Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa
File: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (raw, json)
Hash identifier: 64qOQ4GqmHdXhgUTCwbrPLahQSkaQciCmJb9P8FyXOA=
Subject key identifier: 52:59:B8:81:99:06:87:4C:88:53:BB:4C:36:6F:77:D2:27:EC:18:F6
Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial: 010D0C9F4328584902EC27032D66F1FCC81E1800
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 32931
IP address blocks: 45.41.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:27:03:2d:66:f1:fc:c8:1e:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=9453df3f-18e0-4565-937e-d68ee143ade2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:dd:ad:66:91:05:c2:6e:f3:91:43:a1:7a:
99:7b:1b:a2:3c:4c:e5:59:13:58:d0:81:31:f2:f6:
41:98:6f:f1:07:7f:da:99:43:62:ae:58:07:a7:ca:
cd:cb:01:d9:75:9c:af:cb:d9:74:d5:57:36:a5:ee:
7d:d9:27:b7:f4:6a:5b:f1:d4:e9:aa:52:52:a3:0c:
ee:f3:f7:ba:e9:bd:81:e4:55:3d:ad:5c:28:1a:0c:
83:ec:b7:34:8e:e8:ca:95:df:6c:af:83:4c:bd:30:
68:32:4d:dd:54:75:a9:e9:fb:ae:4e:b8:75:a6:b6:
7a:e8:d9:06:1b:0d:0d:77:bd:e2:f8:99:db:a5:29:
32:b6:de:8c:26:cc:c3:16:21:2b:60:ec:ee:52:50:
7b:e0:66:0d:c6:f5:b4:75:8b:e9:9b:99:77:91:b1:
b7:03:29:f6:72:1e:4e:64:4c:d3:ab:aa:37:90:dd:
d9:19:f8:ad:31:fa:b3:fb:9b:a6:64:3a:cf:91:76:
c9:9c:d7:64:25:3b:3c:c4:c4:ff:53:1e:b4:f1:84:
db:e4:61:aa:8c:6c:d2:40:52:29:bb:1f:73:7f:19:
58:8f:af:46:58:35:b8:ce:1b:f0:d6:a1:62:7a:06:
3c:c4:d0:5e:00:79:04:36:f7:42:30:82:da:1d:3d:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:B8:81:99:06:87:4C:88:53:BB:4C:36:6F:77:D2:27:EC:18:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
X509v3 Authority Key Identifier:
keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:1b:e8:ff:6f:cc:fe:a3:cb:4f:74:fe:05:6f:3d:06:74:30:
ae:6b:12:19:79:1b:35:f8:c1:67:30:b2:4a:b1:6d:a3:5a:a0:
2f:f8:db:dc:c9:cf:1d:15:4a:83:aa:a5:1d:b1:17:f7:f4:b2:
6f:1d:60:77:72:4a:67:0f:90:3b:04:fe:21:1a:0a:a2:91:70:
3e:13:17:23:23:c8:0e:26:38:1c:7d:bd:44:d5:72:1e:95:9d:
00:cf:1e:78:4b:cf:62:10:1d:ea:ce:34:9f:1f:85:ba:6c:c3:
a0:d0:e0:ae:7b:10:9a:15:bc:52:c7:13:21:e3:e5:13:00:00:
74:1c:2f:2f:50:f4:dc:f3:f4:74:23:78:66:44:18:45:b7:26:
2d:d3:56:6b:3b:0c:fa:d0:05:36:9d:f4:80:1f:28:21:8c:4e:
e8:5f:9c:6b:36:b6:49:e3:15:27:8c:90:7b:3e:47:28:60:47:
a1:08:78:e4:1d:8b:de:11:cd:28:f3:49:4c:11:b8:d8:ac:4e:
a5:98:d0:ee:0f:aa:45:61:95:f0:c8:3f:a5:81:4f:41:61:76:
4a:24:10:31:f6:41:48:a8:dd:1e:ae:2c:10:30:cb:5a:5a:a8:
0e:cc:37:6a:64:9b:fe:ea:85:bb:19:0c:49:83:e5:8f:3b:9f:
f1:fa:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:31:02 2025 by rpki-client