Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
File: 13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa (raw, json)
Hash identifier: LocMpPRpXvsOFYWi/7tEuwqBSfTI6X9n4JSkr864xtw=
Subject key identifier: 4F:8D:79:E9:FD:B2:81:4B:C2:75:4A:71:9E:0D:01:39:FE:15:98:7C
Certificate issuer: /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial: 010D0C9F432858490881684DFDD19733DD540D80
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 47027
IP address blocks: 45.41.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:68:4d:fd:d1:97:33:dd:54:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=77c0c601-3645-4f2d-aeb2-0353dd7b62b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:35:b6:b7:5e:7b:8d:90:5d:98:63:97:b3:
44:74:da:0f:4d:1b:e0:20:3e:65:42:66:28:bc:dc:
06:8e:d1:e1:8d:9e:e9:98:51:b1:5c:ff:ad:9a:2d:
66:2f:95:cc:19:93:9c:d3:a3:fe:19:0f:43:da:a5:
fc:b0:22:54:21:1f:ff:a7:1a:4a:d4:25:dc:f5:2c:
8c:c2:2d:60:ce:e1:c1:dd:36:46:3b:26:11:9b:a2:
f3:8d:f5:48:be:06:e4:39:97:65:60:69:23:22:14:
a9:99:b3:b2:15:2c:71:a5:4a:fa:3f:da:42:5b:b3:
0b:bb:cf:21:0b:00:e5:3c:2f:73:d3:b5:78:0c:82:
95:bc:3c:02:e8:48:a3:d5:67:e8:21:6a:19:a2:30:
19:87:ab:48:ee:6f:93:4e:d1:72:fa:5f:5b:06:2a:
d2:b3:a6:fb:ed:0d:21:42:8c:55:62:4d:ba:f5:d8:
6d:48:33:5b:15:fb:8f:a1:6e:81:54:58:72:3c:0b:
be:9c:f1:4b:62:d7:c7:7a:7b:10:b2:22:bf:c3:2e:
98:5c:d9:f5:52:b3:95:e7:0d:86:c6:28:78:df:11:
f6:3a:ac:81:1a:3d:51:2f:4b:5c:76:59:12:48:36:
bd:5e:c9:20:cd:44:9e:76:a0:bc:f9:dd:85:8a:39:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:79:E9:FD:B2:81:4B:C2:75:4A:71:9E:0D:01:39:FE:15:98:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
X509v3 Authority Key Identifier:
keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:b6:09:29:50:7f:d9:a7:92:d3:f5:f5:9e:59:f5:a6:a1:2d:
e7:f3:03:4d:5d:51:1e:a3:a8:de:01:2a:b1:f1:b8:71:89:84:
f5:29:f8:44:ac:81:96:49:6d:ab:c7:3f:24:e6:99:23:92:05:
80:79:85:f0:44:15:db:56:3b:66:b4:47:b5:ce:d6:98:96:5b:
3c:cd:d2:75:f2:08:b1:52:11:d8:ab:00:20:d9:ca:4e:bd:4c:
41:d9:2c:ec:8a:d3:27:d1:70:df:65:e6:d0:e2:52:b0:05:68:
83:2f:16:c2:ff:09:65:94:9f:8d:dc:b2:db:7f:79:f9:d4:98:
03:09:a6:55:bf:b7:7a:6a:22:4c:20:93:02:1d:6a:e5:4c:22:
69:9b:03:e3:93:01:6d:a0:34:20:68:ab:25:d1:18:25:7b:35:
de:6a:e0:48:c5:5c:a3:bb:d3:42:b5:b7:94:b8:c1:c9:2d:59:
dd:d0:bb:02:54:09:78:44:d3:83:45:0f:e2:9c:d9:fc:2e:df:
82:e7:60:6e:47:30:4b:39:73:0a:30:93:a4:a7:4a:16:ce:a2:
9a:4d:12:b1:17:16:56:e2:d0:84:c3:8c:df:a7:ce:07:6c:56:
b0:d3:88:95:64:82:63:ac:72:fa:26:a0:16:a7:5b:ba:95:74:
32:ef:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:53 2025 by rpki-client