Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa
File: dcedc562-55ee-3cc4-bd1d-c5234b144386.roa (raw, json)
Hash identifier: Bv+mFUqicp42Z5edsMG4iCZ3+tD3piYTcN6TR51jLvU=
Subject key identifier: E5:7C:66:3C:3F:AE:BC:3E:67:B8:B6:36:04:B4:5F:9B:4B:B7:02:FB
Certificate issuer: /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial: 010D0C9F43285848AF2B7D3DFB23D44639C82380
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 394337
IP address blocks: 45.45.196.0/22 maxlen: 24
208.74.168.0/21 maxlen: 24
2607:880::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7d:3d:fb:23:d4:46:39:c8:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=4727b4f3-1d65-452b-ab5d-fcdc51f23291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:08:32:97:cc:50:fe:dd:77:b4:5b:68:5e:
2f:4a:41:3c:b7:e9:20:83:93:21:25:8b:b1:2a:0f:
ec:7b:dd:31:9d:4b:7e:1d:b9:78:7e:3f:b7:0a:5e:
93:f3:4d:f1:7c:0c:13:57:3b:65:fe:d8:72:fc:54:
47:58:9c:f2:25:ed:67:a9:50:96:f8:e7:6b:0b:96:
ec:7c:fb:00:03:62:8b:72:f9:15:9f:ab:75:2b:b1:
6b:10:1c:47:4d:18:bf:99:92:ee:d2:1b:50:56:0c:
f0:92:fc:d1:6f:57:43:a3:79:17:d0:a0:65:37:2a:
92:55:84:e8:3c:4e:53:31:ef:2a:8d:31:ce:d9:d8:
fb:9e:f3:f6:f5:f3:61:b0:ac:ef:ef:61:ba:1a:1b:
8d:bc:b7:33:2d:63:c7:34:e4:cc:fb:00:dc:9f:83:
e9:ff:d6:d3:62:67:2d:c3:e2:60:61:8e:6c:48:3e:
5a:3b:b8:46:89:c9:b1:14:01:21:c3:58:f8:77:6c:
05:2d:c4:89:60:b8:2c:0d:8b:1b:b7:70:c8:2d:d6:
62:19:f7:d4:c0:fc:c5:90:80:d5:dc:e6:cc:e5:69:
20:f7:47:59:c1:00:b0:40:a6:3f:13:85:10:13:db:
5b:d8:6c:a9:b8:6b:6e:5c:5c:02:fc:bc:17:01:98:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:66:3C:3F:AE:BC:3E:67:B8:B6:36:04:B4:5F:9B:4B:B7:02:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
X509v3 Authority Key Identifier:
keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.196.0/22
208.74.168.0/21
IPv6:
2607:880::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:22:34:93:4f:56:a1:f6:1b:aa:54:45:1b:99:33:e1:7d:ea:
a6:8e:8e:ab:fd:50:75:41:d3:12:f6:56:15:f3:c1:40:bf:63:
a5:b0:ed:85:80:8e:a3:7d:67:7a:8e:6c:e3:59:72:dd:cd:2e:
a3:9f:76:e0:40:38:1a:f6:d4:e4:58:a9:08:a5:8f:ed:af:66:
38:72:4f:0d:51:db:0f:a1:76:be:77:b4:9b:87:91:b7:5d:74:
6c:33:b6:bf:f4:62:b6:15:82:9b:dc:b8:a3:48:2c:1a:35:b3:
f7:1c:58:1e:c3:b2:99:6b:db:a4:df:7e:e0:34:8b:04:49:df:
9c:b0:11:55:48:b6:95:6b:bb:b3:42:27:5a:0e:29:00:09:de:
9a:fa:82:04:0a:46:a4:2f:2b:7b:19:45:10:ed:83:89:f3:58:
f9:7a:cc:32:5c:0a:e2:cf:ce:a9:bd:52:30:1e:f7:fb:82:b2:
b4:30:d8:14:fc:e1:c7:82:e5:1f:14:f5:d6:d8:cb:22:14:4f:
29:e7:3a:5e:b4:fa:ee:ce:b9:e3:73:28:76:ab:cf:35:9c:2d:
27:4b:35:8d:ce:63:40:4a:5b:6c:ca:7a:9e:da:24:1a:ca:45:
2c:33:32:8d:55:16:3d:7e:58:e5:fe:d1:34:af:53:01:27:0b:
57:bb:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:46 2025 by rpki-client