Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
File: 10d72829-b71c-3de2-ab26-1eac86caaeaf.roa (raw, json)
Hash identifier: QrIStjB39w6rNBaXNbZixhPLq7VSL+HSTXUxyZeO7qE=
Subject key identifier: CC:5E:DD:BD:7C:88:84:F1:FB:7D:AF:EB:62:A2:C5:AD:69:DD:04:A1
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F43285848159FE38CE5AAA4ABE2A41A40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 14618
IP address blocks: 52.129.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e3:8c:e5:aa:a4:ab:e2:a4:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=99f3dde9-25a7-4dd3-9d90-b2ab05467274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:8c:60:9f:15:b8:f1:bb:c2:1c:84:a9:4d:
a3:6a:93:90:53:14:51:5d:42:f5:fd:9d:72:4f:33:
d1:80:bd:e8:d4:40:56:26:86:67:b5:0a:33:6f:c9:
be:26:20:3b:26:96:08:ef:33:23:a6:ab:60:76:8d:
f2:18:96:a9:98:7d:0a:45:56:ac:9b:f0:37:75:97:
ee:d1:3b:05:a6:c6:fc:f3:cd:13:38:60:08:ca:15:
b6:a3:ea:9d:a2:7b:bd:27:aa:c8:39:07:62:95:e6:
c1:81:24:b3:88:0c:b9:23:0b:27:8e:06:44:df:28:
b8:c2:4d:04:f4:c9:31:25:15:af:b3:91:58:80:67:
1b:46:2a:ce:58:34:1d:78:7c:ae:76:ce:76:a8:44:
a6:6d:1f:fb:1e:f2:37:a5:e4:76:5e:d2:a7:e3:ec:
ad:1f:ca:4b:8c:4a:d1:bf:da:c3:15:26:f8:99:1f:
dd:c9:c6:43:7e:22:ec:63:96:fb:8e:9a:34:ec:53:
da:cf:60:f6:4c:b5:0b:13:9e:e7:7c:fa:98:70:7c:
6c:ce:dd:22:53:6d:69:52:3a:4e:bf:a5:a5:29:3a:
63:4e:28:f3:0b:e2:55:1e:4f:e1:9d:85:86:cb:a9:
78:e6:22:b9:79:ea:42:c4:28:c9:e6:49:09:90:1a:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:DD:BD:7C:88:84:F1:FB:7D:AF:EB:62:A2:C5:AD:69:DD:04:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d1:21:f1:9e:bd:35:51:0c:f4:f0:40:4c:96:a9:d2:c3:1e:
48:39:aa:fe:69:19:2c:44:9b:8a:be:17:82:44:7e:d1:ad:9a:
ff:8d:72:97:55:bc:e5:a3:80:18:e3:26:b3:29:f7:6a:fc:15:
ec:65:9b:ed:54:f8:23:d8:45:6f:f1:80:df:b2:e3:7c:a6:f9:
0a:69:05:e4:a6:61:20:90:ed:e0:a0:3a:77:7c:71:d0:98:7a:
58:7b:ea:41:1d:1c:c7:97:4e:51:67:83:f9:63:e8:65:2c:18:
aa:12:75:f2:7e:c8:de:f6:4d:15:17:06:b8:5b:dc:9e:5f:61:
e0:d5:f8:3c:8e:2d:c7:da:fb:39:ad:dc:51:b9:61:a9:ee:b0:
89:ca:42:e6:43:59:79:92:df:e7:da:f8:33:dc:69:58:39:60:
e1:c3:62:38:8f:43:97:2c:55:b1:79:7d:79:02:08:87:62:f1:
3d:85:35:ec:9d:4a:d1:39:f6:b7:ed:3a:84:83:3b:d6:d0:71:
8c:44:19:8e:be:f6:fd:a4:7c:8c:e7:82:85:e2:66:ab:fe:84:
bd:f3:3f:88:39:cf:1c:5b:11:5b:73:18:93:22:98:70:31:72:
51:82:1b:30:15:6b:2a:7d:ec:e0:25:26:53:9b:f2:ab:71:69:
e0:73:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:13 2025 by rpki-client