Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa
File: 9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa (raw, json)
Hash identifier: PjoqFfD55CwaFZXnL9VxhxtvIgOr5G1KzJYzh4TW0V8=
Subject key identifier: B7:3B:DF:D5:C5:5D:D4:E4:52:D4:34:39:6E:76:28:78:83:C3:B0:B3
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F432858492E13BBB58A4CBD2FE5D9E580
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 38001
IP address blocks: 45.42.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bb:b5:8a:4c:bd:2f:e5:d9:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=17ac71f4-b57f-485f-8cc2-2fc8d8aaac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:3a:a6:08:07:fc:27:ab:de:3a:a2:c3:c1:
47:94:22:33:e0:cb:a5:f7:b5:a1:aa:23:55:2d:5e:
86:ee:e4:bd:77:78:cf:ae:57:3d:ab:a7:d7:40:0b:
a2:c8:a7:9d:79:b6:d8:56:68:47:8f:77:36:a1:e5:
7f:3f:85:1c:1c:aa:92:24:02:cd:37:84:d9:4e:52:
57:eb:db:35:d7:83:30:25:93:77:b7:31:e1:19:6f:
d3:2a:fc:02:fe:05:bd:21:89:9a:c2:c1:a9:55:03:
01:41:28:9f:25:b3:70:ef:0d:a7:b2:d5:73:bf:88:
aa:cb:51:a9:68:56:4f:7b:68:1f:08:21:39:e4:4a:
45:c4:b2:59:56:82:41:79:9c:d1:88:41:7b:7d:8e:
58:0c:ad:d1:9a:86:0c:c2:e9:41:91:3f:0d:40:bd:
22:d8:e1:99:f2:ac:57:c4:14:96:e0:a5:21:4e:7f:
35:a4:ca:0f:d8:6e:42:34:54:6a:16:5f:48:a7:8c:
03:fa:0c:ec:31:f0:4a:a3:4d:23:6a:a2:b1:fb:02:
72:e4:0b:00:a4:ac:c7:b1:3b:55:7d:16:6f:47:97:
8f:34:b0:97:67:ad:4b:08:ac:aa:38:2f:7b:37:98:
2c:11:64:bc:39:43:f3:ba:1f:60:5d:2b:f4:f5:6e:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:DF:D5:C5:5D:D4:E4:52:D4:34:39:6E:76:28:78:83:C3:B0:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9da75916-e40b-3dbe-bdbe-77d991c6fbda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:81:5f:6f:89:eb:ba:f8:73:ab:5b:00:8e:6d:68:fa:11:16:
f2:1a:3a:8e:92:ba:70:2e:eb:40:b7:58:b2:65:55:15:c4:aa:
cf:74:85:45:13:4f:9b:7a:9b:8c:c5:a5:7c:de:c1:e2:ef:83:
29:33:77:b8:58:24:f7:d9:ae:6e:8b:ca:0f:44:36:dc:b1:25:
02:a3:42:a0:ab:84:9b:d8:df:e1:cb:94:58:18:6e:78:e2:47:
ab:16:76:1b:e8:37:a3:42:22:b7:51:58:a1:48:b7:6c:a4:53:
64:10:ba:60:17:c1:46:8f:a1:85:71:6f:26:0f:bb:6c:62:ab:
41:14:f5:b0:e5:85:e0:95:d1:25:e4:48:1d:ac:1a:44:07:b8:
fe:2d:ce:b2:22:f1:da:40:04:cc:57:45:d0:e4:e0:68:68:98:
e7:ae:a2:a4:ff:bf:a8:1d:e1:b1:64:a2:f9:1d:5c:a0:23:e7:
51:a7:84:df:51:5e:ac:5c:aa:b8:55:1d:4c:2c:19:a9:cd:a0:
77:10:94:93:2d:91:2b:38:45:b1:dc:e8:69:77:25:fa:e5:7f:
ee:70:ad:95:3c:36:e4:2e:75:3f:3a:be:52:27:f1:62:a5:3f:
fc:5f:f6:d8:87:25:cb:05:a2:af:0d:0e:1f:37:cc:a0:06:16:
71:a6:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:41 2025 by rpki-client