Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa
File: 1faf7ad3-e3f9-3487-b235-101953ee16ec.roa (raw, json)
Hash identifier: 8aUhSfkFswrIuve77Gl1YiBMsW1U/OnTUAiY6lyOOIs=
Subject key identifier: C5:D4:B7:B5:D5:7D:1D:04:9F:43:12:9B:13:33:6B:86:89:57:64:77
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584950F96A2551760C2C456BA480
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 6079
IP address blocks: 45.58.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6a:25:51:76:0c:2c:45:6b:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=fc771da6-1523-4ba3-b621-04902c1961d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:d3:9e:6b:26:c3:94:ff:72:31:5d:74:f1:
61:4d:0c:8c:1d:1c:42:9b:c4:34:16:81:9e:71:a2:
9d:cb:d6:03:a1:24:5f:1a:32:ca:e2:ff:f0:fd:66:
c4:49:43:ea:57:0b:a5:7b:3c:5d:57:d9:9a:b3:bd:
71:1a:59:21:ab:84:4a:0c:1a:1c:90:87:f8:31:93:
80:b5:27:96:30:1f:7e:81:af:cb:93:d9:e6:7a:c6:
eb:d1:0e:30:03:e9:9a:21:aa:0f:db:5f:1f:6d:3f:
7d:23:e6:c5:c9:69:02:fb:31:c3:e8:d9:f9:88:bf:
a5:ee:51:20:7e:e7:60:4d:d4:93:53:f5:cd:cc:11:
5d:6e:79:bc:99:18:e3:f7:6f:99:1a:d2:b4:e1:ac:
38:65:79:49:6e:76:2c:5b:43:3b:47:c5:f0:05:88:
5b:c6:c2:e4:54:67:79:bd:41:76:8d:e6:72:97:a4:
1a:41:50:c1:e7:06:6a:a9:d9:23:8a:c8:23:29:e1:
40:b1:af:55:bb:07:ad:d3:24:7d:a4:c7:e9:f4:bd:
12:0d:26:b5:ba:71:86:67:d6:ff:4a:85:ec:81:8d:
82:c0:ed:85:5b:8b:6c:d6:a8:c3:f5:21:28:10:37:
7d:77:63:c7:b0:36:a0:46:d5:3e:ee:06:0f:26:40:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:B7:B5:D5:7D:1D:04:9F:43:12:9B:13:33:6B:86:89:57:64:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1faf7ad3-e3f9-3487-b235-101953ee16ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.58.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:40:77:68:30:5d:fa:4f:0c:1c:91:aa:b5:9d:43:02:eb:c2:
cd:2f:35:6f:71:63:00:50:fd:36:26:48:c4:bb:1e:bc:f0:e8:
68:49:7b:e0:c0:2a:98:75:82:19:82:b9:64:da:ad:1c:44:2f:
05:1e:01:29:48:fb:fe:cb:e4:c0:24:19:d2:a7:d4:ce:0c:bc:
71:65:e1:7a:b5:f6:7a:56:be:a7:fa:ff:ee:90:70:d5:d4:e4:
aa:f3:c3:6d:53:67:60:49:12:0c:b7:f8:36:ef:e9:29:06:72:
7c:a4:f1:8b:7f:8f:21:cd:63:32:90:7d:bd:84:3f:a5:5b:ad:
86:53:63:e3:31:cc:eb:f8:ec:52:af:97:7b:d0:41:65:88:fc:
f0:29:98:59:5e:59:64:61:d5:93:b5:36:a5:86:e1:d2:92:e7:
e3:e1:4d:42:98:95:bc:4c:04:81:36:1a:30:7d:ce:fa:ac:aa:
f6:7f:e3:4f:8f:1a:8a:c4:0e:35:2d:7d:5b:ac:81:7d:5d:89:
12:62:7a:5c:2e:3c:9e:d8:71:70:36:dc:22:a3:a2:71:af:c5:
9f:4f:cc:a4:1e:5c:0d:3c:30:96:57:ce:ee:11:10:77:ac:bd:
95:04:8d:d7:95:c6:2a:20:af:44:24:0e:2e:27:b8:94:27:08:
b3:e9:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:39 2025 by rpki-client