Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
File: db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa (raw, json)
Hash identifier: vUjPY8uvQZEDY2PCQu9HzHdYioY2Q1npqvCqdlaBMVk=
Subject key identifier: 97:A1:52:6F:01:D4:59:98:80:64:E3:03:99:FF:02:C6:AB:E8:E4:14
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F432858483F80252650FA3E71C8730B40
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 399150
IP address blocks: 52.128.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:25:26:50:fa:3e:71:c8:73:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=561c8a6c-86db-4dbf-81be-0c5cb97a01d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:90:2b:a9:44:01:2a:cb:94:c8:18:45:89:
0c:f5:43:4e:25:87:74:89:e1:76:0e:47:c8:dd:3d:
61:ac:d6:2d:64:31:60:03:09:20:a2:0e:88:26:ab:
aa:da:13:0f:59:19:5c:a9:04:6a:64:8a:1c:2f:02:
2a:20:1a:7b:83:4b:f3:53:e1:86:bf:4a:f4:d2:40:
e2:cd:fd:5f:df:15:a9:46:40:cd:db:1c:2a:fa:77:
32:be:65:c9:00:9c:02:62:43:e6:90:3e:02:a3:29:
47:92:ac:04:1c:44:a9:24:8e:c3:96:de:59:47:b5:
2b:4b:65:f0:ae:b1:b1:7a:52:96:ba:ee:c7:46:be:
e5:12:3f:92:77:2e:29:91:d1:60:0b:95:74:24:3a:
2e:35:82:f5:20:c7:30:4f:0e:7a:11:8d:d1:a6:17:
ca:56:3a:31:a8:ec:6f:20:13:0a:60:b4:5b:48:05:
65:56:00:b6:53:d8:37:7a:fc:ff:0a:62:2f:40:be:
20:ea:2d:1c:3d:7a:1d:41:87:92:55:25:78:3f:b4:
d0:39:85:7a:e8:c2:c9:57:bc:ad:50:9b:7f:dc:27:
76:ac:d6:19:04:7c:a7:92:ad:56:64:9d:1c:cb:7e:
80:30:15:36:ce:4d:27:87:f2:63:54:ac:34:5e:79:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:52:6F:01:D4:59:98:80:64:E3:03:99:FF:02:C6:AB:E8:E4:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/db7d6aeb-bc2d-3908-90fb-e3589196da0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f7:bf:c2:36:54:37:b1:b7:2f:98:7a:0b:95:2b:0d:16:57:
df:b8:21:e6:ba:da:d2:20:b1:bc:e6:5a:05:4a:1c:eb:8b:7c:
f2:77:d9:1b:df:2b:fe:31:8f:b2:ed:6c:78:73:34:c2:70:a5:
4a:96:1d:57:d2:63:c8:3f:1b:96:d3:34:02:66:82:da:e3:90:
37:5a:d7:f0:8b:47:56:b5:62:c3:aa:ab:e2:34:b5:60:a6:26:
00:bf:3d:84:bf:84:cc:f8:37:49:b2:78:fc:cc:44:7d:b8:da:
e9:9b:b5:ac:1a:75:4c:7c:1d:9e:04:94:06:9d:87:1b:f2:53:
58:b2:8f:79:70:59:85:ef:3b:da:66:d9:50:69:93:33:3b:db:
e5:47:d9:ff:b8:51:8d:7f:d3:57:7d:9d:e4:c2:1c:84:8f:b0:
ec:d5:2d:0f:ff:ce:7f:db:9c:11:e2:a8:61:84:56:ef:f9:e4:
eb:02:c4:e1:10:6c:42:9d:99:51:49:c8:05:9b:eb:f2:ea:94:
85:1c:e3:13:92:55:3f:87:b1:ab:80:a0:cc:23:06:19:f5:0b:
4e:e5:d3:58:07:6c:b0:82:45:b5:03:27:89:20:d5:5e:82:53:
d9:5a:a9:31:b8:31:97:08:18:c1:c8:92:e6:b8:c4:fd:84:88:
bf:ef:c1:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gCUmUPo+cchzC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm
MDk0MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
NTYxYzhhNmMtODZkYi00ZGJmLTgxYmUtMGM1Y2I5N2EwMWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknyQK6lEASrLlMgYRYkM9UNOJYd0ieF2DkfI
3T1hrNYtZDFgAwkgog6IJquq2hMPWRlcqQRqZIocLwIqIBp7g0vzU+GGv0r00kDi
zf1f3xWpRkDN2xwq+ncyvmXJAJwCYkPmkD4CoylHkqwEHESpJI7Dlt5ZR7UrS2Xw
rrGxelKWuu7HRr7lEj+Sdy4pkdFgC5V0JDouNYL1IMcwTw56EY3RphfKVjoxqOxv
IBMKYLRbSAVlVgC2U9g3evz/CmIvQL4g6i0cPXodQYeSVSV4P7TQOYV66MLJV7yt
UJt/3Cd2rNYZBHynkq1WZJ0cy36AMBU2zk0nh/JjVKw0XnmIKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJehUm8B1FmYgGTjA5n/Asar6OQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi
NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvZGI3ZDZhZWItYmMyZC0z
OTA4LTkwZmItZTM1ODkxOTZkYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy
MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk
ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1
NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGH3v8I2VDexty+YeguVKw0WV9+4Iea62tIgsbzmWgVKHOuLfPJ32Rvf
K/4xj7LtbHhzNMJwpUqWHVfSY8g/G5bTNAJmgtrjkDda1/CLR1a1YsOqq+I0tWCm
JgC/PYS/hMz4N0myePzMRH242umbtawadUx8HZ4ElAadhxvyU1iyj3lwWYXvO9pm
2VBpkzM72+VH2f+4UY1/01d9neTCHISPsOzVLQ//zn/bnBHiqGGEVu/55OsCxOEQ
bEKdmVFJyAWb6/LqlIUc4xOSVT+HsauAoMwjBhn1C07l01gHbLCCRbUDJ4kg1V6C
U9laqTG4MZcIGMHIkua4xP2EiL/vwTM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:38 2025 by rpki-client