Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
File: b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa (raw, json)
Hash identifier: spgszlBpLJtBT58cvd7wyjRs+4cj0lj5qhyU0i4v9gs=
Subject key identifier: D6:FB:E2:6D:FB:3B:10:5B:8F:6C:D9:CE:69:10:5E:CB:EE:F6:A3:97
Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial: 010D0C9F4328584869605ED89F301F78596C6A80
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 46489
IP address blocks: 52.129.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:5e:d8:9f:30:1f:78:59:6c:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=fe044910-6634-4651-9610-82140f2ccbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:e1:0b:4f:4e:e4:03:c1:ec:bb:c3:b2:1a:
81:9e:6b:7d:d3:a7:ab:88:53:25:8a:e8:63:74:e5:
22:e9:ff:1f:73:ef:30:26:57:e8:65:49:e3:98:f7:
72:be:da:88:8f:90:7c:5d:d5:b9:6f:8a:89:6b:10:
a4:e2:6e:93:a3:c1:75:f3:e1:d5:7d:30:2a:a4:d2:
32:e3:b5:84:68:09:04:cb:cc:07:34:92:d8:48:ba:
f0:1e:ed:a7:d9:e5:a4:77:99:a8:c9:b6:fa:06:1a:
47:f5:81:3b:fb:4e:8d:58:8f:c7:a4:b4:4e:b0:b6:
94:65:67:9a:11:92:3c:42:45:57:9d:d5:c0:5f:31:
2a:4b:c4:00:4b:47:41:a9:12:3d:6b:dc:d6:8b:25:
93:16:58:66:a7:7c:68:6e:87:de:2f:07:ca:72:bc:
a8:12:b5:38:1a:71:e1:c0:a9:e1:26:3f:fd:ed:40:
92:50:58:21:9e:39:dc:94:6b:34:22:da:5a:29:91:
ba:b3:f2:6d:bd:c5:35:46:08:8c:eb:98:f7:28:29:
b8:69:12:66:76:03:23:10:68:50:6c:bd:c2:14:e3:
03:90:79:eb:44:86:e0:7b:f9:29:1b:04:a4:70:ac:
55:89:aa:73:4b:33:a3:83:a4:54:ac:34:79:fe:bb:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:E2:6D:FB:3B:10:5B:8F:6C:D9:CE:69:10:5E:CB:EE:F6:A3:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/b3e8bb87-db7a-35d7-817c-749cb271b2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
X509v3 Authority Key Identifier:
keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:28:57:08:15:e9:ca:35:14:f0:ef:8f:46:e2:a3:c9:3c:d2:
9c:65:35:8d:6f:4d:4d:ac:24:bc:89:44:dd:fa:df:e1:e3:d5:
ef:1d:d2:34:01:37:23:d2:3b:af:d8:bc:9f:a3:59:62:16:5a:
9a:fc:27:62:2a:df:bb:f5:f7:b1:70:0f:eb:ea:50:cf:9a:9e:
d5:bf:ea:54:e7:61:21:0e:fc:67:8f:43:1a:17:7f:15:bc:36:
de:61:7a:cb:bd:2e:d2:a5:f8:6f:07:37:9a:08:12:23:25:02:
b2:8f:1b:e9:99:4d:6d:2f:de:db:67:f2:97:c9:48:81:2f:c5:
3c:7a:0b:20:52:b1:eb:ff:76:4c:63:5c:16:25:a1:b9:8a:8f:
eb:b8:c4:3b:68:67:9c:03:ce:62:ee:5d:2b:ea:87:22:40:08:
fe:8f:d7:e4:7f:bb:19:2e:70:bb:20:86:7b:28:3a:90:60:2f:
55:f2:43:10:95:1c:b5:8d:15:96:ea:72:20:71:d4:6b:e9:a0:
48:e5:31:f7:43:56:26:df:19:b0:ab:ba:22:9a:f9:a0:59:a2:
43:4b:29:d6:96:ad:83:0c:86:24:da:41:b9:b1:4b:f8:2a:bd:
b5:7c:05:58:4b:74:cf:f1:94:17:3c:ce:ca:ce:78:de:72:46:
52:4c:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:11 2025 by rpki-client