Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/65a59152-9929-37d2-83fe-0a3cc7dba6ba.roa
File: 65a59152-9929-37d2-83fe-0a3cc7dba6ba.roa (raw, json)
Hash identifier: Lyfcop80sMFW54IEFRq7+6SWKWuyjYKMHAwpGNvJWcw=
Subject key identifier: 96:E1:A6:52:88:64:F9:16:48:36:44:5E:5F:C4:0D:4F:86:E2:5F:29
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584918495A8D8064EAEF754391C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/65a59152-9929-37d2-83fe-0a3cc7dba6ba.roa
Signing time: Thu 06 Mar 2025 05:41:01 +0000
ROA not before: Thu 06 Mar 2025 05:41:01 +0000
ROA not after: Wed 04 Jun 2025 04:41:01 +0000
asID: 9009
IP address blocks: 45.74.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:18:49:5a:8d:80:64:ea:ef:75:43:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 6 05:41:01 2025 GMT
Not After : Jun 4 04:41:01 2025 GMT
Subject: CN=20aed6e8-9f09-4310-b832-6da1a2bbc599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:c3:9e:28:e0:8a:9d:eb:62:b6:f7:8a:a7:
e8:55:8d:5e:2b:ce:9e:d6:8d:1f:4d:27:74:3b:47:
ee:c6:53:af:d7:6a:26:45:47:9d:06:cf:16:72:0f:
90:f2:33:b0:8d:f6:44:4c:63:6f:98:a1:f1:ed:b6:
90:c7:dc:65:d2:e0:3b:0d:53:27:ee:2a:3b:94:d4:
0f:b4:f0:24:ee:8d:9f:66:65:eb:95:63:07:77:50:
66:5b:0b:60:81:ed:c1:7f:97:3a:15:7c:a4:b6:6b:
d6:0d:91:29:dd:9d:0c:6d:59:d1:f7:6c:bc:06:5f:
4a:ea:67:17:5a:65:df:91:95:99:aa:41:0b:fd:f2:
c8:b8:90:ca:17:d4:64:f4:d8:7e:35:86:e0:13:2b:
ad:29:43:13:05:a9:4e:23:65:63:22:ab:72:d9:fa:
2d:81:5c:96:f5:bc:44:7a:9f:28:5e:89:ef:ea:99:
83:ce:d6:50:e7:e5:32:a7:62:7e:75:8f:f4:a0:ed:
ef:77:89:30:c4:df:2a:e3:a6:36:1b:ec:70:c7:95:
e6:22:dc:2e:30:0e:29:e4:82:22:03:68:e2:cb:88:
78:53:46:00:22:c8:51:f6:bf:ad:f9:06:48:0b:e5:
78:fd:7e:22:26:56:d3:17:fa:2b:59:b0:fa:1e:98:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:A6:52:88:64:F9:16:48:36:44:5E:5F:C4:0D:4F:86:E2:5F:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/65a59152-9929-37d2-83fe-0a3cc7dba6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b4:c1:7f:38:9f:a4:1b:bb:17:f0:f5:c1:8b:53:4f:4a:4e:
59:86:1a:1e:c6:fa:3d:46:2f:59:95:4d:c9:f0:59:31:37:32:
d4:c2:b3:1c:3b:d9:bc:8c:9a:48:14:23:70:e5:ba:01:b2:e8:
b2:d1:ba:e6:76:7d:fa:9a:9d:22:d5:5b:ed:1e:5c:fe:05:6e:
dd:93:7f:24:eb:ca:fd:83:83:b1:40:bf:67:64:ee:70:5e:47:
cb:30:9d:c4:e9:fa:99:b6:a0:7a:eb:b0:c8:3a:5a:25:29:92:
fa:8c:4f:39:d2:14:c2:db:d4:28:ef:f7:ea:9d:d3:68:b2:0b:
8a:58:9a:53:ef:59:5b:3e:5e:98:82:ef:9a:5a:67:e2:8a:65:
db:7a:d0:fe:4e:a5:a2:2a:ec:5f:3a:d0:d9:e8:b7:9a:b3:54:
2f:63:62:d8:2d:00:33:4d:18:79:2a:37:f6:cc:a2:a8:8a:3a:
a5:e8:04:5e:97:38:48:d1:18:9a:98:a8:b3:cf:53:0f:00:86:
fd:92:29:52:d9:46:02:2b:e5:2e:dd:26:2a:45:d4:e2:b3:e8:
5d:f0:d8:43:f9:5b:d0:71:9a:e9:2f:ab:a9:1c:8d:6b:61:75:
27:d9:3d:f4:6d:3f:5d:55:51:d3:7f:91:d0:ad:1b:8f:22:ef:
46:28:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:57 2025 by rpki-client