Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c9c989c-65ca-3210-b6c2-3e24d4a7cf7f.roa
File: 2c9c989c-65ca-3210-b6c2-3e24d4a7cf7f.roa (raw, json)
Hash identifier: 3TX3+Dtr5sQuJ0+0b7f8JhQz94xWk9XP/le21jyzRT4=
Subject key identifier: 45:B6:81:25:5A:FE:8B:71:EC:AE:78:A1:CA:30:7C:A5:C7:A0:13:53
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849244E758B4EF6E1CB55F4F080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c9c989c-65ca-3210-b6c2-3e24d4a7cf7f.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 400536
IP address blocks: 45.38.0.0/24 maxlen: 24
45.38.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:75:8b:4e:f6:e1:cb:55:f4:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=8c70871e-9f08-469b-aeae-bf84dde3484d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:0d:78:eb:61:1f:d6:fb:c0:b1:57:f3:9a:
6d:2b:c2:f9:b0:a8:8e:9e:37:66:ce:e4:07:72:ce:
e0:7d:45:16:13:dd:a8:b5:3a:ab:55:e9:30:8e:8a:
e1:d5:40:99:e3:55:83:c5:9a:b9:b5:aa:e5:fd:2e:
b7:cc:d4:80:5b:87:93:bc:39:8a:c0:65:0b:75:05:
97:dc:9b:8d:9e:59:fa:50:10:73:ca:d3:20:3c:4d:
4b:1a:44:c8:62:78:66:81:02:13:29:74:b7:d4:39:
aa:a9:bb:71:94:25:d3:f1:e8:ec:a1:0f:cc:43:fa:
3d:92:d2:96:ad:8c:0f:5c:c8:26:81:3d:02:67:36:
d3:8a:23:c6:f2:c5:5e:f1:78:00:f1:67:71:9d:24:
cd:ca:ee:21:37:46:07:36:b0:9a:18:82:29:88:a2:
00:3b:c1:f4:6f:55:32:d8:6b:97:38:6b:44:8e:02:
61:59:13:ee:f0:02:89:62:71:98:b9:3b:5e:0c:5c:
2b:fa:61:46:ae:69:d3:55:17:75:2a:46:86:4a:97:
53:c7:cf:1e:99:76:aa:4f:f3:02:b9:57:5c:79:78:
30:8b:d0:83:a0:17:c2:14:44:ef:98:5c:9f:bc:87:
20:c7:cc:53:12:15:db:79:92:a0:5a:a0:a2:bc:2e:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:81:25:5A:FE:8B:71:EC:AE:78:A1:CA:30:7C:A5:C7:A0:13:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c9c989c-65ca-3210-b6c2-3e24d4a7cf7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.0.0/24
45.38.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:a9:5d:2d:3a:ad:82:f5:6c:46:c8:13:89:fc:25:7e:a1:ec:
97:91:ac:9e:33:aa:2e:9f:25:cd:f1:b8:ad:f8:9d:bb:43:5d:
77:a1:c4:ce:3e:b6:67:9e:2a:c0:54:b3:2e:46:05:e8:28:8a:
c5:ad:84:0e:f1:1b:84:b4:f4:1b:b9:75:ec:ca:e4:51:f0:da:
89:75:e3:2d:c9:69:7e:cb:18:b5:d6:e0:81:cf:bc:cc:1f:87:
31:92:45:b0:71:8e:cc:c6:38:95:65:c9:7e:e8:1a:02:2b:b6:
c1:85:e1:7c:58:05:89:a4:2c:34:27:41:cc:48:6c:22:67:69:
68:9a:97:f5:c4:1b:8c:ef:6a:6e:7d:f2:da:d8:a8:df:27:a0:
03:41:10:ac:16:a2:b5:88:8d:ba:40:bb:6c:95:a2:ce:0d:4a:
eb:32:a7:48:a6:eb:57:0e:aa:c1:8c:3b:3e:4c:84:33:d8:51:
48:92:42:83:3f:e2:17:d9:92:f5:ef:88:a1:ac:60:55:e9:16:
84:c7:b9:53:cb:20:72:dc:a3:ce:68:9c:f2:90:3c:36:3c:84:
16:ea:d7:92:23:ee:60:dc:e7:f8:d9:3e:26:20:2b:90:f7:e7:
23:4e:44:f3:2c:47:90:32:c6:9a:fe:81:13:d5:a6:3f:17:c9:
46:a7:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:36 2025 by rpki-client