Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa
File: 387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa (raw, json)
Hash identifier: nmy+TKZUyKkuczq1J6QBPUU6JSu7ay4ckgtBTCedtdI=
Subject key identifier: 14:83:F5:5B:A9:85:C0:BB:1B:7C:B2:B4:48:89:89:D6:2B:28:76:3A
Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial: 010D0C9F4328584939E896A6E15A6E2F97AD9D30
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa
Signing time: Tue 18 Mar 2025 06:43:32 +0000
ROA not before: Tue 18 Mar 2025 06:43:32 +0000
ROA not after: Mon 16 Jun 2025 06:43:32 +0000
asID: 0
IP address blocks: 45.43.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:e8:96:a6:e1:5a:6e:2f:97:ad:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
Validity
Not Before: Mar 18 06:43:32 2025 GMT
Not After : Jun 16 06:43:32 2025 GMT
Subject: CN=1ee0c42e-374c-4c8f-b36e-d15680135c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:48:a9:94:f1:9e:fd:12:e5:6f:4c:1c:fb:
ba:8b:b1:bc:84:56:f4:d8:e6:66:73:5a:f5:00:6d:
ef:46:55:47:ce:4b:4a:0a:ab:23:31:34:8c:b4:de:
9c:8f:4a:84:8f:8a:e9:fa:db:d3:ac:73:ad:87:b0:
7c:f8:35:30:97:b4:8e:36:19:39:89:59:b7:64:2d:
81:4a:82:61:d7:ca:eb:b9:52:77:d9:fe:42:c8:ac:
11:a0:05:58:ec:37:ef:d0:f8:99:3f:40:bb:06:ab:
23:f5:3b:fc:41:8c:5c:27:d9:68:3f:cc:6b:3f:bc:
cb:2b:34:c1:ea:e9:af:73:0b:67:cb:9d:ee:37:59:
73:3f:09:33:b2:c6:79:5a:93:81:af:82:fc:14:b5:
09:3d:df:51:28:1a:3b:27:cd:74:cf:f3:bf:54:45:
a0:fd:c1:04:98:8a:d7:04:07:e6:ea:bc:4a:24:4c:
e8:48:a5:05:a3:2b:25:f2:4d:2c:b3:c0:a9:f5:81:
6e:90:aa:c1:c7:1a:28:14:5c:57:e1:01:b6:44:fe:
3d:7d:44:b7:92:e8:42:77:52:fd:ce:24:ed:39:36:
a2:51:04:ae:ab:8a:4b:87:ee:11:86:2d:20:8f:08:
a8:67:aa:e6:b9:b1:a9:de:cf:f6:9a:e6:2b:80:fd:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:F5:5B:A9:85:C0:BB:1B:7C:B2:B4:48:89:89:D6:2B:28:76:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/387234de-b4e4-3e39-8944-a0d0a2cc9d75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
X509v3 Authority Key Identifier:
keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
sbgp-ipAddrBlock: critical
IPv4:
45.43.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:47:48:dc:7b:17:de:7e:dc:6e:0e:59:87:45:ac:0b:44:95:
fa:61:02:85:e2:5b:85:1b:fd:6c:e7:b6:72:1a:0c:0d:4f:37:
78:12:3c:a2:99:22:2e:6d:c5:f7:bd:e2:c1:c0:89:20:73:27:
b8:c0:16:6d:fb:5c:55:4e:53:5e:ce:07:7d:20:0d:ed:94:b4:
a5:23:fc:0f:25:9a:dc:52:e8:c9:dc:ac:c6:56:85:f0:f4:f1:
6f:ff:8f:22:85:92:53:1c:f7:40:78:cf:c8:4a:a5:6c:9b:b2:
06:54:b5:99:ba:fa:bf:a3:4b:0b:88:02:44:ef:1a:5c:55:96:
ae:a9:8e:3d:6f:73:4c:c0:f9:24:ee:23:c9:fa:23:cf:9a:19:
ae:14:99:db:cb:aa:af:c9:02:09:1e:e5:f3:b3:f8:3c:49:50:
59:9f:22:a3:25:4c:2a:e1:40:95:1c:b8:ab:83:b4:80:cc:1a:
fb:d4:75:98:36:a8:fb:98:3b:95:d0:47:01:f2:67:fb:22:4a:
80:fb:d4:7b:cf:2e:d0:66:69:9d:79:7d:11:93:b4:f1:4e:1c:
d0:46:10:25:62:4c:27:02:95:cb:f1:fc:f1:eb:d2:0e:77:2f:
ea:3d:73:0b:2b:21:62:cc:47:05:92:90:67:36:76:f3:79:ec:
4d:a9:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:59:32 2025 by rpki-client