Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa
File: 38b33f03-0219-3173-a3b9-2bec231ab597.roa (raw, json)
Hash identifier: fvuUG+WvGfiPSXOa1FCchHOBYdWDAM4lorM35ZKJbXk=
Subject key identifier: C1:A0:9C:8F:56:91:3B:3F:02:D8:83:47:C1:E8:FF:32:65:0D:6D:16
Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial: 010D0C9F43285848CB16593118102C5A34E2EF40
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 52.128.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:59:31:18:10:2c:5a:34:e2:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=68274b69-a0d5-4879-ac5b-3c23781788c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:a4:4d:11:07:73:b2:da:37:bd:07:66:c3:
27:cd:7d:35:a9:f1:db:4c:cd:bd:ae:03:a4:4f:ad:
bc:cd:56:7d:42:c3:96:6e:49:bc:db:ea:bb:87:7b:
04:c5:ba:f8:bd:a0:73:82:63:1c:3a:bf:ef:bb:d5:
fc:ca:21:88:d1:f6:3f:bd:13:0d:73:ec:1d:5e:2b:
98:d3:f8:cf:9f:1e:f6:a6:f0:a8:bf:67:9b:13:b6:
3e:90:ce:85:01:5e:a3:ea:a0:c6:25:2b:b0:d0:a3:
00:d2:bf:4f:44:a3:fb:3e:ed:f6:12:ba:4b:f2:fe:
de:4b:da:01:40:c6:e2:99:e6:62:38:95:f8:c0:cb:
be:14:17:a9:67:31:bf:64:97:40:ba:cc:7d:44:0a:
22:31:43:15:7f:e6:08:65:ac:5c:6c:9c:2f:df:5e:
01:ba:50:d7:70:18:b0:41:e8:62:1a:30:10:9d:ea:
73:89:22:e5:2c:08:b2:37:80:b0:4b:67:42:14:c4:
bd:92:2b:ec:10:fc:ac:06:b1:fd:97:2f:a7:83:0d:
5a:95:c2:a2:a4:a7:1a:39:c3:82:12:96:ed:29:84:
6e:1f:a6:3d:73:d7:84:35:02:13:e0:c6:76:2e:18:
4f:a1:f7:61:eb:d7:b6:fd:e4:cc:aa:cd:eb:62:60:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:9C:8F:56:91:3B:3F:02:D8:83:47:C1:E8:FF:32:65:0D:6D:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
X509v3 Authority Key Identifier:
keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:2d:f4:70:58:45:e3:c7:9c:93:85:ed:ac:a2:5a:35:e5:0e:
32:70:7f:61:4d:1b:d3:52:93:d9:20:72:40:59:55:eb:9f:e0:
d5:b3:bd:f1:9b:93:bb:af:10:57:a9:8a:1c:d9:56:36:e8:c7:
8b:2f:2f:b1:67:90:dc:04:df:38:df:67:c2:74:7b:c4:e6:c4:
e5:55:d9:02:80:5f:11:dd:6a:3b:c0:ad:82:0d:1b:48:5f:39:
4c:c4:19:61:fa:da:e0:ae:7d:48:96:59:1c:5d:8d:73:c4:7f:
3e:d3:42:80:b2:53:df:e6:b5:18:bf:a2:96:70:81:46:eb:be:
f6:9e:9a:8a:ff:45:24:c8:ee:b6:5a:81:8b:44:05:78:cb:27:
b8:44:c4:d3:cb:15:d3:bf:e0:96:6e:78:39:af:f3:d3:21:7b:
e1:12:cf:8a:27:d8:d2:5f:4b:e8:39:cc:b7:b8:01:76:6e:e0:
6a:5b:7d:98:8c:0d:db:8d:12:14:fb:98:29:a1:46:d2:7f:18:
b0:68:b7:47:1d:cc:68:a4:ba:7f:86:ca:72:3f:f5:b7:7e:7c:
a7:61:d8:16:70:c9:8b:1a:ac:64:72:c0:e0:98:c6:10:d6:45:
ef:fc:86:0b:b7:73:b1:0e:44:82:de:e1:17:16:3c:a3:10:58:
7a:9d:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:00 2025 by rpki-client