82:31:0d:c1:be:e9:d5:
96:5c:58:7b:c3:6b:14:12:6f:5a:60:2c:e3:c9:22:
86:b2:f3:b0:87:ee:be:ce:c3:34:9d:55:fb:24:92:
83:0f:bf:8f:07:01:02:3e:a6:c0:06:bc:1e:11:91:
be:f8:5c:ee:a0:20:e6:75:cd:4f:7b:1a:7f:f2:f9:
c7:ac:db:f5:de:ba:93:08:3b:94:4e:2d:ab:fa:11:
8e:9e:e5:02:77:ba:cb:8f:9b:c4:49:cc:9e:5b:52:
9e:32:db:53:e6:c8:f2:75:c9:2b:1d:fd:07:1b:a7:
99:b5:53:fe:ad:92:9f:87:1f:0d:44:2a:e4:2b:2e:
20:48:2c:5e:1f:b1:86:ed:a9:e1:9c:7d:14:6e:3b:
15:79:0a:f7:ba:93:b0:c4:d0:d2:20:3c:02:cd:2a:
30:14:84:e2:5e:9b:79:af:ba:62:5d:3c:66:ac:b7:
ee:00:57:c6:66:3d:42:6a:b3:2c:ad:63:2f:2c:8a:
cd:a7:19:86:81:be:47:6c:fb:40:d8:94:74:6a:12:
75:63:ff:d7:6c:ca:96:dd:c6:bb:bf:bf:93:6a:19:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:E5:E0:FA:EA:88:68:E0:01:3F:43:F9:B8:D2:C2:F4:42:DE:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/9efb9894-0cb3-3a27-a614-f1fdf6a574b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.32.0.0/16
45.63.0.0/17
45.76.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:9d:f7:4f:40:82:64:40:0c:63:c1:46:ae:f3:bc:49:ad:65:
d9:01:bd:c5:1a:90:a8:e3:88:ce:32:e0:5a:b5:a5:95:4d:64:
7a:59:89:dd:30:4d:41:07:f6:e5:ec:19:18:01:08:9b:e0:bf:
86:6c:38:13:bf:92:49:26:a7:66:6f:7f:a0:d6:15:40:30:7c:
9f:e1:32:b3:5b:01:b6:f3:cf:e5:45:94:88:79:0d:8b:b4:2d:
92:30:a5:cf:2d:7e:03:5e:40:55:e2:28:35:a3:73:c6:80:f0:
dd:15:47:21:d1:65:ac:94:da:a6:45:8a:cc:2e:c5:ac:82:0a:
e6:a4:0b:a9:39:b7:e9:70:48:79:64:18:49:3c:c7:04:36:60:
36:d3:a7:37:27:83:e1:ad:6a:51:ab:85:72:3f:38:d7:97:d6:
10:aa:b3:bb:d5:3c:ab:43:51:46:a3:2b:f2:84:79:e5:2b:f5:
de:b1:7d:3a:dd:95:59:5e:c0:73:b5:55:e0:dd:60:10:91:fc:
48:75:3d:4c:c9:c5:a1:64:7c:73:9d:bb:27:2b:f9:9f:cf:fe:
ee:b0:96:2c:74:89:0b:0c:7c:35:18:ad:8f:35:2e:f0:b5:ec:
d7:ce:35:33:2c:d3:e0:5b:da:35:a6:d8:2d:cc:3b:65:27:27:
23:9f:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:33:22 2025 by rpki-client