Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa
File: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (raw, json)
Hash identifier: Ap3t+hX/iswYLlvKxQHjWgwIRJve2DGBhvO9Uao3HOg=
Subject key identifier: BA:1D:0A:8C:19:8A:42:1E:12:68:F0:13:A6:7A:B9:A7:B4:20:23:CC
Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
Certificate serial: 010D0C9F4328584940394FA043570D3183DD03A0
Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 30204
IP address blocks: 45.45.194.0/24 maxlen: 24
2602:fc39:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4f:a0:43:57:0d:31:83:dd:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=5a3a92db-ad7f-4ac3-a5eb-0b11e9cfc9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:33:c6:c9:a3:e2:a5:1d:37:6b:59:19:a7:
0e:53:63:31:4a:62:83:fc:90:ec:7a:9e:32:80:e4:
1d:97:6e:1d:c5:a3:31:ac:c5:9e:8b:73:38:05:83:
4e:e9:26:6c:32:c6:8c:ba:84:a6:6b:df:86:28:4d:
02:b4:47:63:28:33:69:41:88:8e:8d:2e:26:4b:39:
af:53:b5:2c:86:c6:b8:ec:7d:33:5e:62:40:21:8b:
0d:19:9a:f3:59:60:28:9f:e4:c4:88:e1:23:f5:c5:
26:59:7e:86:b7:74:7f:05:ba:66:4d:4a:fa:f8:87:
3f:52:0a:51:59:a1:d6:b3:6c:89:23:76:15:81:95:
8a:c1:b3:75:86:bc:b1:f3:8f:46:a5:e3:ec:31:ce:
3e:ed:d4:be:9d:b6:5f:e7:dc:15:e5:d0:5b:52:3c:
60:b8:fc:f9:72:52:99:d1:96:a9:3e:43:5d:e0:65:
7f:30:cd:da:dc:cf:56:f0:5b:13:60:5f:57:a0:c2:
87:98:48:47:26:f2:71:7d:41:52:3c:b3:12:a2:c6:
f5:de:42:c8:6c:c3:f4:a1:ee:5a:d2:21:b3:f9:c3:
d4:c7:64:16:e1:84:ad:7d:fe:43:c0:31:d6:67:d7:
54:10:e6:d6:b4:46:8b:b0:dd:95:e3:de:13:0e:5b:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:0A:8C:19:8A:42:1E:12:68:F0:13:A6:7A:B9:A7:B4:20:23:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/7955ed0f-1153-3896-a51e-5d367bf0cc64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl
X509v3 Authority Key Identifier:
keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.194.0/24
IPv6:
2602:fc39:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:0f:03:63:46:41:4f:c3:f5:e6:70:ff:e8:a6:67:ac:a6:59:
0e:3b:14:dd:8c:ca:dc:45:f7:f3:fa:18:a7:6f:7e:5b:d1:9d:
ae:9a:f4:33:3d:6e:7d:93:9b:25:de:3f:02:ae:df:4c:c0:53:
f3:d4:53:bd:72:f3:8e:7e:fc:f2:76:cf:26:75:82:6e:6e:0b:
a7:49:a5:57:3a:2b:5c:5d:fd:38:2e:42:3a:9b:e1:da:9d:46:
cf:55:6f:62:63:d6:c2:9b:54:cb:2f:db:50:7b:df:2c:9e:6f:
b4:cd:ac:dc:29:93:51:eb:32:f9:ad:85:ea:42:ef:7c:08:7c:
3d:1e:a6:39:08:39:e6:41:6c:59:f2:74:ad:d3:d0:4f:2c:77:
ba:8c:7d:7f:ab:8e:05:1d:3b:1c:88:01:dd:a1:96:37:05:40:
dc:e3:75:bf:7e:87:87:83:62:0a:47:9c:8d:81:a7:2b:a0:64:
d2:b4:fe:b5:fc:a0:55:d4:07:26:0f:fe:76:b8:2c:1f:04:b8:
36:22:1f:73:a3:a4:4b:a3:92:e3:05:85:db:69:6f:6c:2c:1c:
39:fa:87:1d:cc:a6:41:fc:8c:cf:46:04:09:8e:a1:86:bc:6a:
ae:fa:e2:10:1c:f5:4a:90:3a:ea:fd:eb:50:68:10:96:46:c1:
97:cf:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:35 2025 by rpki-client on console.sobornost.net