Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa
File: b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa (raw, json)
Hash identifier: 1J59RZoeuEkLVEE8pMzy1f4C1xdHHDIpF++fkBOPNKQ=
Subject key identifier: 8C:B5:A9:8B:E3:13:4B:21:F1:6D:88:53:0C:55:B6:17:C9:35:FC:0D
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584827C5305197C11FA2E8298800
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 7018
IP address blocks: 52.128.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:30:51:97:c1:1f:a2:e8:29:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=6f0dc988-de20-4199-bf9d-6e6ec534475e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:9e:41:4b:16:27:d1:75:a9:7b:94:79:8d:
c3:e9:41:d6:f8:f3:ee:96:31:5a:ae:95:1d:9b:73:
08:28:c4:c2:bd:f8:0a:1e:fe:92:a4:c9:d7:54:2d:
e9:6b:a6:b7:37:65:1b:02:0d:e8:c8:7c:0a:a8:cf:
c4:d6:04:63:90:29:1c:85:9a:e0:bf:0d:29:30:15:
35:a8:9c:1d:1a:72:58:40:b9:dd:36:0e:c7:df:0e:
54:3d:3c:e5:5c:cd:52:80:34:e7:55:07:17:99:17:
fc:52:50:24:d1:4b:73:5b:dc:1e:d8:f7:c2:d5:6a:
3e:2b:5e:64:da:cc:77:89:f7:94:7f:b7:07:67:87:
40:2a:49:c5:ca:8b:ec:cc:16:b8:6d:20:f1:3a:44:
1d:03:51:39:a3:a5:76:4c:a6:00:89:ac:69:9d:9c:
17:06:33:2b:56:17:66:4e:f6:d7:48:53:af:21:6b:
e4:9c:9b:a2:f9:0e:2f:a8:c9:a1:ea:cd:a4:08:e4:
b3:95:a9:ce:11:d5:e1:9c:e9:5f:43:54:b1:b3:33:
91:63:75:e3:d0:e1:85:d4:9b:91:39:3d:3c:96:30:
28:8d:c6:d2:18:ac:8f:99:41:68:8d:aa:5c:f9:27:
94:3d:20:a6:59:69:45:00:71:e1:e1:e8:f9:31:f2:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:A9:8B:E3:13:4B:21:F1:6D:88:53:0C:55:B6:17:C9:35:FC:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:48:08:cd:38:17:34:db:c1:cc:89:75:18:07:b4:f1:d9:85:
c3:cc:47:d0:90:dd:eb:fd:14:da:ef:fa:1c:e4:0a:6e:2b:1f:
2e:35:fd:e3:f2:3b:5d:58:b3:95:98:9c:6c:29:0a:11:24:95:
28:e7:b7:22:98:e6:fc:85:e4:c7:42:ad:2c:8d:2e:db:8c:ba:
e7:f2:69:ca:39:44:e4:29:f6:d2:03:49:55:f9:5d:b6:6b:bc:
d6:38:ba:8a:6d:cf:c0:7c:6d:ba:32:81:38:38:69:24:65:aa:
3d:25:72:40:5a:46:fc:ae:84:d3:9d:20:43:c6:46:16:fe:d1:
0a:8b:70:c8:af:d4:95:62:0f:8b:97:d9:e8:31:8e:30:17:a0:
60:1b:6c:49:f5:55:eb:ca:fa:10:2d:16:b1:7c:9b:13:69:61:
3f:65:07:d0:d1:af:f3:eb:5e:0a:af:9d:d2:81:e2:f9:2a:b1:
38:14:70:ef:c8:0d:e3:e9:ee:51:43:d0:42:4f:0b:fa:ee:03:
ae:bf:ab:5f:3a:af:68:59:c3:1d:cc:72:5c:4e:a9:5c:0b:80:
c7:58:cf:63:88:ad:6a:e4:d0:c0:66:df:4e:f1:23:e0:4f:d7:
64:14:88:69:d5:7f:90:1a:8c:16:78:cb:26:9b:14:36:41:db:
e4:7c:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:53:56 2025 by rpki-client