Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
File: 2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa (raw, json)
Hash identifier: vxQkvSRiLerqNPWm2LV2QKVO4ua/vu/j7Jp3X+56clU=
Subject key identifier: 31:06:2E:03:81:19:41:DC:1D:02:CA:89:27:41:2E:80:72:A4:44:4C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D6412F970FF44EBBE88AC5C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 3257
IP address blocks: 45.38.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:2f:97:0f:f4:4e:bb:e8:8a:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=7de7701b-7c3f-42c3-bd6e-6173b57182b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:c8:49:4e:ce:70:b1:a3:42:67:0f:a3:1a:
a0:b4:4b:5b:ce:81:b6:d1:8a:5c:b5:c8:d8:54:86:
cc:21:85:99:55:1a:2b:50:e1:f0:1a:0e:b0:a2:cb:
db:ae:14:5b:90:93:0d:dc:d7:62:90:93:d6:ce:57:
1f:79:4d:51:d1:57:b5:33:25:f8:c6:3d:51:b2:6d:
94:2a:a8:e3:a1:cd:b4:8b:e1:23:9b:3d:63:7e:94:
3d:a2:05:c7:8d:9e:6d:1b:8e:f3:5d:0b:55:8b:af:
7c:ae:da:12:09:bd:a7:5b:f6:d3:36:b3:d1:b9:57:
53:93:fa:71:95:3d:1c:c8:3f:c0:b7:54:5f:fc:8b:
5c:a9:28:21:2e:7e:82:e3:f3:2c:09:bb:32:6f:e7:
23:c6:1b:26:25:cb:61:1e:71:94:ab:af:fe:88:95:
c7:61:c2:c2:31:cd:db:36:21:42:6d:59:a4:6a:9b:
97:d1:51:4b:fe:9d:66:77:63:c4:d2:40:64:0d:90:
23:cf:a1:5a:24:f6:2a:7d:12:8d:a4:9a:1c:0c:dd:
be:39:7a:65:01:c1:8c:78:71:10:15:9b:c0:7f:b9:
31:26:e8:d6:0f:27:93:b3:c7:0f:0e:93:f6:c6:1a:
ee:b2:a3:0d:04:51:32:95:9b:ad:ee:e3:9e:5f:a8:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:2E:03:81:19:41:DC:1D:02:CA:89:27:41:2E:80:72:A4:44:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d1ca74f-1ae7-3089-9308-60efc6bddfd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f4:34:3e:1b:7f:c9:98:3c:fd:1c:3e:f9:f3:fa:f6:15:23:
8f:10:54:3b:a5:bb:4f:3b:3e:8e:bd:63:6e:6e:03:f6:28:d7:
49:62:b4:cc:f1:23:8d:13:c5:f7:61:34:d8:cc:a4:21:b2:f5:
0f:24:24:2d:69:c0:2e:64:c6:13:f0:16:e0:24:ab:5e:dc:0e:
d1:a7:ce:94:c2:f4:b0:c3:bc:85:67:cc:19:72:99:79:b6:00:
41:2e:6c:b8:ef:27:ed:79:24:14:8d:78:c1:22:5e:dd:9b:99:
b3:f9:a8:ba:2f:0b:69:26:94:65:57:33:c2:3e:13:be:77:c1:
c3:e6:d8:07:e1:c7:3f:85:e7:c0:85:46:f2:67:02:37:76:bc:
97:f1:50:4a:02:ae:61:80:a1:44:b2:5e:f7:79:7a:f9:37:e5:
7c:39:75:f9:91:3b:a8:0a:e6:7c:b9:7e:11:b9:1f:3b:08:4c:
89:fb:eb:ef:b5:e0:b0:80:b8:86:7b:cb:a9:24:54:a3:94:ce:
38:86:60:95:5c:d5:73:08:14:5e:8b:53:d5:8d:2b:82:11:9d:
81:81:bc:c0:e7:e9:d7:b3:dd:c1:55:9f:fc:47:13:48:3d:7e:
3d:99:8c:a3:58:a3:87:30:90:39:86:01:e9:cf:97:24:ac:e3:
34:03:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:48 2025 by rpki-client