
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
File: dd878c77-8115-3bda-9142-aabe43c219b8.roa (raw, json)
Hash identifier: BqVcmSRmCH3s7A2XPtVto6wAd6tPRIHbYbg8DpdgxKk=
Subject key identifier: 3C:B1:86:11:E7:B3:85:EC:9C:F1:42:B0:75:A2:8C:E6:AF:48:39:CB
Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Certificate serial: 010D0C9F4328584855D5996FC4C32F28DDAC7E00
Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 52.129.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:99:6f:c4:c3:2f:28:dd:ac:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=856c8be6-4c9a-4dee-8f15-4c4ca6b0b251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:54:07:ab:7c:10:7f:11:a8:3d:ed:95:f7:
7b:c6:4f:16:96:9d:77:5f:b2:11:5e:57:9a:23:a9:
88:16:36:dc:1b:f1:b2:61:8a:12:48:dc:83:ab:26:
4f:e8:67:81:76:7d:cc:e3:a6:0e:d6:5a:30:5e:a7:
57:99:31:c2:6e:2c:19:3b:4a:60:73:ba:17:33:61:
a0:34:d0:c9:9a:d8:33:30:a2:73:51:36:87:99:59:
b9:41:82:70:b0:d2:dc:91:7b:5d:b6:0e:47:82:72:
aa:34:eb:04:d3:1b:3d:d5:96:a9:87:f3:49:29:d6:
94:91:7f:18:d6:3c:06:ac:a1:9a:74:c0:13:bd:06:
42:5c:cf:5d:45:77:ca:1a:19:bf:4e:7f:60:cd:52:
04:26:66:e9:ea:49:3e:9d:b7:ab:e4:b1:97:b6:2d:
bd:39:03:4c:b4:2f:2d:1f:e9:b0:91:ca:0e:38:9f:
99:c8:61:e9:02:6d:73:fd:a2:48:0b:3b:3b:06:08:
0c:8c:5e:4e:db:1b:ab:81:b5:96:02:d8:08:38:1e:
2f:92:25:2b:ec:09:95:51:aa:57:d4:92:48:5f:3a:
28:50:d9:9c:1e:53:e6:08:7a:49:b7:43:a4:bf:8c:
76:f8:eb:f4:d8:9e:00:cf:49:f7:8f:f5:74:e9:4b:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:86:11:E7:B3:85:EC:9C:F1:42:B0:75:A2:8C:E6:AF:48:39:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/dd878c77-8115-3bda-9142-aabe43c219b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl
X509v3 Authority Key Identifier:
keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f9:6f:3c:db:8e:1f:81:d7:0c:6f:c8:8f:03:94:e3:ce:77:
2c:9a:c1:75:d4:36:86:f1:18:40:ad:1b:a1:b6:4f:36:fa:1e:
61:67:68:03:5b:bf:ee:24:92:d7:e4:49:46:05:4a:53:d1:59:
8e:39:32:b2:fa:5f:d1:db:c8:6e:84:21:24:8b:1d:0d:30:f1:
6e:e1:01:e4:ca:81:ce:a5:01:e0:5b:21:54:80:d0:47:dd:fd:
52:f1:e1:c7:8d:51:a9:75:c5:fb:ab:2c:14:47:46:85:1c:47:
d8:8b:7b:de:be:85:9c:a4:d4:42:7d:f1:0e:84:a5:a1:d1:be:
cb:8a:b2:de:8a:13:30:43:31:69:77:98:99:6b:26:8c:a2:0d:
f5:31:f3:ce:95:57:bc:43:7e:82:4d:2b:6c:88:39:df:15:63:
fa:18:02:85:1f:9a:ea:db:2c:bb:5f:5a:aa:aa:53:ab:e8:1c:
6d:b0:4f:6c:04:0b:db:a1:81:5f:d5:83:cd:21:b9:0e:b4:01:
5a:a3:38:04:f1:66:39:76:be:39:c2:d3:17:94:5c:c1:97:fe:
8e:f5:c8:d7:60:35:04:53:3f:c6:b6:1f:3c:0d:0f:0f:64:eb:
d9:08:27:0e:34:af:c3:b7:1d:b7:75:38:c8:9d:c7:fe:2b:25:
c6:c0:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:55 2025 by rpki-client