Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa
File: fd19eca7-8757-38b2-8589-014c0ebec590.roa (raw, json)
Hash identifier: oLUTNcj4Wa7pVcdU9fJJ/Bkc7RCjDTk0aKMi9MBnnxE=
Subject key identifier: BD:11:0C:9D:78:A0:A5:76:CD:C0:59:58:96:CA:E1:83:0F:D0:8A:EC
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858487CEB3E3C78BFCC1B2AC4B7B0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 8069
IP address blocks: 52.122.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3e:3c:78:bf:cc:1b:2a:c4:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=23d4c11a-5883-4b30-8a5c-d6eb36b0ac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:c3:d4:c3:a7:cc:29:b3:36:40:8c:0f:14:
16:d6:7c:2f:aa:b5:a8:50:e2:ab:01:66:6f:fe:0d:
7a:10:db:05:6c:6c:00:d2:02:2e:ec:64:e4:0a:27:
6c:f8:b4:1a:d5:f2:da:3c:29:de:db:12:ed:ce:d3:
84:ae:7c:9a:3b:c1:0d:b3:52:10:49:0b:a0:61:a4:
aa:8e:d0:b9:05:cd:0a:c3:5a:0d:fd:4a:7b:64:a8:
93:7f:c2:a9:a7:90:9a:a7:4b:80:3d:51:1a:55:d7:
e8:15:ef:9e:e8:ad:fd:e5:07:c7:da:c1:bf:e5:cf:
51:6e:02:58:86:cd:05:1c:40:ce:fa:72:4d:7d:58:
dc:ae:17:82:96:52:8d:f4:45:be:f1:6e:a7:cc:b9:
f7:b2:75:5f:7e:e2:e0:39:d8:d8:4b:cc:2c:25:4c:
be:cc:bf:56:51:9b:7d:9a:1c:6a:c9:ac:83:51:34:
07:46:3b:7d:b5:28:e3:26:b8:61:98:81:96:ae:42:
cb:41:d7:44:f8:25:2d:6f:d8:e4:74:2c:5a:e2:f7:
fe:b4:f6:13:68:9c:b4:74:8d:a2:40:7b:b6:8e:f8:
57:21:5b:a7:54:1c:55:91:8b:18:34:29:b7:5a:c2:
76:6d:b8:55:98:f2:de:df:cb:0b:4b:56:e7:ad:3a:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:11:0C:9D:78:A0:A5:76:CD:C0:59:58:96:CA:E1:83:0F:D0:8A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d6:e8:d0:bb:bc:f7:72:51:4a:d3:0b:68:62:88:63:bd:aa:
58:2f:a7:10:0d:f5:2e:87:2f:1e:4b:3c:ce:bd:92:e2:da:f1:
b4:e1:92:88:50:3d:c9:d9:f5:93:88:26:48:cb:20:0d:a7:f6:
ec:8d:6b:56:ab:b8:3c:31:3e:6e:86:be:bd:21:78:32:10:9b:
f1:6a:26:a9:3f:eb:ce:79:b4:a7:0a:b4:94:d2:e6:6c:02:36:
2d:e4:32:ed:bd:9e:83:06:ce:a3:fe:4a:cd:2e:85:d6:a8:68:
8e:d4:84:f2:17:96:eb:d6:c7:9d:28:62:a4:3b:53:76:69:8f:
05:45:dc:39:5d:ac:51:19:dd:d8:0e:50:09:19:b2:f9:95:e2:
2a:d5:46:cf:2a:70:4c:41:c6:f9:63:9d:c0:69:a7:7f:0d:f5:
ae:86:10:bc:2c:5d:5a:49:08:9b:b0:5d:a5:bd:7d:90:d8:81:
4a:ff:f6:37:b1:d7:19:8e:eb:94:2e:e6:a9:99:dc:e7:81:7c:
ef:34:91:46:c4:68:67:8c:dd:8c:7b:eb:0b:e3:0e:0c:1b:20:
fb:e9:ec:54:15:49:93:11:14:b3:f3:dd:43:f0:3f:8f:d4:c7:
89:54:ef:e2:3c:98:8c:48:7a:5b:1a:12:e9:c0:4e:00:7f:68:
d6:03:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:05:15 2025 by rpki-client