Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa
File: 4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa (raw, json)
Hash identifier: B+7vN1qVMgOSoQ+X2tGh2NZkjVn7Oemc1Jjt/huGc9I=
Subject key identifier: 42:B9:D8:A2:37:8A:2E:C4:F1:69:8F:33:96:75:EC:54:DA:6E:9D:38
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F44159EA0E90FD7154200
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa
Signing time: Thu 26 Dec 2024 17:01:38 +0000
ROA not before: Thu 26 Dec 2024 17:01:38 +0000
ROA not after: Wed 26 Mar 2025 16:01:38 +0000
asID: 8069
IP address blocks: 52.122.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:44:15:9e:a0:e9:0f:d7:15:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:38 2024 GMT
Not After : Mar 26 16:01:38 2025 GMT
Subject: CN=e0ad18b0-2de1-47a9-bd43-79d9b227466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:12:b6:75:ca:00:84:f6:12:e6:69:1b:48:
4a:3a:32:a9:c7:d4:e8:dd:ce:87:16:c5:45:8d:70:
4a:94:c3:a2:41:13:5a:f0:ad:60:cd:0b:b8:8b:e8:
06:55:b8:55:51:68:1e:90:05:1c:6a:7e:f5:09:85:
ff:6c:52:33:cc:19:01:1a:87:f5:13:44:1c:5b:c2:
a5:5c:10:5f:d3:0e:8b:f8:49:78:03:5a:4d:0e:0a:
1f:6d:2b:07:f2:2e:4b:3f:d8:fd:28:6d:79:8c:7d:
bd:62:49:17:8f:a8:db:9b:cc:82:34:b6:0b:db:0c:
de:0f:49:f3:30:d3:7f:d3:a4:c8:5a:c5:27:25:6f:
91:8e:c1:60:f0:d1:fd:20:63:d8:5b:64:1c:72:9c:
46:0b:1f:2d:e0:80:a7:04:d2:55:8d:83:89:6c:a2:
41:23:63:ff:a5:fc:03:6d:bf:51:b8:ca:0b:6c:81:
a2:23:fd:77:df:1f:08:7c:3d:2d:07:a8:29:6e:17:
a8:26:50:cb:a2:04:26:30:93:c3:93:9d:31:38:35:
35:be:a1:0f:3c:e2:74:17:06:f1:fd:65:14:16:fd:
07:9d:e3:1f:f7:38:a2:3d:48:1c:e1:a4:10:b1:ab:
94:ce:19:16:36:f3:04:c2:2e:eb:4e:7d:19:53:57:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:D8:A2:37:8A:2E:C4:F1:69:8F:33:96:75:EC:54:DA:6E:9D:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:54:d0:aa:6d:9c:c4:f2:94:aa:99:e5:88:20:36:cc:ca:7f:
5a:88:88:d1:57:af:06:78:9f:d1:8f:fd:80:ba:2a:da:e6:d0:
c4:2d:36:69:5e:15:36:2c:9f:60:a3:8a:f7:58:00:f0:01:e5:
9d:5e:57:10:51:33:86:40:31:65:d7:59:4c:27:9d:76:ba:2a:
0f:ed:c4:6e:43:4b:a0:7a:c8:61:71:25:b3:bd:6a:85:fe:90:
30:d9:e0:3e:a0:55:19:bc:9e:5a:48:ed:e6:9e:07:0b:6a:f5:
52:e2:dd:c6:25:cf:ae:b7:05:d4:1f:28:2f:30:e3:ea:e0:bd:
42:8f:f5:56:64:55:ad:2e:fd:f0:8f:3c:f7:20:ba:42:7a:d0:
f7:d7:00:59:3e:45:b2:3d:47:65:8f:55:d5:f4:2a:fb:aa:60:
d5:dd:f3:11:b0:52:35:9c:92:a3:bf:3f:6a:70:c7:9d:57:88:
8e:cd:73:f7:ae:b3:ae:1a:2a:9b:ba:3b:8e:9a:52:7a:e9:fe:
9f:80:13:98:33:d3:b8:a0:65:a3:26:e3:e3:b3:1e:01:7c:80:
f6:ec:53:53:19:70:30:ce:67:b6:62:b5:4e:76:f3:18:00:3d:
ec:8a:bb:75:dc:02:b6:a2:34:fc:d1:60:fb:a7:c0:00:be:b6:
64:a3:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:37 2025 by rpki-client