Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa
File: afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa (raw, json)
Hash identifier: 90zJric2unLf+LJr3JSeFc86yp/Q/sYzZZFkiiJxcU4=
Subject key identifier: 5A:8F:8B:9F:66:63:83:6A:6E:58:54:7A:DC:F5:05:C2:23:08:9A:4E
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F432858487CEB32037B28CCB15BAFDD40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 52.129.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:32:03:7b:28:cc:b1:5b:af:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=12d4b7ef-a6e9-4021-bef6-96c31a8815e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:0d:b4:9b:77:0d:02:d0:3c:4c:df:3c:85:
56:d7:c9:37:d8:08:32:23:fd:e2:c7:53:62:8b:28:
24:f0:e7:dd:fa:a8:e8:25:90:00:ff:ae:05:0a:eb:
b8:f1:08:ee:22:e2:24:c8:fb:ee:50:b2:2b:ef:dd:
29:50:e4:16:a2:d4:a7:31:62:17:df:86:b6:f6:47:
e1:ee:d4:94:5e:c0:7d:50:9a:32:a3:48:e0:d2:f5:
81:81:53:67:a3:b5:f1:26:44:53:81:6b:8e:92:3f:
43:1c:4a:7b:ce:a6:65:49:8b:68:0d:62:43:0a:69:
58:d0:b9:a6:0e:aa:69:95:24:e6:06:51:03:b2:b2:
ee:e8:21:34:2c:c9:6c:33:85:f9:48:5f:d5:c6:67:
11:6d:92:64:2e:db:94:10:20:5a:77:b3:5f:f1:7c:
3f:8b:e7:09:41:28:a8:e1:f5:78:0a:9a:55:82:90:
13:9d:3d:fe:ee:68:54:12:4e:8c:a9:56:91:dc:f5:
31:8b:cb:a2:b8:b0:9e:74:f1:77:78:1b:25:3a:3f:
5e:ee:e5:4c:77:ed:05:df:c5:71:74:9e:9e:d1:75:
86:3a:87:c5:be:95:0e:84:b1:52:c3:49:28:86:ec:
d4:b5:88:a8:3a:98:a4:03:f1:8a:30:bb:66:62:c9:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:8B:9F:66:63:83:6A:6E:58:54:7A:DC:F5:05:C2:23:08:9A:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/afb9b482-d4f1-3dc3-aa6c-a9bf17bd1b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5b:e8:34:3f:68:21:c5:40:07:a6:ec:50:03:af:46:92:95:
49:d3:d8:55:71:5a:99:00:63:ed:d9:09:38:f9:e1:4b:1d:03:
3e:01:2f:87:fb:be:29:6c:59:5e:eb:e4:75:a2:ed:de:ff:53:
38:62:fe:c9:76:75:77:32:d5:db:15:2d:26:24:5c:40:25:2a:
a9:2a:e6:b0:b4:e9:8c:89:c0:d6:4e:63:8d:1f:8e:b0:9d:12:
28:a6:0a:30:9e:6f:93:36:9e:b3:bf:94:74:8b:c9:46:e5:30:
24:a2:31:06:02:f7:59:36:8b:67:b3:d2:95:cf:65:32:eb:4e:
8a:1b:11:be:3c:01:e3:d8:7f:ee:f3:a9:cc:19:31:c6:ee:69:
1e:60:8b:31:11:f8:19:af:57:75:4f:83:82:da:98:31:9a:98:
cb:b7:de:95:3e:f5:00:2a:2e:76:5a:be:23:46:96:a5:3f:0a:
3e:08:c8:96:c6:e9:be:16:33:52:e6:9e:08:2b:ec:46:6b:43:
da:31:3c:32:9a:21:62:8a:50:20:69:ae:c1:7a:d7:1a:8c:0f:
b5:4a:78:3d:a9:97:3f:63:18:65:8f:67:9a:5a:cb:cd:5e:fc:
74:71:d3:8b:33:29:ab:1b:d3:d9:c6:28:ed:5c:6c:98:b7:28:
0a:b6:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:21:42 2025 by rpki-client