Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa
File: fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa (raw, json)
Hash identifier: WhcuBo/byHZ0H+tslzUmVXshJkr39KbvM43N8scMv34=
Subject key identifier: 72:89:4C:5D:9F:82:0B:A4:33:F1:FA:46:0B:C8:91:BB:6A:9F:CE:8B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848BE86316B1F05A7D87F74ECC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 3223
IP address blocks: 45.74.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:31:6b:1f:05:a7:d8:7f:74:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=a75db71d-e339-4226-9a74-01069a4e0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:78:f8:78:78:5d:7f:59:f3:a9:8f:98:4c:46:
9e:67:ee:db:d7:c4:88:5f:83:77:7b:c2:c7:f6:4f:
0a:b0:8e:55:80:15:38:af:5b:39:5c:45:83:68:cc:
a7:e0:0b:13:92:cb:51:dc:f0:e3:8c:4d:1e:ee:b3:
f5:82:f4:63:20:fc:2e:b0:01:36:7c:f2:14:59:8d:
fc:b5:ea:93:6b:ad:c7:ca:ed:ee:17:7b:1c:cf:ee:
09:be:1a:fb:48:0d:28:73:64:ba:fd:03:93:6b:10:
3f:dc:92:ed:9f:e5:22:16:da:f7:4f:63:a6:86:51:
5c:06:2d:b6:1d:01:04:8e:e5:eb:90:13:ff:56:ea:
8f:bb:3e:4b:6a:5c:6b:95:23:8c:94:d4:14:6b:a8:
ac:eb:40:5a:b8:09:79:7f:af:50:ce:ae:32:d0:d0:
54:06:ec:e4:02:e6:36:f9:bd:19:d1:1e:2d:27:bf:
3c:b8:c7:b3:dc:87:a4:9a:45:a8:80:1e:12:15:17:
6f:45:58:fa:21:87:e9:bb:20:cd:f9:e5:90:a8:88:
aa:20:c3:3d:45:26:36:23:4e:a1:b1:fa:9e:1b:05:
2e:14:01:d3:12:68:58:88:ca:e0:d7:47:5a:29:74:
1e:37:09:97:72:d9:12:44:31:00:f0:87:8c:d5:cf:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:4C:5D:9F:82:0B:A4:33:F1:FA:46:0B:C8:91:BB:6A:9F:CE:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fcc873f1-97f4-3f03-9f0e-0640297d5a65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:54:9a:fc:75:19:e8:af:dd:2d:35:9b:7a:bb:0f:9f:29:90:
24:1f:d8:2b:80:d2:32:1c:21:a5:91:2a:d1:8c:9a:8b:36:92:
19:f4:d7:c0:e2:4c:aa:92:fa:5a:74:59:78:58:44:d7:b6:67:
47:20:fc:d1:b7:85:16:44:54:16:5c:7d:63:9c:bf:e2:15:cc:
09:3b:fb:73:79:13:61:8e:b5:c4:86:cc:02:87:6f:26:d6:66:
9f:d6:33:e0:1a:08:65:6a:04:d3:04:1d:11:16:d7:3c:18:3e:
cb:1a:a3:7c:dc:e0:6e:16:76:7e:9a:6e:49:9c:df:0f:8b:4a:
e1:8c:04:64:09:54:38:95:8f:40:ed:72:29:7c:af:ef:45:a6:
66:c3:55:17:94:59:05:49:04:b6:a1:23:b5:48:89:d6:b1:1f:
41:cf:c7:14:2f:78:2a:d0:78:53:78:45:2a:80:0c:f1:13:ee:
e5:4e:f7:da:65:94:00:af:81:e4:00:22:3b:70:b4:0a:86:3b:
8e:d2:a4:6d:c6:d4:93:8b:7b:56:95:af:77:6a:d7:80:58:3e:
0c:9e:d8:8f:10:7c:49:14:ab:fd:4f:d3:98:98:3e:a4:a0:0f:
d9:51:c7:7f:c3:71:af:e5:dc:ea:73:a0:0a:1d:b4:97:4e:37:
a1:af:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:12:28 2025 by rpki-client