Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb528c18-b3ed-362d-8005-f1855f425cf1.roa
File: eb528c18-b3ed-362d-8005-f1855f425cf1.roa (raw, json)
Hash identifier: bTlQNxWTSaNiK3gljTljwnX+hfO6Eg1ne2kcGTCOQ10=
Subject key identifier: 27:00:E9:3B:0F:E9:D9:97:B6:6B:34:E8:7C:77:A9:A8:1E:0B:B6:AA
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F432858494733FCE9DA1EB254674EA180
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb528c18-b3ed-362d-8005-f1855f425cf1.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 393878
IP address blocks: 45.42.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:fc:e9:da:1e:b2:54:67:4e:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=e656802b-80f4-4448-95b6-86d6b7ddfa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:a3:bc:b9:b1:97:82:c3:9f:8e:89:d1:67:
96:3a:eb:3c:61:1e:36:e7:21:06:2e:65:7f:27:df:
b1:34:33:27:e4:9d:6f:7d:00:e9:b8:c5:81:b7:8f:
d3:b3:69:2a:91:25:bd:50:32:06:54:d5:06:80:bf:
fc:40:89:d0:7e:95:a8:6c:64:0d:fe:84:84:03:a5:
59:43:3f:a0:1f:f9:a6:b6:e5:1f:70:64:f6:d0:63:
d4:3d:92:59:b9:50:99:53:62:0b:78:92:26:05:38:
18:9f:b8:3d:c7:9c:43:c5:d8:51:4a:10:1b:f0:70:
6e:5d:0e:d5:89:d2:a9:d1:f4:74:e1:ec:1c:a6:fb:
b0:de:f1:ba:e4:c5:be:c6:cb:86:97:18:c2:74:2c:
a8:58:b4:e0:8c:77:66:8e:49:f2:1d:ca:d8:46:2d:
fd:8a:df:4e:4d:52:21:8a:80:6d:94:c0:d8:dc:88:
89:d3:d9:f1:73:b4:ff:41:a7:c8:b7:f7:f7:33:3c:
e7:66:c3:54:ff:05:df:db:dc:97:ce:a9:cb:c6:4d:
61:d9:75:75:2d:aa:4a:e9:4d:97:ae:49:6e:67:50:
8e:8d:cf:4b:51:eb:07:12:1c:a4:57:88:24:23:ac:
c1:c9:25:64:5e:62:bf:d0:86:fd:e7:89:89:e2:00:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:E9:3B:0F:E9:D9:97:B6:6B:34:E8:7C:77:A9:A8:1E:0B:B6:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb528c18-b3ed-362d-8005-f1855f425cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:9f:10:35:4d:52:88:b7:68:91:cd:7d:01:c7:56:b5:f7:3d:
08:ba:ca:f2:3d:19:43:b5:6b:fc:78:be:6f:8e:86:e3:b2:3b:
a4:76:de:ca:d9:bc:85:ed:75:c5:0f:49:e1:55:68:bf:7e:ac:
4b:84:ad:eb:f2:ce:24:03:1b:20:00:de:16:bb:b8:d7:bb:f6:
84:aa:fe:d0:23:42:47:70:70:c7:46:7a:27:97:66:1f:bd:fa:
a7:af:83:82:6a:d0:32:6c:96:ee:a4:44:52:51:7a:b1:2b:a3:
9e:d5:f2:db:4d:0f:8a:f6:26:82:f1:2e:d8:2a:b1:9f:16:e2:
02:ad:c4:08:5c:6f:18:16:10:1d:8b:91:20:92:ea:fd:0f:3f:
a9:d3:55:2b:df:dd:78:e2:af:30:63:a6:47:cb:36:3b:a0:11:
2c:ea:c8:c4:ce:94:82:d9:e5:96:5a:b5:a3:c1:5a:fc:51:07:
63:25:12:8d:26:88:51:2d:21:a0:d8:02:21:3e:9d:a1:79:e8:
e1:b9:70:c7:b6:33:44:83:43:8a:0c:d6:44:f1:a9:96:5a:64:
56:d6:37:d7:4d:5b:b4:f9:cc:f3:cf:74:19:79:82:e7:5a:b3:
4d:df:30:31:e8:87:ef:62:5d:2b:82:05:7c:98:ca:33:22:f7:
ac:3f:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:13 2025 by rpki-client