Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
File: dc45fae9-5ad3-321c-8049-0bf016f07538.roa (raw, json)
Hash identifier: bjsmsEpC5a7VPb/rLyjLFiX8vyXRrewLdqBfxQaH3f8=
Subject key identifier: B4:09:C5:F5:32:3A:AF:D7:2C:DB:08:89:3F:EF:65:7B:A8:01:74:AC
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F432858494E2EAC6C074A0374BAB35080
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 394625
IP address blocks: 185.240.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ac:6c:07:4a:03:74:ba:b3:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=e2f4fc40-1c07-4849-a11f-efd4d2b858ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:e0:88:6b:e6:56:fb:af:1f:76:87:c3:98:
96:21:58:90:a6:47:e9:df:b3:df:fb:7f:84:b6:6e:
b9:3f:29:6f:40:5e:59:e3:47:eb:84:4b:4b:47:cf:
0d:16:61:e4:b3:d1:08:ca:51:6a:14:81:c0:d3:0c:
00:7d:da:ef:1a:7d:18:0a:a4:26:46:ce:ee:bc:84:
0d:cd:c0:a9:14:0d:0a:0e:e0:64:7d:2f:d0:a9:c8:
79:a3:30:3f:5c:9d:35:04:3f:4e:6d:0c:70:d2:8f:
cd:b0:62:9e:85:02:71:29:5b:52:55:df:b9:30:b1:
19:15:2c:72:e4:42:80:b9:1f:12:18:2a:cb:61:d1:
c3:2c:d8:b2:14:01:8a:b1:c1:c6:8f:49:32:fd:ee:
ba:0d:1b:48:6d:87:63:e0:6c:e2:08:fc:91:92:f3:
3d:3b:bc:2c:19:53:c4:9e:0e:d6:83:08:f6:9d:b3:
93:1c:af:61:57:d4:3c:15:c1:95:4f:be:62:1b:38:
eb:76:71:fd:04:2d:3a:a1:3a:e8:18:d0:f9:26:8b:
86:ac:12:61:4d:45:cd:d9:8c:a4:e3:45:cb:4d:89:
ec:56:3b:18:a0:8f:0d:f7:b6:71:b3:78:a1:5d:61:
1e:d2:34:e8:49:e6:68:5c:c4:c4:01:1c:15:92:58:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:C5:F5:32:3A:AF:D7:2C:DB:08:89:3F:EF:65:7B:A8:01:74:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
185.240.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:bd:ad:33:b2:73:0a:f3:ee:bc:be:8f:73:44:9a:89:df:0b:
06:71:53:18:8c:19:58:2a:1d:7a:8b:bd:d0:7f:6d:2d:75:43:
07:82:4f:e3:ff:e3:3c:0c:3f:86:c3:8e:dd:73:81:03:b9:5a:
52:5a:6c:f5:05:92:f5:94:03:cb:bb:3d:28:05:8a:8f:76:02:
76:09:fe:1e:d2:cb:fe:80:9c:6f:ec:2b:ab:7d:84:5e:29:3c:
fd:ed:fe:4e:91:bc:d3:5f:6d:41:a9:32:be:87:8a:54:f4:c7:
b3:87:ed:80:e5:c9:1c:86:36:89:f1:dc:34:2b:b6:aa:22:29:
06:40:7e:35:7d:41:0b:c0:85:f5:e4:2a:0d:76:bc:03:21:a5:
5e:61:2a:13:c2:98:ae:5c:49:23:2d:6c:16:35:40:72:e0:be:
52:21:9e:f2:10:45:2d:d3:6d:75:ad:ac:26:ce:cd:c3:7c:14:
73:3d:6e:d6:85:a1:0a:13:fd:1c:cf:e9:63:58:fc:e2:48:f0:
aa:e6:76:a8:b9:90:83:a5:9b:a4:93:28:0c:34:7b:9d:3e:20:
b0:1f:d4:dd:96:8b:13:8c:d3:8b:d3:b4:57:db:7f:ee:af:8f:
0b:b5:b1:d2:03:78:53:c5:c0:ed:c4:96:7a:b1:6d:8a:21:8c:
d3:1e:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:31 2025 by rpki-client