Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/019d6ace-a9b9-355b-bc8e-15c4f637fc03.roa
File: 019d6ace-a9b9-355b-bc8e-15c4f637fc03.roa (raw, json)
Hash identifier: PHUIVAEydJwCjwYXhu09fFcLAuOHir/44VVgUY9hIFo=
Subject key identifier: 4C:91:EC:47:B2:EE:09:67:5F:50:A2:29:AC:87:EA:CA:C8:36:A7:CF
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F432858488AE09E81DB662202D38B0C00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/019d6ace-a9b9-355b-bc8e-15c4f637fc03.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 52.129.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9e:81:db:66:22:02:d3:8b:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=a53f55d9-1b01-431b-bdba-98cad85aebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:c4:29:10:19:f6:22:5f:57:f5:16:9e:47:
30:48:e7:b0:48:3e:c9:1b:0a:81:86:75:d7:55:b9:
9c:54:87:1f:fb:9b:33:60:42:9a:19:b8:cb:30:bb:
27:de:4a:23:c5:0f:cd:9f:af:c3:5e:1b:2a:20:57:
9f:1e:e4:21:ec:6e:48:9f:b1:d5:b9:71:95:17:a8:
ad:de:d4:e0:c9:96:fe:bb:68:b6:94:db:9b:59:32:
f4:8e:1f:cc:98:5f:92:fb:b4:a6:46:e7:df:18:1c:
ba:71:dc:d0:69:14:db:5e:5f:e1:e7:9d:d5:f0:5d:
62:71:64:17:18:f5:8e:5b:90:f1:47:e8:04:c5:9b:
1a:87:1f:60:17:99:24:c2:b6:29:1c:9e:74:6e:3f:
35:db:81:38:c4:09:45:33:9f:c0:06:eb:7e:b3:43:
1e:90:db:85:08:d9:21:e4:bd:3d:79:25:65:ae:6b:
62:74:16:70:3b:11:e5:97:42:09:71:43:30:36:f6:
a7:f1:66:cb:b2:af:79:48:e9:a1:41:20:3f:d2:29:
c9:19:93:04:e4:30:24:81:66:55:9c:5d:e9:cc:a2:
8f:73:fb:67:a6:76:c7:e6:b1:ae:56:7b:c0:a0:d7:
61:fe:c4:10:c4:34:ad:6b:d3:06:a0:bf:26:13:9c:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:EC:47:B2:EE:09:67:5F:50:A2:29:AC:87:EA:CA:C8:36:A7:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/019d6ace-a9b9-355b-bc8e-15c4f637fc03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f7:b4:75:6e:8b:a6:c4:3e:42:07:b9:7b:f5:d0:a6:be:a4:
4d:2d:28:ee:16:25:7b:32:89:10:99:cf:25:81:84:3f:35:eb:
67:2c:70:53:64:7d:a2:fa:4c:75:ac:0c:0d:f2:14:69:c8:63:
0b:cc:15:27:e9:a4:13:99:c4:ba:4d:3b:d9:67:6a:fc:d8:98:
dc:4e:db:1b:c4:53:b0:12:23:80:ea:57:b1:74:ad:50:e4:2d:
5d:43:1f:42:71:11:e9:f3:09:07:f4:a3:66:8a:f4:46:cb:4e:
69:ab:bc:f0:4e:fe:5b:e0:c5:b2:01:68:93:63:0e:b5:8d:4b:
74:7a:c9:df:10:bc:09:49:2f:35:46:73:00:e5:60:5c:61:c5:
f9:a7:d8:02:7e:11:c4:28:06:5e:07:d5:c8:c2:af:fc:88:c5:
f5:d2:1c:3e:19:92:60:9c:29:15:0a:5e:18:f5:9f:06:dc:95:
92:41:3f:bb:38:33:32:18:ce:68:69:17:a1:e6:b7:d0:7b:3f:
36:a9:b4:d8:c8:72:27:b9:de:8b:45:c0:bf:5b:e5:55:8d:e7:
c1:cf:49:12:9c:0e:23:95:31:c4:9d:9d:dc:13:e9:9d:1a:98:
fa:7a:bc:1e:9e:6c:7f:8d:ee:3e:1d:c0:e3:1f:4b:02:50:fd:
dd:22:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:24 2025 by rpki-client