Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa
File: 3e5453eb-9c31-3840-8aaf-140329db4864.roa (raw, json)
Hash identifier: 75NSybGrGsGyQ5kFDPOvNtlfG54NM0FB/Euxd3rzOFA=
Subject key identifier: 23:88:73:06:7B:C5:06:42:2B:0C:58:EA:08:15:36:B1:82:27:60:E7
Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Certificate serial: 010D0C9F4328584855D5997F76F40716E62D7E20
Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 52.129.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:99:7f:76:f4:07:16:e6:2d:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=0bf65ace-0106-4941-ae48-96eb68481786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:aa:1c:75:82:4b:00:3d:64:4c:94:11:fb:
40:cd:b3:cf:58:e8:a6:83:84:72:b6:f8:64:33:53:
34:29:14:b8:30:04:1b:97:34:fb:c8:a8:dd:1b:37:
dc:c3:dd:1a:20:cf:ae:03:c1:b9:c6:93:52:0d:b7:
fc:b3:b9:85:d0:fe:df:4b:95:bd:84:ef:7b:32:71:
1a:e8:74:4b:34:85:64:ff:36:d7:7c:c2:fd:44:ca:
45:a0:43:12:06:8b:85:ae:8a:1f:d3:d8:37:bf:29:
41:45:4b:ce:d2:1e:68:f1:ba:ef:9d:35:a3:7a:96:
d7:50:04:67:12:e6:58:19:3e:64:94:2a:9c:f4:9e:
11:1b:6b:ef:24:36:d7:d4:31:56:b1:c3:e0:d8:a4:
4e:af:9f:6b:30:70:10:60:39:a0:da:08:fe:1b:f0:
34:80:fc:5e:10:42:a9:80:58:80:85:0a:01:21:3d:
91:9c:8c:a2:c9:de:c0:66:45:5b:2a:49:a5:9d:42:
b0:b4:0d:f7:8c:e9:19:41:d4:32:47:84:ad:4b:6d:
4c:2b:9e:58:32:5b:5b:07:61:2b:c9:f2:97:19:54:
c9:b6:9b:51:34:a5:77:04:89:bf:59:4b:ab:52:58:
99:bc:34:52:a4:89:95:cd:06:a8:97:f1:de:c4:3e:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:73:06:7B:C5:06:42:2B:0C:58:EA:08:15:36:B1:82:27:60:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/3e5453eb-9c31-3840-8aaf-140329db4864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl
X509v3 Authority Key Identifier:
keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:67:e9:ae:c4:ab:6f:7c:eb:e1:24:b8:ad:f8:02:32:90:2e:
38:9a:f4:cc:c0:25:00:a6:c6:91:c3:42:fc:b5:a3:cf:3a:53:
6f:ad:ce:96:1a:a9:b8:4b:82:c1:96:79:9e:25:81:92:e6:b5:
48:25:05:20:ba:92:8d:4a:a4:31:75:3b:02:65:0e:4a:f0:03:
ca:ad:f4:9c:2a:00:0c:22:be:8f:3f:6c:1a:42:ed:75:46:1d:
69:b4:51:8c:d1:14:66:d5:57:f5:15:91:bd:a0:34:9b:02:c0:
22:dc:ec:05:f3:09:34:b2:a4:6a:10:51:8c:d6:03:49:d0:93:
69:e6:63:ef:29:eb:a4:d1:76:9e:de:79:e9:d1:1a:fd:9d:2d:
7f:b2:d7:16:67:d9:ff:c2:64:2b:e2:ec:5d:0c:42:1c:fb:4d:
2a:49:dc:03:26:77:20:1c:9a:9b:e3:3e:c7:ab:65:ea:24:02:
f6:39:67:ea:b0:d2:bb:a7:3a:90:b9:65:8c:7d:18:0b:68:8c:
a5:ef:85:ad:8c:72:b4:c0:be:81:80:11:aa:16:18:1d:a3:6d:
e4:92:da:dd:af:75:1f:9b:b4:38:91:0c:3f:d1:e9:7d:01:0d:
05:0a:ad:78:d4:6b:52:61:7d:19:04:51:1d:fa:0e:9b:cf:ea:
ff:a0:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:00 2025 by rpki-client