Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa
File: 70f0d2e5-f571-34d1-a278-88605dcf02db.roa (raw, json)
Hash identifier: SQAb3Xf+/97U5g3bvR1VUygVu2MF2Ul/fMeFg7daZ8E=
Subject key identifier: 51:CB:DB:A4:91:7E:A9:EE:90:B9:F6:F9:6C:48:8D:57:8F:55:21:7C
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F43285848F65BD0093E7EBC5F4DB4BD00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16509
IP address blocks: 52.129.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d0:09:3e:7e:bc:5f:4d:b4:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=e7339a10-6435-4534-b18b-6740bdc23267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:0b:e5:1f:51:dd:70:6c:51:ee:ea:06:d6:
14:af:18:d4:59:f7:93:22:0e:3f:db:a1:7b:ed:1a:
23:6f:63:43:54:39:c6:a9:af:d6:5b:fa:fc:24:23:
9c:a1:e0:35:89:5c:df:b0:fd:12:f8:41:28:48:84:
81:07:b2:2b:88:9d:b7:c8:51:31:6c:11:09:a3:c5:
e8:05:7b:33:d0:ca:ae:c0:8d:51:40:b6:f3:98:d7:
41:9c:23:d3:dc:ca:82:83:ad:26:21:7e:e0:03:b8:
f1:5c:7d:59:a5:03:38:c5:1d:a7:4b:c2:e4:6e:eb:
80:5e:00:c1:87:5a:00:f5:73:91:d0:20:22:be:d4:
2f:dd:bb:da:7d:d6:15:ee:99:d1:8c:0a:90:5b:89:
7c:5e:2d:62:81:a8:65:ba:93:3a:c6:2b:cf:a8:9c:
4c:d2:dd:fc:db:f8:a6:2a:a7:5c:12:b4:a1:fe:d3:
18:0f:30:e3:6e:d3:f2:84:7b:f5:c2:e7:88:e2:8f:
b3:38:ee:cd:7d:49:a2:92:f8:7a:ca:de:c2:94:84:
4b:c4:bc:a5:64:b1:94:e9:1e:0c:3a:61:fb:0c:b8:
00:17:b7:56:fc:de:ca:9f:80:3a:65:7c:ec:17:a0:
16:da:74:dd:a2:2c:34:b5:d5:aa:2e:a3:c3:c8:74:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:DB:A4:91:7E:A9:EE:90:B9:F6:F9:6C:48:8D:57:8F:55:21:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/70f0d2e5-f571-34d1-a278-88605dcf02db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d9:24:e8:e2:0f:3f:a3:1b:81:d4:87:ef:80:99:05:8e:d4:
48:29:15:50:f7:f3:b1:c2:05:6f:bb:13:dd:3e:c2:e7:f2:74:
c7:67:b8:31:b3:b1:0c:a7:b9:1a:fd:a2:5e:f2:96:d5:c4:58:
37:3f:94:ea:c4:19:45:b0:b4:f9:3d:13:a5:71:bd:f3:5c:8c:
a8:35:ac:3e:e0:f2:17:d7:bf:f3:88:73:72:f4:07:cf:a9:55:
bf:df:97:11:a9:d2:14:36:13:19:b7:db:69:0c:67:99:08:2b:
6f:88:54:e9:a7:95:4d:57:83:96:63:5c:50:c7:ab:7d:38:cf:
0e:9d:87:78:ca:38:e0:7f:81:04:a3:66:61:e9:50:32:70:0a:
66:e1:6f:4e:04:0c:75:07:05:2a:8a:5f:18:82:69:a0:68:eb:
be:64:73:5c:6e:6b:38:be:82:b2:64:f2:32:93:8c:7f:77:f9:
23:ea:06:a7:60:68:0f:0c:03:49:3f:41:fe:28:26:16:8c:ac:
9f:f1:8e:6a:8c:43:19:b1:9c:c8:5d:ed:53:e8:3d:cd:5a:16:
f6:4e:c4:0f:e2:c8:4b:8b:93:64:0f:25:12:b3:04:95:ec:db:
4d:b1:4d:15:5f:85:03:88:b9:aa:94:73:b8:e8:56:f0:c1:52:
57:6f:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:11 2025 by rpki-client