Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa
File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json)
Hash identifier: g8j77rqXOD9km+bXqbXkX4z01Xi9u2XXNPYiMvn3Sww=
Subject key identifier: 63:7A:7C:10:DA:02:84:22:8B:6F:D2:DE:E3:B4:2A:C2:3B:F4:83:B1
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584855D5A3887A699BF2EBB838B0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 8069
IP address blocks: 52.122.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:a3:88:7a:69:9b:f2:eb:b8:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=7bd46774-ef44-4a97-961c-2866173da09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:43:35:ce:9f:97:44:88:ce:68:9a:c8:bc:
a1:3a:ae:0f:63:ba:43:70:15:31:d1:ee:ce:66:ba:
e4:15:ec:c9:4b:09:e9:b9:29:c6:aa:3b:f2:d4:12:
9c:b9:ad:bd:7f:00:a2:10:2a:bd:1c:1f:a7:da:a5:
45:44:dc:6a:9a:3a:71:b7:c4:bb:4f:1a:33:78:d8:
bf:7c:48:0e:d8:47:44:f6:24:eb:f1:d6:50:eb:f1:
8b:6b:dc:1d:14:a7:48:c0:12:3a:10:9d:a2:b0:94:
2b:64:38:c7:cf:24:b1:04:f5:fb:f0:79:23:b6:a0:
79:97:16:c4:cf:e9:92:ba:32:96:cd:77:fd:56:89:
34:e6:37:8d:dc:8c:26:90:1e:e4:ba:55:75:92:cf:
b9:4b:d2:a0:85:43:86:ab:41:3b:4b:34:af:b1:10:
d0:ce:c8:bb:11:bd:03:f9:66:09:f9:8b:0a:76:1c:
46:d1:fb:ff:16:1a:80:c0:a6:7e:23:29:93:31:15:
11:4e:46:61:cd:0c:72:7c:aa:4c:a6:aa:f3:4f:f9:
1e:5b:0d:c2:e3:69:c9:27:c0:a9:57:3a:b6:9c:cd:
0d:9b:0d:66:60:dc:39:28:6f:86:0c:96:a5:bd:97:
e7:11:5a:19:ef:40:5f:35:8f:40:be:de:66:01:10:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:7C:10:DA:02:84:22:8B:6F:D2:DE:E3:B4:2A:C2:3B:F4:83:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:fd:7e:ac:39:7c:7a:01:9a:a8:2c:23:10:78:c7:0c:e9:eb:
61:60:6c:52:61:4f:61:c5:57:6e:14:66:a3:7e:1e:02:1a:d2:
38:e0:1e:5b:f0:d9:16:db:29:28:72:f7:61:5e:0e:a1:eb:21:
ca:b9:7d:5c:5a:26:2f:5f:1d:ef:05:5d:34:dc:58:b2:af:75:
76:2a:3f:36:0e:44:a6:44:60:ef:c8:3b:c7:a6:ff:b1:99:e6:
c1:d6:34:64:dd:65:16:9b:fb:c7:38:8d:34:0a:69:73:2f:81:
89:5f:43:8f:7f:a1:b7:60:92:92:1e:f3:ac:f3:0c:d5:fe:87:
39:ef:f3:a2:77:f9:c4:d4:89:52:17:7a:6e:e4:41:dd:ab:96:
ef:b6:9f:67:9b:c5:53:ef:78:38:8d:23:6a:21:e3:4d:d1:fa:
60:45:d8:c9:44:3d:7c:49:0f:ee:7e:d2:b5:38:1f:ca:e5:5a:
58:7e:1f:cf:43:73:20:71:5c:92:aa:04:87:e2:fe:76:cd:22:
f9:e7:42:ad:9e:72:30:d5:0b:4f:92:f1:d9:5b:a4:56:fe:e6:
75:dd:62:e4:92:ba:42:fc:23:4d:80:d4:fe:e9:67:c0:82:6d:
5c:f0:ce:fe:3f:e3:ae:62:d7:17:11:29:88:e6:db:b1:0c:46:
5e:c0:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:32 2025 by rpki-client