Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
File: 0400b87c-f24c-326c-a2a2-44c7961b7277.roa (raw, json)
Hash identifier: Zw0mb7LW7DJbIUIdF7UghOLtOT4kU7mxflyu8zDoKs0=
Subject key identifier: B0:C5:CD:46:4C:68:50:74:B2:C6:8B:01:9D:9D:A6:56:FA:A0:C1:3C
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F432858483F802534F699DDA1C2860D80
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 399150
IP address blocks: 52.128.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:25:34:f6:99:dd:a1:c2:86:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=a4e4523d-9859-496c-82c4-0a930162a7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:82:7c:99:cb:7b:c9:cb:c1:fa:f3:59:f2:
1a:f4:2b:55:20:05:32:50:5c:0a:83:28:f8:32:e5:
f6:17:ab:1b:3e:de:55:a9:94:e0:4d:e9:4f:1d:24:
9e:41:6a:68:26:be:c7:54:16:5d:3a:d3:5b:2f:95:
51:6f:3d:1e:8a:90:93:b3:70:2f:57:90:b6:98:ec:
77:95:5e:c2:83:23:76:1f:b4:b2:fc:e9:d4:cf:e9:
2b:b4:43:b2:ee:b1:a6:b0:ef:fb:f2:cc:ac:3c:a9:
7c:9b:21:7e:0d:a5:68:76:13:dd:24:04:93:3a:34:
d9:84:62:3c:ec:64:25:56:b3:31:4f:eb:2c:fb:8b:
98:41:89:8d:22:28:38:7d:8f:19:c1:d1:00:0d:41:
63:15:aa:0b:4a:b1:5c:a5:e8:c7:d9:98:67:4a:b2:
d0:82:ec:5b:dc:1a:b7:aa:f2:5f:a9:18:37:d3:45:
9b:24:b2:a5:5a:ca:43:87:fa:3c:c3:0a:81:a3:0e:
55:d0:b5:21:f3:d5:e4:15:b2:89:d1:e9:0c:26:69:
91:5d:c2:aa:ba:f2:07:77:27:82:6f:58:69:f3:45:
82:02:7f:7f:27:94:5b:54:d9:d4:56:df:90:df:f6:
d7:5a:ea:44:1f:e9:a4:e0:4b:66:02:aa:dc:9b:6d:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:CD:46:4C:68:50:74:B2:C6:8B:01:9D:9D:A6:56:FA:A0:C1:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:87:af:0d:42:e6:3c:2c:92:7e:3e:08:3f:0a:d2:cc:98:ec:
8e:88:31:88:5e:5a:c2:5b:b3:b7:24:7b:4e:f0:11:73:4d:f4:
de:88:9a:c6:b0:f8:ce:c7:9f:65:e2:88:45:05:c2:11:95:de:
e9:fd:7b:90:a3:c5:3d:3a:20:a4:e4:0f:ed:97:ab:3a:ef:45:
97:ea:5f:0f:bc:1b:59:99:aa:e0:d5:1a:d7:d9:f8:80:c6:b0:
1a:6d:5a:9e:40:5a:f5:46:6b:67:8c:04:32:de:32:6c:21:bc:
c3:c5:4f:6e:22:75:d4:46:ca:6a:65:27:e3:03:87:68:fc:6e:
f7:55:bc:18:e5:fd:c0:e5:0a:50:91:cc:f7:87:77:32:dd:08:
80:e2:9f:8a:00:35:17:f9:6a:94:e5:88:16:62:cb:0a:45:4d:
0b:50:e1:35:51:79:2c:fb:9f:11:2d:67:af:ec:e7:8d:fa:80:
8f:15:6b:78:b5:6d:a3:53:0c:f5:89:10:22:54:4d:3b:73:74:
47:59:f0:a5:2d:a3:4b:07:0f:d2:d0:6c:c4:70:1b:5c:9e:0f:
7e:f8:b1:dd:21:89:b6:9a:f0:36:b2:f5:7d:0a:a0:b1:9d:11:
53:7e:77:a7:89:bf:2b:0b:39:bc:96:12:be:d5:1a:21:75:84:
84:08:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:17 2025 by rpki-client