Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
File: d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa (raw, json)
Hash identifier: Ol1mKxIc9QX2WuN6VxAe3UB1MKjVQahnKvCkVgzI3Lw=
Subject key identifier: 59:C7:E0:CD:A3:38:33:87:84:07:E4:AA:9E:4E:18:41:B5:50:F4:F9
Certificate issuer: /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial: 010D0C9F432858491D71772A3F65AEBA2B629CF8
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 398717
IP address blocks: 45.59.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:77:2a:3f:65:ae:ba:2b:62:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=13fbf7d1-cb00-4b46-8caa-17cc96bfcae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:89:5e:99:ac:86:0a:2a:8c:e7:47:e6:03:
d5:c3:06:4b:83:5b:16:28:4f:f2:55:70:08:a0:2e:
33:3e:74:09:c4:0b:1b:b2:41:d0:1a:b7:89:3e:8d:
36:0a:18:9e:c6:3c:c3:68:38:dc:79:02:5a:5e:ed:
71:b6:13:a9:d4:5f:f7:59:64:ae:ed:cb:d1:87:e4:
dc:83:23:1c:f8:d5:73:2c:c2:23:26:76:d1:e5:34:
41:05:87:c8:71:a6:4c:37:ac:83:4c:0d:a4:ec:20:
15:ec:c0:e8:d4:20:56:1c:95:a1:66:65:db:f8:3c:
cf:75:c1:ca:2c:fb:c2:c0:bf:ae:7f:69:40:4f:64:
9c:bd:fa:58:6e:89:ca:9e:8b:68:24:6c:b6:7e:81:
fe:5f:bf:ea:61:ec:7d:8a:43:6f:01:09:11:e6:96:
20:ef:a2:bb:30:22:58:ef:05:9d:cf:40:0e:f3:36:
4d:f7:d2:7b:8f:30:41:0b:92:26:bf:2f:76:3f:08:
14:94:4e:cf:1c:f7:8d:06:ca:86:30:12:c8:a0:3b:
09:74:24:d6:bd:19:d7:2f:5b:97:c8:9b:6d:8d:b1:
58:c8:93:b2:33:c3:82:32:7b:8a:98:04:bd:58:b1:
42:6c:b3:2b:cc:6e:2a:4e:e8:bb:c4:33:ad:f9:2c:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:E0:CD:A3:38:33:87:84:07:E4:AA:9E:4E:18:41:B5:50:F4:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
X509v3 Authority Key Identifier:
keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:3c:5d:3d:8c:13:0c:ca:52:bf:67:5c:42:8b:54:94:2d:16:
78:3d:9a:66:43:e4:6e:96:0d:d1:8e:45:2a:a7:5f:21:eb:50:
c8:21:ff:12:15:a1:b8:0b:e5:e9:7c:c2:e1:be:9b:19:01:b4:
80:63:09:c1:48:6a:fb:06:15:2a:6d:d4:6f:72:8b:bf:c0:06:
1c:bf:61:52:ee:1a:02:09:e2:c5:e4:77:fd:1b:54:d7:2d:80:
19:aa:7f:86:33:ff:34:06:5b:d9:9b:2d:ca:5d:37:df:27:c1:
cb:42:0a:0b:9a:cc:26:49:c9:11:1b:1c:9e:db:68:cb:67:95:
cd:dd:cc:02:54:97:02:da:03:b1:41:48:01:96:be:fb:51:20:
f4:15:bf:ca:2c:bf:a4:70:dd:d4:35:67:4c:24:f1:12:34:b8:
82:d4:28:50:02:fd:fe:81:98:8c:1c:79:89:17:87:bd:90:73:
f5:5d:40:b1:ec:ac:f6:4c:15:4b:5b:28:cf:ec:8a:04:4e:bb:
0c:4d:77:30:a8:1e:71:e0:c8:1c:36:63:0f:22:ce:e5:06:74:
5a:ae:9a:12:7b:b8:db:a1:62:1f:44:e3:c3:28:f9:e4:40:fe:
be:a9:af:d5:d2:8f:50:0f:d9:00:c6:bf:28:e8:bd:21:fe:0d:
c4:2d:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:33 2025 by rpki-client