Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a3e54cbc-46f9-3861-9031-9bcafc4a640f.roa
File: a3e54cbc-46f9-3861-9031-9bcafc4a640f.roa (raw, json)
Hash identifier: /THeWFG/MVwelsUo0wtyHdfRH++uAgURSXreYhLYY/w=
Subject key identifier: 0D:E3:F1:9A:00:CE:C9:BA:84:5B:7D:5E:BC:13:9B:E4:E2:B3:AF:08
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858487B21B180F5B4DF6FE8D83620
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a3e54cbc-46f9-3861-9031-9bcafc4a640f.roa
Signing time: Wed 08 Jan 2025 22:39:12 +0000
ROA not before: Wed 08 Jan 2025 22:39:12 +0000
ROA not after: Tue 08 Apr 2025 21:39:12 +0000
asID: 22652
IP address blocks: 45.61.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:21:b1:80:f5:b4:df:6f:e8:d8:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 8 22:39:12 2025 GMT
Not After : Apr 8 21:39:12 2025 GMT
Subject: CN=ad8f0a85-2ba0-41e2-84b8-54f67b4e0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:72:74:e8:10:b2:f5:5f:e4:51:ff:1b:85:
7d:41:f2:b8:7e:bf:34:47:d5:44:be:db:76:3e:07:
9d:c1:48:54:91:4d:6d:eb:7d:d0:1c:96:89:7d:aa:
f7:cf:f7:f4:55:f0:1b:45:1f:f2:16:70:5b:b3:89:
8f:ad:72:29:5c:1d:df:e2:da:3b:7a:39:38:11:a5:
58:46:cc:0d:10:ca:a5:74:67:19:06:bc:92:a4:d6:
32:a8:59:32:43:a3:57:d0:d9:73:f5:26:8d:de:a0:
da:5a:f5:59:05:bb:49:24:fd:98:c7:cc:3e:68:9c:
3a:c3:b0:ca:fa:63:6c:88:d9:8e:ff:d3:18:ba:66:
7d:0a:c7:3f:26:cf:01:69:94:b7:2d:78:63:72:af:
11:ae:11:0a:19:fc:0c:84:94:cd:8c:4c:0c:eb:e2:
e8:74:83:b1:9e:56:fc:e1:14:47:60:c7:d5:ad:47:
41:78:bc:de:c2:36:fc:e8:d6:2b:5d:f0:5c:5c:56:
8d:56:b1:84:67:bc:7b:4f:e0:aa:56:17:8a:29:03:
37:a7:7b:87:b0:ba:18:43:6a:cf:a7:15:ef:77:6c:
fd:85:d1:1a:aa:d4:07:e6:2c:ad:20:3b:a9:2d:92:
93:e7:1d:80:74:02:0f:57:68:5a:f7:ac:65:4f:d5:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:F1:9A:00:CE:C9:BA:84:5B:7D:5E:BC:13:9B:E4:E2:B3:AF:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a3e54cbc-46f9-3861-9031-9bcafc4a640f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:65:28:91:be:e7:87:4f:e1:3e:ff:89:85:1c:93:25:26:26:
cf:25:1b:1d:db:a2:a8:2c:50:76:a3:00:5e:62:f9:d7:72:42:
ba:2f:1f:bc:ed:21:00:26:a3:97:6a:9d:3b:85:e4:8f:43:dd:
a9:a8:17:49:ce:e5:15:15:fe:d2:a3:48:71:b7:6d:6f:1f:e7:
52:ac:e6:dd:0f:3e:68:fa:1c:f1:c3:ee:c4:65:67:28:8c:fd:
70:2b:6e:cf:40:df:ae:a7:28:89:29:3c:44:af:8f:22:1f:50:
8f:01:cb:29:42:ee:1a:7f:04:45:d1:92:0e:36:26:0e:ab:f1:
ed:1e:30:ca:f2:15:73:50:5a:f0:b1:12:63:b6:21:69:66:40:
cb:82:72:56:24:b0:e9:10:be:f5:24:99:84:35:fc:35:7a:83:
14:9a:a7:48:1d:dd:58:bc:53:01:42:85:4e:90:7e:d8:6b:9e:
b7:a3:8f:48:62:a7:ad:2a:85:de:cc:85:69:82:c0:ba:df:e1:
cc:1a:9f:e0:15:10:bd:d7:97:a1:e6:33:3f:d1:00:7a:88:63:
ac:ad:06:7d:16:0e:2c:40:85:a5:c4:12:f8:5c:26:d2:eb:7b:
47:ff:89:e5:ac:99:45:ad:50:75:17:8b:59:37:03:24:d3:75:
72:ac:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:33 2025 by rpki-client