Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/09415e8d-409a-3245-829f-a79e82a75267.roa
File: 09415e8d-409a-3245-829f-a79e82a75267.roa (raw, json)
Hash identifier: iQr2zOCJ7XdJdW0ItaDpjvOO+L+3OTo3L40HWAuj7O4=
Subject key identifier: FE:55:83:CB:0D:1D:7C:B7:56:66:2E:A2:4E:C1:E7:B8:B5:FA:6A:DA
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F43285848050E8B2B508A99F312728A00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/09415e8d-409a-3245-829f-a79e82a75267.roa
Signing time: Wed 27 Nov 2024 15:35:14 +0000
ROA not before: Wed 27 Nov 2024 15:35:14 +0000
ROA not after: Tue 25 Feb 2025 15:35:14 +0000
asID: 16591
IP address blocks: 45.56.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:05:0e:8b:2b:50:8a:99:f3:12:72:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Nov 27 15:35:14 2024 GMT
Not After : Feb 25 15:35:14 2025 GMT
Subject: CN=f60d8a22-1e57-42b3-b1ed-c1c975fff33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:52:38:56:1e:02:8c:83:33:1c:4b:1a:73:
34:c9:bf:e7:91:e6:1e:fe:aa:b3:fb:cc:db:6f:a4:
a0:d6:b4:1c:72:e9:03:d4:6e:92:26:86:d9:00:9a:
93:a1:7c:46:52:94:78:22:4d:d8:d9:f2:80:4d:d8:
1a:07:7c:11:84:98:42:40:bc:79:88:30:60:2f:85:
0b:44:8c:47:48:99:a8:19:e0:ba:d8:86:f3:be:d1:
6b:2c:02:3f:d2:a9:9c:3e:ff:fa:92:f1:cd:41:04:
43:4d:6c:11:b7:88:29:d6:be:68:82:6e:95:24:e8:
08:b4:5b:58:b7:28:77:b7:ce:0c:1d:71:5c:cf:18:
35:06:f1:79:2b:7b:f5:d8:01:47:bb:d4:86:97:53:
e7:5d:bf:52:d9:fb:63:43:38:ae:41:66:61:bf:8c:
d0:b2:fa:21:a4:6a:6f:da:55:d8:2a:2d:c7:c9:b1:
db:26:35:75:8b:40:43:d7:79:5c:db:71:71:32:60:
01:91:70:cf:fd:2e:d9:93:1a:83:0f:22:18:f6:ee:
33:90:68:fc:9c:3c:bf:c0:db:63:e3:e7:a0:ec:9b:
ee:08:f6:99:ca:6a:b1:1c:ec:12:4e:4e:66:3f:24:
81:92:e1:71:68:46:81:09:29:e4:91:58:3d:cf:f4:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:55:83:CB:0D:1D:7C:B7:56:66:2E:A2:4E:C1:E7:B8:B5:FA:6A:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/09415e8d-409a-3245-829f-a79e82a75267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
45.56.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b0:45:6f:7e:29:b1:24:8a:72:47:7c:9e:6b:09:a1:37:de:
4f:02:73:ba:b4:fb:00:22:1a:da:be:e5:47:fd:99:76:f2:32:
d6:66:21:39:55:33:8c:a4:80:63:f5:d9:b5:73:34:ee:e8:cd:
16:1b:9b:c6:9b:71:ad:dc:32:f2:85:c4:9e:6b:63:20:e4:5c:
69:79:28:e1:a8:21:ad:db:20:8d:34:bb:5a:c6:f5:26:ed:07:
48:0a:d8:71:8f:76:3f:0d:4e:a9:bc:cd:85:23:27:f9:41:76:
b2:b7:27:15:ec:6a:e5:25:5b:00:3a:fd:f8:f8:f9:65:00:a8:
ad:24:a1:f7:2f:ad:4c:4f:f7:70:93:c8:c0:9f:95:08:40:ed:
bc:36:f1:e1:35:e7:76:c2:01:56:13:17:36:06:59:db:95:32:
70:81:9b:96:6e:cc:c3:c0:23:6b:ba:35:49:d1:be:84:e8:bb:
8e:49:d1:0e:c1:10:23:35:19:5f:bf:95:72:44:10:2e:ca:74:
06:c7:b9:1f:3f:11:f4:3d:85:1d:e1:40:74:76:56:c9:5f:79:
82:6a:5b:97:d0:8a:0e:1e:e2:98:18:b0:d4:b8:5d:80:50:3e:
e8:23:20:f3:d3:18:e1:5b:67:bb:63:22:ff:35:3f:c1:ef:ec:
6b:a3:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:53 2025 by rpki-client