Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa
File: 10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa (raw, json)
Hash identifier: UcPZkCkpXCWaq5w8ao0X/SfBu0Vi4KaNMac4Ns0o/nw=
Subject key identifier: F9:7C:56:E1:C5:C9:68:AA:A1:75:C8:E7:00:25:23:01:24:40:43:58
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848116FFA8957F28BED5B3CBA40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 8069
IP address blocks: 52.122.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:fa:89:57:f2:8b:ed:5b:3c:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=b61f611c-c86d-48e4-9380-2e5d76917d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:8d:e3:e5:1c:ee:cc:60:57:a8:ae:98:58:
24:ff:06:60:b4:22:16:0d:5b:3e:d2:97:28:f4:06:
8f:a5:82:4c:62:7f:a3:48:94:66:0e:0d:0f:ab:4e:
1b:ef:64:ef:08:02:8a:41:cd:ac:aa:37:0e:1c:02:
12:19:6e:88:f5:08:d3:d9:4a:60:b7:02:c7:5a:c9:
ba:57:86:16:7a:a5:88:4a:28:f2:b6:95:61:fc:c7:
56:f0:39:ad:cc:cd:e1:91:27:8c:73:4c:a8:ba:7a:
9f:87:9e:4c:a0:c1:f8:fa:7a:31:7d:43:18:58:a0:
0d:2f:0a:7c:54:72:42:78:7d:58:96:0d:18:c2:7d:
21:c0:a8:89:4c:07:ef:95:74:38:77:a2:62:c0:eb:
8c:f1:66:b8:a3:8a:79:d6:7b:9e:7b:0b:ed:d3:df:
c5:13:c8:95:ca:7c:cb:84:46:26:10:87:d5:d6:82:
b5:99:54:a3:62:55:4b:56:b1:cb:84:f7:d1:9e:5d:
07:97:46:3f:33:5b:ac:fd:cb:d2:b3:7e:82:2a:1e:
6d:7f:d0:44:d7:e9:ab:63:62:57:0f:d0:a4:dd:de:
83:19:5c:9e:97:17:26:03:91:cb:23:33:ab:b8:5d:
ef:17:23:b7:a7:14:2a:25:86:e6:c6:35:34:9a:d9:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:56:E1:C5:C9:68:AA:A1:75:C8:E7:00:25:23:01:24:40:43:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e6:74:85:fd:94:39:c3:4a:e3:20:f5:f9:1a:a3:fd:f1:86:
e4:82:40:3a:cb:e9:5e:60:bb:96:3b:ce:ab:d8:91:24:f0:09:
ea:d4:c1:19:ea:2e:ba:84:51:80:02:85:64:2b:23:4a:ba:c8:
df:e6:e0:c4:d4:e7:7f:ae:4e:d1:42:59:94:8e:b9:ad:1c:ab:
e0:54:b5:ee:3f:6f:82:2a:b9:c0:69:44:dd:4c:31:00:a3:cf:
8d:d0:3b:86:7b:ac:e8:44:9b:64:23:a9:49:7f:3d:5e:48:28:
90:a3:71:d9:1d:a3:07:d8:b0:c6:e3:b1:77:02:9c:cc:a6:24:
b8:37:8f:1f:17:95:b2:ed:5d:1f:3b:45:14:4f:4c:0f:42:1d:
c0:aa:03:28:b6:b9:7d:d3:f5:68:48:ba:ce:da:96:41:e3:e9:
d6:bd:d4:c7:89:7b:9a:34:2d:d0:09:19:33:12:d4:df:31:49:
82:6b:3b:f2:c7:d8:ec:d1:1a:06:91:9e:b4:4a:b5:8e:d4:42:
cc:ec:9d:25:ea:e9:4b:59:42:e2:b1:87:b0:86:89:54:31:d5:
95:8d:84:84:bd:e4:3a:30:e9:9c:70:12:5d:4d:95:86:7d:b4:
0d:58:57:99:e0:db:70:fa:08:2e:32:0f:a3:b3:14:8f:f4:74:
cc:32:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:21 2025 by rpki-client