Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9d9fc06e-066d-3e30-89e6-33c88367a823.roa
File: 9d9fc06e-066d-3e30-89e6-33c88367a823.roa (raw, json)
Hash identifier: sdKFKG9WwADQeotEUn3jf1zH6fSBvpG6C3VrymWXYhE=
Subject key identifier: 20:35:C2:59:9E:F5:70:FD:44:C3:77:85:F5:CE:F0:27:D9:F2:09:06
Certificate issuer: /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial: 010D0C9F43285848BE862F000C66FFDBBD533FC0
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9d9fc06e-066d-3e30-89e6-33c88367a823.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 45.42.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2f:00:0c:66:ff:db:bd:53:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=b4da96bf-551e-4860-a17c-39f9f4c983bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:83:1c:0b:d5:3d:54:0a:bd:1f:5f:fc:3c:
fb:72:80:cf:87:f3:af:27:1b:e4:30:3d:51:36:ee:
7f:19:6a:45:98:f7:e9:07:22:cc:43:05:2d:5a:1a:
c0:69:f4:1b:99:ba:2d:3f:00:08:b7:4d:d4:e4:63:
cf:de:ca:e6:9d:8e:1f:1c:fe:63:3a:02:01:59:c8:
3d:fc:6d:68:99:63:3d:a8:fe:4e:2e:eb:f9:88:32:
3e:cf:a1:85:d3:51:32:b3:17:79:07:4c:60:68:e2:
94:35:c9:78:56:5b:b1:1f:b2:6c:fd:0f:f3:8a:2f:
8a:21:f6:70:ba:0c:f3:33:67:d1:c6:b9:66:fc:9a:
6d:fb:d4:70:9e:68:eb:74:48:95:6e:04:74:c6:ce:
c6:95:18:95:30:97:6a:33:0c:f2:f7:c9:6d:c9:62:
57:f4:74:f0:97:70:13:58:40:84:5a:db:15:d8:7d:
0a:15:0e:2d:89:84:26:ba:a1:6c:75:d6:37:09:1a:
e6:90:db:0e:e6:09:e8:f0:85:ba:d2:09:8d:8e:80:
eb:db:d2:6e:98:c1:70:8f:6d:ef:f8:cc:6b:54:3c:
75:f5:01:41:c4:8a:e7:23:96:61:d1:59:b4:ec:68:
7b:61:70:b3:92:d4:9e:99:a4:9a:90:8a:29:b9:4c:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:C2:59:9E:F5:70:FD:44:C3:77:85:F5:CE:F0:27:D9:F2:09:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9d9fc06e-066d-3e30-89e6-33c88367a823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
X509v3 Authority Key Identifier:
keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:86:fc:75:b5:a4:aa:ec:8b:1b:68:3e:df:ef:12:a3:4c:ca:
6d:ca:2d:dc:8d:31:71:1d:64:93:2c:40:a5:fe:53:eb:83:a4:
72:48:0e:70:3d:de:35:6e:4d:93:4c:96:da:c8:f3:19:39:7f:
e4:ab:8b:1b:a8:e4:c6:85:03:1f:d2:e9:f5:f5:20:d5:9f:c0:
c1:d5:71:99:4e:c5:24:14:94:ab:cd:05:73:bf:aa:ab:67:16:
ea:84:fc:19:18:c5:9c:b8:38:5e:82:53:3b:e0:eb:e3:48:40:
d2:28:54:26:a1:83:79:49:81:01:54:ef:4a:2a:61:39:0d:b6:
79:d1:7f:f3:11:b1:f0:0d:53:2b:31:a9:bd:90:b0:0c:60:32:
7e:70:dc:cb:1f:07:1e:ae:d8:dd:06:42:ed:5b:f2:14:f0:42:
3a:ea:04:47:75:e5:21:1e:73:71:da:60:a8:3c:c3:75:9d:49:
16:71:08:75:a5:e2:ab:56:c7:6b:dc:10:26:b0:65:d1:0e:00:
4e:e8:39:09:ee:3a:02:5f:51:a2:b0:22:44:01:7a:bd:33:d9:
cf:c5:85:d3:46:92:ce:f6:69:1c:1e:37:72:f4:d5:e1:31:93:
a8:10:78:46:c8:ca:94:9a:39:6b:10:35:e7:f6:7a:5e:61:26:
7e:f8:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:12 2025 by rpki-client