Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
File: 1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa (raw, json)
Hash identifier: IWph03pe6nIwT8ZTuq29tIR7Y9YPhAwQQm+BFHws5KQ=
Subject key identifier: 57:8F:95:C0:CB:E6:F5:A3:F5:81:6E:C9:BB:12:C8:D5:D3:B2:73:44
Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial: 010D0C9F432858492CAE86EF2A96C3ABCD7333C0
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 3257
IP address blocks: 45.41.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:86:ef:2a:96:c3:ab:cd:73:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=7d2a8cc6-34ee-450e-ad36-95ef7b32deb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:eb:10:b5:81:33:e2:4b:5f:a1:85:b9:14:
12:8d:ec:cc:cf:fe:26:9f:0f:f5:84:b4:f2:99:a4:
fc:76:e6:d2:12:f8:ab:fe:02:db:83:02:ec:55:20:
80:45:58:0e:e4:b1:4c:0d:ac:8c:b3:c6:0b:8d:98:
f6:ee:7a:94:93:a9:48:90:c6:cb:07:f6:ea:59:00:
be:c5:2f:f4:5e:1a:76:85:42:99:67:1c:cb:0c:e4:
85:41:61:32:77:65:ce:d3:9a:1f:86:c9:09:fc:32:
f0:e2:3e:2e:79:08:66:8c:3e:91:0b:01:64:1e:8f:
19:72:f0:e4:04:bb:42:2c:12:37:9c:ad:67:77:8c:
94:87:e8:c2:e6:49:b8:ed:68:43:7f:9d:55:f8:82:
95:da:55:b3:8d:19:c3:9e:e9:71:64:58:93:2a:63:
14:d9:75:cc:19:a7:02:41:04:c7:9e:0d:1f:67:8a:
e1:fa:c9:65:25:28:8d:ea:0b:c5:c7:5c:b1:9e:71:
63:7a:6d:94:58:ff:42:26:fd:82:2f:df:c2:1a:c2:
ca:3a:cc:48:e2:c3:2f:4f:00:57:f9:12:02:6f:5e:
d3:9a:18:05:03:24:19:69:0f:52:c3:17:a4:2a:ba:
dd:48:a7:ef:d1:7c:a7:f1:e2:be:25:e1:93:ab:89:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:95:C0:CB:E6:F5:A3:F5:81:6E:C9:BB:12:C8:D5:D3:B2:73:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
X509v3 Authority Key Identifier:
keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:41:1c:be:14:ed:c5:eb:07:f6:54:37:78:02:69:6f:90:57:
85:d8:17:37:74:30:50:60:31:0f:9f:6f:d8:f0:3f:c2:3f:dc:
2a:b3:b9:23:6b:8f:ff:44:24:fa:53:35:40:51:2d:0f:7b:15:
18:46:bc:3e:bc:d6:3e:6a:67:8e:6d:bb:3d:64:fd:e5:a9:56:
77:b2:7c:fa:ce:0f:4a:63:34:9c:e8:0d:35:40:d9:bb:1f:95:
e0:fb:09:0d:cf:5b:c2:e5:a6:75:07:0a:89:4e:c8:58:74:62:
fe:3f:79:03:03:4f:2f:09:00:a0:8f:eb:2a:aa:a5:13:f1:0a:
0c:10:a0:be:11:db:f0:85:5b:2d:4c:82:71:87:27:0f:51:e5:
92:1a:2a:fc:89:6b:d9:3f:73:6a:79:0d:24:20:0f:08:ed:ff:
da:1c:b0:03:49:9b:fe:99:b9:4d:03:07:ea:1c:41:78:85:5a:
77:5b:92:b2:e6:5a:02:f1:ba:17:0a:54:95:11:1f:d0:ac:13:
45:30:0d:7c:b1:9c:d3:03:c5:15:a9:64:3d:28:6d:0e:8f:1a:
e7:bf:be:3e:ef:d2:4a:2f:2f:ea:57:ee:46:1a:ce:04:da:7f:
7d:8c:2f:89:ff:d0:ed:04:68:93:ad:18:5f:54:c5:f5:2f:84:
98:68:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:45:27 2025 by rpki-client