Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9639305-7ffe-3a14-b5f1-2ea18395aa25.roa
File: d9639305-7ffe-3a14-b5f1-2ea18395aa25.roa (raw, json)
Hash identifier: 6Uv2VfN+pLZk/gJCRiZbXBeZBzj9ud35SDkBgiFLKIA=
Subject key identifier: 52:86:61:21:63:18:D6:BE:60:E7:7F:FB:2F:8B:03:9F:F1:96:2E:65
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285849071BEFAEA81A048AD528013F
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9639305-7ffe-3a14-b5f1-2ea18395aa25.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 400536
IP address blocks: 45.38.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:ef:ae:a8:1a:04:8a:d5:28:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=552644da-a766-4cc6-b2fb-87b14ea127f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:c9:e5:0e:3f:5c:76:dd:f6:4a:72:93:77:
ac:25:0c:1d:22:ff:7d:77:95:1d:05:d5:6d:7c:72:
5c:a0:aa:ae:64:eb:73:bc:a7:05:5d:a7:76:f5:ec:
d0:d5:43:9e:3a:ae:f4:5c:4d:2a:04:a3:6a:9b:8f:
d9:ae:e8:b8:8a:ad:ee:83:f6:17:74:dd:16:8b:0b:
db:52:67:4a:5d:c6:81:fe:b5:80:0d:1b:5a:01:ff:
f0:53:9f:e8:69:11:40:1b:24:f7:8b:4e:32:c6:d4:
8d:c9:94:85:06:2f:b4:25:8b:20:85:12:bf:37:68:
17:bb:fb:a1:e2:e1:6f:7c:fe:e7:5f:5c:fd:94:6d:
42:38:7d:b8:b8:42:08:50:6a:a4:42:a1:d9:4b:f6:
93:67:d0:24:f9:bc:fb:bc:ac:28:fb:fe:b0:00:0e:
15:d8:ef:31:26:cd:e4:6a:51:10:fa:11:39:26:38:
21:77:12:55:ea:0f:1b:52:79:75:60:5c:c9:a9:a8:
a8:3e:2d:b3:eb:f6:f8:9f:78:8d:29:9f:60:be:a3:
54:2f:22:0d:c5:42:eb:d2:a5:19:88:12:20:64:98:
67:46:e8:f8:66:81:c3:a4:a2:8d:73:16:ec:13:6c:
3c:bb:ae:f0:bf:4f:11:55:3c:3d:1d:b8:d5:e1:38:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:61:21:63:18:D6:BE:60:E7:7F:FB:2F:8B:03:9F:F1:96:2E:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d9639305-7ffe-3a14-b5f1-2ea18395aa25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ee:b4:fe:84:c7:d5:c4:8e:11:56:22:9a:40:e9:75:3d:09:
b8:8f:9d:5b:36:97:7a:4b:16:cd:35:1a:a6:03:92:f1:7c:88:
ed:5c:fb:93:13:96:19:94:9b:1e:f1:4f:ea:f7:15:a2:3c:f3:
29:52:04:2c:3d:63:fc:51:e8:b8:67:b0:ed:48:40:f6:ae:76:
6f:b4:55:a7:9e:f0:4b:fd:7b:f7:70:a9:bb:9d:62:83:02:08:
25:52:89:02:6e:e1:ab:a8:63:e2:6a:10:28:d1:19:99:bd:22:
10:87:06:5f:34:48:9e:5b:0f:fd:51:b0:2d:2b:14:dd:b9:10:
9d:00:19:b4:5d:d6:89:ef:31:f7:9c:38:0e:1f:a6:96:d2:74:
e8:b8:96:a7:ea:80:ee:32:e0:07:b5:f4:68:3d:9d:83:22:45:
10:97:24:58:6e:41:fb:a9:c7:64:80:45:f3:bd:56:8f:c9:03:
9e:c4:3e:48:4b:57:76:f9:f6:d4:2f:43:14:cb:b9:d9:6b:b3:
6c:38:97:47:f8:0e:9b:f7:fe:fb:2f:3e:be:8e:b8:2a:00:aa:
3f:e9:82:f1:a1:20:0b:06:41:3f:e6:4a:c3:ad:6a:7d:24:f3:
be:41:94:d2:3d:ad:1a:ea:9b:29:33:8f:9e:2c:8f:06:3d:3f:
52:85:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:33:23 2025 by rpki-client