Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6cf35044-0655-3aee-8458-1e213e0ce624.roa
File: 6cf35044-0655-3aee-8458-1e213e0ce624.roa (raw, json)
Hash identifier: i8xV7+rLaGGpVBpyTSGkrvtbRrqh2ltS8RCr0Ria7tE=
Subject key identifier: BE:75:85:05:0A:95:CA:D7:6C:A2:D6:46:E5:FB:4F:7F:46:03:69:A8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE214FCD256CC228069C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6cf35044-0655-3aee-8458-1e213e0ce624.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 45.74.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e2:14:fc:d2:56:cc:22:80:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=0ebcd82a-abd8-49c0-8149-22d02b3bdb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:6a:4a:79:64:ff:e8:27:40:bb:9e:1c:85:
24:b9:65:0c:4a:a4:d7:9b:3f:4a:89:2e:ca:df:4e:
e0:53:eb:df:79:75:79:53:d3:07:13:08:d4:e5:b8:
5f:7b:45:7c:a1:a4:6b:56:95:98:38:f7:67:d0:bb:
0b:69:12:13:0e:9a:62:a1:41:b1:4a:b8:7e:0d:ef:
91:c1:4d:38:4e:0b:65:9d:dd:a8:80:d9:8f:ef:3c:
43:8e:8c:09:8a:b6:bb:67:e1:83:61:00:f5:d0:f4:
ed:b9:12:c0:68:2a:26:94:f5:78:29:65:5f:4d:38:
29:7b:33:28:88:0a:9d:48:71:02:c5:a5:40:ce:08:
ba:56:c7:e8:fd:3d:f1:b6:70:6e:b7:cd:3e:d6:17:
fa:ca:df:70:2f:85:ee:f6:54:ed:31:4b:bd:28:09:
63:a2:43:a2:fa:2a:cf:2e:fe:68:ec:2c:1d:d2:af:
69:2b:db:aa:74:16:9e:1f:fa:2f:0c:42:6e:cd:1a:
57:3d:83:2a:ad:8a:c3:28:74:bc:e4:64:ca:de:d1:
1c:f7:5b:cf:cf:28:6b:be:1a:07:56:96:b7:8c:a9:
77:00:18:e8:ae:9a:5a:9e:ad:66:f9:b3:d1:61:01:
49:0c:18:ab:d0:44:6e:2b:3e:07:48:9f:b3:d8:b8:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:85:05:0A:95:CA:D7:6C:A2:D6:46:E5:FB:4F:7F:46:03:69:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6cf35044-0655-3aee-8458-1e213e0ce624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b8:ff:9d:15:05:c6:a4:7c:95:6e:d3:16:80:56:3c:9a:fa:
d1:45:b9:b7:01:2e:13:8c:1a:07:64:65:a5:86:3e:31:5e:64:
f6:e4:dc:d8:8f:13:db:d3:ec:ed:63:2c:89:c6:28:23:c6:e5:
87:10:43:d5:e1:ed:33:df:7f:bc:62:f9:97:20:6d:51:79:5b:
ac:6c:b7:9c:90:65:66:7d:e7:dc:ad:62:ae:f2:70:4e:a9:da:
74:95:7f:50:2e:fd:fd:20:77:1c:21:9b:f5:dc:49:4d:84:be:
7c:31:d9:51:1d:33:3f:4f:74:c2:4d:45:a1:39:8c:d8:23:5a:
24:0a:56:db:28:80:59:4f:bf:ef:9e:21:09:bd:30:81:62:a2:
a0:fd:f5:b2:d3:90:0f:7f:95:27:7e:03:ae:5b:3b:d2:10:3d:
5c:a3:d9:bf:de:c7:dc:c9:c4:4e:a5:ce:9e:f7:9b:e6:0b:2e:
0b:66:89:53:eb:f1:b7:83:dd:dc:8d:ca:23:44:e8:52:b4:2c:
11:d5:b8:58:a5:89:38:ee:8d:e1:6d:9e:1a:5f:43:a9:3b:bf:
cd:f3:95:31:e2:ff:9e:56:28:37:d1:89:9c:1d:2e:4f:3d:3e:
17:d2:e2:26:f2:ce:1d:f3:b7:3e:04:cc:49:cf:09:0b:3b:56:
fd:8a:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:18 2025 by rpki-client