Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4d03a55b-bb08-30db-a7fa-ada71172dc66.roa
File: 4d03a55b-bb08-30db-a7fa-ada71172dc66.roa (raw, json)
Hash identifier: /aKgHyr7FQEgc3OVJjylHlz7hSAMoZZtOkKt2tpugNE=
Subject key identifier: 41:80:96:94:6B:21:5B:15:75:1F:6A:41:B3:A5:BA:58:7A:64:63:E8
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F43285848159FE37B8A4715F0637108D0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4d03a55b-bb08-30db-a7fa-ada71172dc66.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 14618
IP address blocks: 52.129.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e3:7b:8a:47:15:f0:63:71:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=61937845-bc03-4c8d-80bf-f231b65f4fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:e0:ba:a8:f9:e6:90:af:cf:2d:8a:48:7f:
5d:93:74:81:33:b2:1f:e1:f1:b5:08:52:25:e9:97:
f9:cd:6f:d1:fb:93:a2:0d:b4:24:e8:21:9d:17:9b:
b1:c2:b2:d8:17:42:db:cf:73:9f:90:12:64:83:7c:
58:4f:8e:ed:f7:e9:f1:b6:ad:bf:fb:c5:09:94:49:
dc:77:97:3a:db:ba:2c:5f:fd:9c:6b:91:98:f5:2f:
5e:63:21:f0:ca:99:9a:06:f8:62:a5:87:5c:33:bf:
d5:ac:bf:a9:91:af:b8:61:c9:54:97:09:c3:b2:db:
26:48:a8:d5:da:93:88:78:76:38:bb:cd:62:2f:eb:
30:89:68:dd:5b:5c:a5:a1:dd:a1:39:09:82:32:6d:
7b:62:63:d3:06:a4:52:fc:ff:c9:fc:99:2a:23:1b:
95:82:cb:db:02:03:0c:d7:26:e5:be:cf:99:07:5c:
24:25:04:90:4f:43:5c:20:71:b6:64:3b:19:64:05:
39:5e:98:69:af:f3:77:7c:75:a5:39:a4:bf:d5:95:
e6:01:ec:bf:04:fb:c0:73:8c:23:8a:1c:6d:6e:75:
0c:44:88:20:c4:84:78:70:9e:1d:8c:14:cd:27:9a:
32:c1:d5:ea:8a:e8:13:6a:4b:41:4c:24:ad:7c:05:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:96:94:6B:21:5B:15:75:1F:6A:41:B3:A5:BA:58:7A:64:63:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4d03a55b-bb08-30db-a7fa-ada71172dc66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:15:72:a0:80:64:35:0b:8a:5f:45:68:41:0c:7e:e6:2a:db:
c8:50:33:ec:b8:6d:3a:79:a4:15:c9:c7:80:60:e1:94:ef:fe:
b0:95:b9:e9:79:e1:00:2d:a3:d8:5c:7e:15:d2:22:52:41:db:
73:f3:82:22:0a:63:a2:c5:e6:22:ad:6a:d7:c0:36:82:af:58:
5f:ee:69:58:cd:06:d7:0a:40:25:bc:b3:60:b1:6c:6b:41:41:
c6:12:48:b5:98:90:3a:5a:72:85:ee:76:c3:a6:86:4c:72:30:
f6:ad:0d:b7:8e:b5:26:83:94:d2:a4:fd:21:e9:74:08:44:1d:
bb:56:b7:d2:6b:66:79:ee:19:25:6f:79:76:27:a8:2c:f4:58:
0f:82:01:11:1d:13:8f:3b:54:a2:df:63:05:45:08:e2:73:5a:
86:80:57:b2:85:d9:ac:5b:bb:f4:04:22:3f:19:0d:f9:56:17:
6e:1c:4c:93:1c:14:7a:2f:13:c9:6c:a8:fc:55:90:50:df:10:
49:49:60:3a:49:30:d7:d5:8d:7d:a1:bf:65:38:68:9e:f4:f2:
7e:99:f8:d6:56:0d:21:19:d9:5f:8c:f1:22:de:a2:44:25:7b:
8d:91:b0:10:c6:3b:01:9d:ea:1e:01:24:19:87:84:84:52:52:
d9:9c:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:47 2025 by rpki-client