Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/cb21b1df-1387-387b-9d60-11908b1366a2.roa
File: cb21b1df-1387-387b-9d60-11908b1366a2.roa (raw, json)
Hash identifier: uKh56eTg5aZkEUdi1Pot3ukQAd+7gkcgB90jul+OAgk=
Subject key identifier: 8F:6E:B8:7C:63:95:73:24:E4:0F:38:82:09:E2:78:CB:93:C4:A7:71
Certificate issuer: /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial: 010D0C9F432858494CA91468FC95499ABB9B9000
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/cb21b1df-1387-387b-9d60-11908b1366a2.roa
Signing time: Mon 24 Mar 2025 23:55:56 +0000
ROA not before: Mon 24 Mar 2025 23:55:56 +0000
ROA not after: Sun 22 Jun 2025 23:55:56 +0000
asID: 14618
IP address blocks: 45.150.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:a9:14:68:fc:95:49:9a:bb:9b:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Validity
Not Before: Mar 24 23:55:56 2025 GMT
Not After : Jun 22 23:55:56 2025 GMT
Subject: CN=8b20b971-8846-443c-a0fc-7782c99e6cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:cf:85:04:f5:16:ce:8b:04:95:53:ac:1c:
e1:e7:d9:cf:c6:25:9e:80:b4:27:d2:8e:a0:ec:62:
8f:6c:6a:1d:6d:ea:a6:e7:13:46:c5:8d:c4:4c:b4:
b7:79:65:01:3b:d9:11:ac:9c:4a:bf:6e:3b:31:3b:
4d:f1:b9:9f:c9:25:46:da:9c:8e:06:d0:5d:d1:98:
3b:ff:69:bb:fd:e2:1d:c2:71:5a:3e:c5:84:64:b9:
eb:90:69:37:80:40:87:31:1a:3d:9d:66:d3:d3:67:
56:cf:44:f9:be:0e:b4:84:0e:c6:74:69:c1:19:8e:
72:57:1f:d6:bd:00:18:36:a9:d7:54:54:0e:3c:23:
da:05:7d:84:67:20:0d:72:88:4e:d7:1b:05:85:a3:
ca:96:3f:1a:c5:bc:1e:aa:2d:f0:6a:86:d4:16:ec:
70:e2:c4:0b:fb:fe:00:69:74:48:b8:48:c2:fb:e9:
b6:c0:c8:d3:72:95:57:e6:27:1d:ae:b4:3c:fb:24:
d2:71:f8:18:a8:cc:35:7d:d1:b0:8e:60:5a:56:68:
7e:69:1d:78:df:38:d9:f4:75:17:b7:30:dd:85:2a:
97:ad:90:80:e1:89:da:46:e7:51:0d:a7:2a:03:4a:
67:09:42:4c:f1:fe:50:22:31:46:8b:d7:ac:05:0d:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:B8:7C:63:95:73:24:E4:0F:38:82:09:E2:78:CB:93:C4:A7:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/cb21b1df-1387-387b-9d60-11908b1366a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl
X509v3 Authority Key Identifier:
keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:da:82:78:17:b0:1b:6a:4d:7d:3f:27:c0:9d:8e:27:1b:d0:
09:13:a4:eb:d0:85:97:2f:c9:88:81:8a:46:ac:93:25:fe:79:
84:c9:d9:3b:50:6f:16:97:cd:eb:b4:bf:f7:82:9b:c6:23:29:
28:00:15:80:3d:fd:67:d9:85:b7:c8:24:cc:a6:35:a4:4c:75:
97:42:96:2d:0f:d2:23:e6:96:22:27:de:f3:b7:88:b7:29:43:
f7:2e:50:59:eb:82:50:41:0d:12:9b:24:3b:1d:24:8f:41:76:
d6:8a:d1:59:41:bc:a4:a6:8c:c2:1f:22:1c:22:e9:16:30:fa:
a2:ec:3d:93:d2:61:6b:a5:26:96:11:54:db:b0:4b:3e:34:24:
08:12:bc:8d:99:11:4b:d8:ac:02:cc:4b:01:20:11:2b:21:2e:
9f:e7:0c:07:75:63:58:c6:b0:7d:8c:f8:b0:79:ea:d4:a1:63:
05:8e:d2:b9:84:c4:22:f9:ec:4f:b0:76:a6:8d:94:32:e5:2b:
91:62:cc:4f:ac:2d:2b:26:29:67:1d:ee:dd:e9:88:07:2a:b0:
24:a3:42:67:50:7f:b4:e8:2b:56:4c:b7:8d:7a:0f:0b:83:b2:
2b:f6:ff:13:de:7f:71:55:2a:a7:1a:bf:64:68:32:26:4e:1b:
a0:1d:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:35 2025 by rpki-client