Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/b2291ed0-3a5e-3f9d-88f6-31df8d2a7e19.roa
File: b2291ed0-3a5e-3f9d-88f6-31df8d2a7e19.roa (raw, json)
Hash identifier: GQ6kvRrmJoXCPwwocZVRLAtFefzE3ImPc0f4PurUiZE=
Subject key identifier: 25:2D:6E:DB:21:C9:EE:D8:C2:CE:97:05:F8:A3:22:88:66:4B:D3:26
Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial: 010D0C9F432858489075F9E3E603B8365175F000
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/b2291ed0-3a5e-3f9d-88f6-31df8d2a7e19.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 64602
IP address blocks: 45.45.196.0/22 maxlen: 22
208.74.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f9:e3:e6:03:b8:36:51:75:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=5720589f-752c-408a-a5ea-065e52da0d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:97:72:da:39:b3:17:03:99:29:c1:8d:ec:
9b:13:ae:d2:ca:a1:72:bc:6e:91:6b:d3:fb:27:c9:
dc:a7:6d:e8:6b:ef:80:50:28:13:82:61:70:70:a8:
5e:d4:07:86:9f:7a:ff:e5:28:c2:f2:c1:9d:c0:7d:
68:3d:8f:93:4c:c9:5b:87:05:e8:c2:2c:e6:2e:9f:
90:6e:3f:0d:3d:32:2c:87:aa:15:ab:3e:a1:a4:5b:
50:57:e0:94:5e:e6:df:99:8d:0a:52:02:37:c2:74:
97:d6:92:9e:b0:09:d3:19:fe:ac:2c:7e:33:1e:95:
8c:51:0d:4a:89:d5:20:44:ff:a2:84:e8:06:36:df:
0c:8d:c4:09:78:1c:40:d0:99:cf:d7:c2:98:2c:e9:
f9:be:55:03:79:0c:8f:37:af:43:9f:8d:48:3a:f3:
06:bc:26:14:a4:d3:db:7d:aa:cf:ac:94:17:60:0b:
27:13:c6:20:a6:59:71:41:12:6b:03:3d:9f:41:42:
a2:8e:48:21:6f:c8:a8:74:f6:7c:a2:a8:26:bf:04:
42:0b:9a:bc:7a:b9:e6:65:8c:e8:60:11:1c:18:f4:
2d:09:39:f0:33:a9:cb:d6:69:38:75:71:a5:32:c1:
09:9f:3c:3c:c2:b0:69:d0:7e:d1:22:c9:43:78:ec:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:6E:DB:21:C9:EE:D8:C2:CE:97:05:F8:A3:22:88:66:4B:D3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/b2291ed0-3a5e-3f9d-88f6-31df8d2a7e19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
X509v3 Authority Key Identifier:
keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.196.0/22
208.74.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:f1:00:f5:08:d5:86:1b:18:66:26:45:55:ee:9b:2e:78:2a:
3c:aa:3b:e8:17:b6:50:f4:e4:8c:53:ac:0a:5f:2a:79:50:66:
d7:b5:78:81:9c:e8:7b:ea:f2:5f:51:75:4b:49:22:88:83:9d:
33:c6:00:71:19:71:91:44:5e:15:62:fe:0d:dc:fc:90:3b:40:
b9:4c:b1:37:b3:ec:1d:9d:b6:f5:c1:7b:ff:77:b7:09:f8:63:
a0:85:89:91:ad:03:6a:32:96:b3:8b:09:72:28:3f:0b:79:5c:
ca:32:13:4c:27:06:67:6e:db:b6:39:9b:cd:aa:ad:79:cc:9f:
b7:b4:04:79:6e:c1:97:d4:19:d1:eb:cb:21:4c:5c:57:d3:ad:
87:4d:4a:44:4b:98:26:4f:bf:52:40:9b:88:bb:01:74:31:d2:
c4:2e:d5:a3:09:a2:0b:26:bd:72:7e:aa:b1:6f:fc:9d:bc:1e:
f0:08:8e:43:42:f5:a7:2b:b7:66:ac:ad:2b:0c:5d:72:58:b5:
96:7e:bf:46:12:4c:54:4b:59:37:9d:00:59:75:19:a4:91:46:
87:e4:9c:25:6c:b5:f0:4d:49:0f:89:ad:a1:72:ee:d9:4b:05:
51:c8:0b:02:6a:18:2d:7e:f3:5f:a6:30:31:94:e8:49:81:56:
b4:ad:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:50 2025 by rpki-client