Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa
File: e09d4cea-d423-3a06-91f1-682b8b11b34e.roa (raw, json)
Hash identifier: xA/dnCfQ/Ncr2pkNZSZSQ+SPSia+U3dKiyx323CFgIk=
Subject key identifier: 8C:74:BB:D7:45:B1:C1:7A:02:3E:EE:5F:E1:1D:8B:9D:E6:74:8A:87
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849350E9B07DEFE17E4FB9C9B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 212238
IP address blocks: 45.74.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:9b:07:de:fe:17:e4:fb:9c:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=b41e45ad-83c5-426b-bbc2-a2cee5105d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:89:88:f3:06:17:32:92:df:eb:6b:a3:3c:
d2:c1:62:2d:9e:e1:95:5e:a3:68:44:4d:c3:ac:bc:
3e:af:55:a7:68:b9:ef:81:a9:67:f5:cc:b6:23:2c:
4a:ac:16:83:6a:93:a3:eb:fe:6b:e4:ee:2d:0d:6f:
aa:5a:8e:eb:d8:d0:5b:e9:de:2e:e7:bd:d8:a8:b3:
8f:74:1d:b9:0e:ad:e0:78:9d:da:9b:c9:7a:cc:75:
30:50:c1:dd:7f:00:34:d8:e0:90:03:29:87:6d:41:
c5:03:6a:ec:c8:82:1d:8b:50:c7:71:19:4c:3c:20:
24:04:f1:2c:3a:50:8b:6c:fc:97:6b:47:f3:10:99:
79:04:77:6d:98:1a:a2:1f:bf:4f:da:ea:63:e7:dd:
ff:db:b7:bc:42:a2:e6:48:68:9a:7c:55:7b:d1:61:
25:9a:04:25:49:2c:24:c2:b2:b9:89:d7:49:c5:3e:
a1:7b:5e:93:13:83:17:dd:bc:4b:b1:c3:e3:8f:ad:
bf:7a:11:89:85:ff:26:f3:22:d0:f8:9f:85:44:8e:
93:1d:26:e1:69:e1:cd:08:d3:94:a1:f9:84:36:65:
0f:6e:2a:49:c9:d9:34:af:13:87:36:d8:2c:9e:e6:
df:e5:a4:42:c6:20:a9:8e:e5:d4:ed:76:69:f0:41:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:BB:D7:45:B1:C1:7A:02:3E:EE:5F:E1:1D:8B:9D:E6:74:8A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:7b:d5:c6:6b:31:f5:23:1f:07:0b:34:d0:40:36:81:18:c7:
ca:df:7a:5a:a5:91:84:38:c3:7b:37:ec:19:4a:7d:90:28:1a:
93:2c:d4:0e:99:53:bb:a3:be:88:50:de:68:03:0e:1c:0c:74:
db:c7:19:24:d5:6b:c1:27:1d:80:56:df:b6:03:e4:aa:e1:b1:
1b:70:02:81:9b:f9:c7:60:e3:0e:3e:48:47:83:f1:17:83:2b:
56:18:fd:43:ec:14:d8:c3:72:a1:4d:1c:9d:5c:74:de:e2:4b:
5f:2c:7a:ea:72:b4:c5:85:2f:59:0e:0a:3d:9d:65:ed:93:e6:
9a:36:3b:9e:b4:a2:94:2e:f4:b2:d9:5f:72:b9:93:1b:ab:e3:
3f:42:cc:16:e8:9f:0a:92:8d:88:51:aa:82:b3:dc:13:52:0c:
31:e7:a4:46:b6:36:5c:ce:7f:79:36:b4:3a:a4:ff:2a:ca:fd:
a6:46:17:e7:08:a7:38:a9:dd:76:e0:b8:bc:af:af:d1:a0:ee:
6b:fd:a3:ca:55:8d:db:8d:1e:91:43:28:4d:e2:24:a8:07:b1:
60:17:81:63:cb:ca:fc:2f:53:3f:58:87:94:55:90:b2:b8:af:
25:c8:32:05:4b:d0:d6:96:29:45:9f:0e:22:36:52:7c:1a:5d:
ea:cb:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:05:32 2025 by rpki-client