Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c987d33e-4549-3742-b577-261abcc097c7.roa
File: c987d33e-4549-3742-b577-261abcc097c7.roa (raw, json)
Hash identifier: NezhMXZx21dLykmbAg5xUPRuqbyOlopjyWyq0NU137U=
Subject key identifier: 40:DE:23:36:EF:02:0B:D3:65:91:D0:FF:B4:86:3B:76:5D:40:D3:92
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848EF78D8AAD6E537A7DED02480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c987d33e-4549-3742-b577-261abcc097c7.roa
Signing time: Wed 19 Feb 2025 14:48:34 +0000
ROA not before: Wed 19 Feb 2025 14:48:34 +0000
ROA not after: Tue 20 May 2025 13:48:34 +0000
asID: 18779
IP address blocks: 45.38.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:78:d8:aa:d6:e5:37:a7:de:d0:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 19 14:48:34 2025 GMT
Not After : May 20 13:48:34 2025 GMT
Subject: CN=1a67de76-a753-4d10-b037-82226c8149b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:1b:89:db:f6:5b:80:4b:5d:50:29:af:c4:
69:7c:47:09:ee:f6:b7:eb:a7:e9:f1:0f:42:fd:fb:
da:2b:37:56:e0:dd:e3:4b:e3:ed:44:bf:86:35:63:
3d:cd:bd:3e:04:74:9c:ed:ec:1f:70:d3:ef:cd:ea:
21:f9:d3:da:75:7c:c4:4e:a5:57:86:f4:cb:02:d7:
af:ee:af:b7:2d:5c:46:8e:c0:15:06:a2:95:7e:70:
1a:95:9b:06:2e:7d:ff:c2:61:d2:63:59:cc:f2:d3:
35:53:e8:0d:db:f6:89:e1:6f:25:11:ca:a3:13:29:
d4:7d:87:38:75:8e:4b:ba:00:9c:04:73:ba:40:f5:
5d:3b:9d:e3:03:7e:25:5e:56:6a:92:0e:71:9f:a3:
3f:de:6c:c8:aa:a6:68:9b:1b:19:50:e1:1a:dd:ef:
98:cc:e4:f6:30:86:1d:f0:aa:3f:10:a6:d4:20:4e:
7e:19:29:5f:7b:fd:10:25:22:05:b1:5e:ba:7d:81:
71:01:05:b0:5d:06:c5:65:a4:7c:75:e7:97:fa:18:
f5:4f:e1:28:58:f0:59:6a:df:d5:85:fc:06:0b:25:
8b:c9:dd:0e:4b:bd:60:c7:06:ba:5d:66:8d:78:c9:
c6:dd:e3:2d:8f:be:4a:fb:da:8b:39:68:1a:33:3c:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:23:36:EF:02:0B:D3:65:91:D0:FF:B4:86:3B:76:5D:40:D3:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c987d33e-4549-3742-b577-261abcc097c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a3:c9:ff:97:59:20:6b:d4:65:52:8d:b1:a7:87:db:19:03:
c5:c7:99:ee:dc:8e:c1:17:d5:d0:5f:23:f8:0e:29:a2:f8:54:
88:56:ef:8b:81:83:a4:80:57:13:c1:78:3d:95:0a:94:e6:e3:
bd:2b:f5:ee:8e:0b:e3:bb:2a:0d:07:b4:c7:93:2d:28:19:c7:
0f:cc:c2:26:c8:aa:7f:36:f0:b2:b5:94:55:c9:00:fe:de:6e:
ee:1a:dd:0b:25:ce:b1:e5:0c:b1:1b:29:9c:99:cb:20:60:5d:
9d:1a:1a:54:c7:12:84:f1:98:d4:ec:5d:9a:e3:84:b3:b9:ea:
09:20:e2:2b:e0:db:64:5a:34:54:b4:3f:e5:ba:62:e5:55:d6:
85:cb:fb:a9:e3:bd:d6:4a:ac:26:ef:3e:12:a7:53:1f:13:17:
89:94:a4:bf:c2:3a:5b:53:7b:8c:44:c0:c0:69:a6:b2:cc:d6:
eb:79:6d:d9:9b:65:01:5c:9a:b6:d7:d6:d6:8a:71:e7:e0:22:
60:43:80:5b:ed:39:88:9f:d7:5b:cc:c9:cf:0d:de:c5:0e:d2:
6e:23:3f:3d:56:0d:b5:7e:1a:2e:3b:3f:8c:56:5f:50:0f:87:
b3:31:92:40:e3:93:80:fa:68:d1:aa:f7:00:c7:3e:93:dc:64:
5e:6f:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:37 2025 by rpki-client