Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
File: 1f825b44-9c70-33dd-b03f-6d808154234c.roa (raw, json)
Hash identifier: Vvoze+9NwNyrYRrAKdswISZK/6ifT+yRiNhV4l4GXWw=
Subject key identifier: 93:C4:83:A2:5A:15:52:64:CA:0A:45:18:51:BA:A0:D0:A7:29:D9:B8
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584827C5306492EB273A48E43400
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 7018
IP address blocks: 52.128.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:30:64:92:eb:27:3a:48:e4:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=b3bab1d1-7be4-425d-8b92-54f559299f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:a9:da:d8:bc:8e:ef:99:49:47:7a:cd:8d:
24:b0:23:fb:ae:65:a2:8a:7b:4a:d5:a4:37:14:67:
d6:a3:2e:3f:35:da:b3:bd:b7:0f:94:83:11:b1:6c:
63:af:f4:d0:54:dc:b5:59:ba:2d:5d:88:c7:db:0d:
77:31:ea:b3:a1:8d:39:3d:03:46:ff:e4:29:5b:29:
1c:ad:69:0f:15:74:ce:f6:a3:99:65:4d:be:d4:f2:
f2:7c:1e:51:e5:8a:c9:ec:a2:71:ef:42:f4:fc:db:
12:e9:6e:9d:b9:1e:f4:c6:16:41:87:68:ff:a3:57:
56:5c:a6:55:3a:1e:58:12:07:a9:73:a5:d9:48:61:
ec:88:40:24:aa:6e:a9:21:9a:ab:07:06:0c:99:b1:
a0:e0:a9:47:6e:47:29:93:4c:c8:09:f4:8d:e1:6d:
b9:8f:4d:82:1f:69:c4:9a:5a:9b:3d:1e:ab:aa:8e:
dd:aa:6b:5e:19:29:dc:2c:b5:91:c7:db:96:e5:e1:
50:65:99:d1:8f:17:af:09:ab:91:f6:6e:60:76:24:
ee:c3:9b:ac:49:77:e1:9e:e8:d8:28:5f:d0:8c:3a:
f6:f5:f7:2c:69:81:61:7c:50:bb:53:34:7e:34:b9:
49:3c:bb:16:41:9a:54:eb:2e:fd:86:9d:6b:ef:69:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:83:A2:5A:15:52:64:CA:0A:45:18:51:BA:A0:D0:A7:29:D9:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:de:70:48:a7:6c:44:d1:98:d9:5c:74:30:88:31:f2:c3:64:
92:a2:74:bd:50:df:fd:19:ce:11:79:19:85:db:fc:3c:38:8d:
16:27:4c:26:94:52:e5:54:ef:bf:41:ff:dd:3e:ef:1f:3d:8a:
50:a1:90:4e:cf:1f:c5:45:e4:8c:90:ca:7e:b5:d9:ce:77:6a:
b2:c4:b7:f0:5e:d0:8a:f9:fc:63:c2:f6:51:0b:c0:46:1b:8b:
6c:53:4d:45:28:55:0b:03:07:e7:1e:5f:43:41:cd:ee:e3:e1:
23:da:4e:c0:5f:ae:34:e4:b0:21:35:61:56:07:97:38:bd:7d:
9d:0d:db:d1:43:c8:50:50:c7:00:3e:74:f1:3b:aa:03:4a:c7:
68:b4:cb:4e:64:af:b6:57:41:4c:96:cc:91:6c:67:cd:52:5f:
51:cb:be:fe:1c:c8:0f:d7:62:7d:6e:a7:c3:d9:5a:57:0e:de:
bb:53:ea:dd:69:80:e0:6f:1e:e6:35:6d:94:85:10:ec:79:4e:
ac:55:a6:24:1f:37:6d:7a:ff:70:c4:5f:74:08:89:b1:c0:08:
fb:6b:f6:62:ce:ad:3e:f1:34:3c:bf:00:57:f1:0e:e4:6a:f0:
e0:cf:04:18:33:9b:ae:2b:a5:cc:db:cc:35:59:38:94:01:73:
75:f8:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:42:09 2025 by rpki-client