Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa
File: 26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa (raw, json)
Hash identifier: r3zfufdk4Ujp/BxGET1CHlhSpggZ9wk/QB6XCIuNBf0=
Subject key identifier: 40:FF:32:2B:5F:97:F8:7D:08:70:39:A0:BE:E8:B4:37:05:D7:D2:D8
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F43285848E9CBE11A57FE46F1B2A4ED00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 40027
IP address blocks: 45.57.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e1:1a:57:fe:46:f1:b2:a4:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=d3650960-4bd4-4c3e-8f98-d83501e83c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:fb:87:64:eb:58:95:86:57:7a:f9:cc:0e:
99:74:cb:65:2c:2d:dc:79:97:c1:d3:dc:f9:c6:92:
ef:0f:0f:73:17:30:fc:76:b6:14:cc:f5:ad:d6:64:
b6:50:3d:14:5d:75:eb:5a:4e:1e:74:8d:a5:af:d7:
28:15:48:81:79:d5:08:62:5a:da:07:c6:d6:21:b3:
54:80:cf:fa:29:85:de:07:88:40:ac:10:4b:5b:17:
65:f3:88:33:0b:77:86:c8:9d:ee:0e:f4:ca:bf:4a:
ee:88:19:d9:4c:b4:89:ac:3e:57:a5:f2:9c:e5:d6:
0b:07:b6:1b:b1:b4:54:c2:5e:ec:78:78:59:c5:52:
fc:f2:a2:95:6c:7a:18:f8:37:12:5e:ce:67:33:68:
d6:4b:47:c4:ec:e0:6c:6d:e6:d4:40:dd:59:b0:95:
cb:ec:0e:1e:d8:20:82:72:31:e0:52:b5:36:c6:16:
6b:6c:17:3f:b4:6f:5a:0d:d9:88:68:99:d1:af:43:
2d:fa:2c:68:b4:a8:6c:91:62:4d:90:bd:c1:70:92:
40:eb:31:5c:2e:3b:6d:da:3a:91:64:63:43:93:21:
16:86:e5:62:23:29:be:dd:b8:8d:0a:11:d9:42:7c:
68:4a:0f:1c:67:09:c8:bb:66:cf:15:1e:05:e4:33:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:32:2B:5F:97:F8:7D:08:70:39:A0:BE:E8:B4:37:05:D7:D2:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/26a89c2b-20bd-3bd0-9ded-4a93d9bb8e14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.57.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:b1:b5:5f:58:97:59:52:ec:3b:87:c8:43:6f:2e:90:54:be:
b5:c8:5e:59:68:8f:65:e5:0f:69:44:0d:f1:d0:1c:1d:dd:f2:
01:71:98:bc:7b:e9:7c:10:ba:39:11:f5:b4:97:d2:71:71:b9:
15:a8:3b:cc:e1:aa:75:ea:3f:18:78:cb:16:60:c0:41:ac:6a:
15:18:c9:54:db:ff:89:d4:a0:54:df:44:c2:de:71:07:73:64:
c1:be:39:d4:e8:df:26:29:cc:b1:c7:b8:09:28:3f:c0:1c:80:
57:f7:6b:9e:6c:7a:7f:04:d8:e1:ca:cf:ee:5e:52:ff:7a:b0:
42:77:bf:82:54:d5:dd:32:24:aa:bb:5a:08:6a:b6:f5:3b:21:
0e:51:de:e2:a7:8e:e0:87:1a:18:06:1d:72:e1:5b:29:d4:06:
db:04:9e:a6:db:de:a3:4a:5c:4e:dc:3f:f6:70:00:a4:fd:2a:
bb:36:c2:b0:2a:ec:b1:81:f4:5a:e2:98:54:ed:85:f4:db:ac:
54:ad:2e:9e:f8:b6:10:70:18:4b:d2:a2:82:ab:a5:e0:62:1f:
70:5e:77:e0:5c:84:94:e4:ca:60:e7:7c:8d:f1:b5:05:4c:b1:
10:ff:b3:e7:a1:e6:f2:fb:67:c2:e7:01:7c:5c:55:21:cb:b9:
ca:14:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:19 2025 by rpki-client