Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
File: e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa (raw, json)
Hash identifier: X2MlXYVNj25SlAHERBROitf6Ae9OnvpE440mbY2ECj0=
Subject key identifier: 30:6D:6E:5D:83:0C:18:49:09:7D:C9:4F:F4:B3:00:A1:2B:0E:73:58
Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial: 010D0C9F4328584891DB31FC44F43D31EADE9CC0
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 400745
IP address blocks: 52.129.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:31:fc:44:f4:3d:31:ea:de:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=1b522c3a-a997-49d8-bc63-837d0f24d4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:12:04:6c:6a:87:ec:1d:40:e0:de:46:c7:
ce:7c:7a:0b:ce:2c:7c:95:0c:96:78:a6:1e:d2:ae:
6d:24:60:6a:8d:20:86:af:48:e0:aa:ec:64:bb:ae:
b9:50:83:c7:f1:39:6f:4f:a3:e5:3b:23:17:2d:03:
f0:34:30:9d:66:a7:4f:4d:73:45:52:39:69:8c:62:
f2:1d:7a:80:8c:0d:7d:6d:75:06:ee:a6:48:96:31:
1f:56:73:67:c5:01:a9:7b:a9:90:ed:c2:57:3a:07:
52:dd:b4:04:ba:c5:8b:95:58:75:fe:1c:68:31:7d:
e1:ec:b5:ef:b3:6b:d2:55:71:a2:40:f8:31:d0:9f:
ef:2c:da:d1:4b:9d:73:73:94:54:be:33:1f:2f:94:
97:d4:d3:d3:17:d4:9e:37:1a:1c:e4:36:c3:16:0a:
50:b2:db:cd:7a:a0:d2:9f:64:60:33:17:2f:4d:93:
96:60:60:0b:63:77:22:95:4f:3e:8d:3c:0d:4e:76:
34:56:4e:d6:be:e9:c8:7d:0d:4e:c1:0c:b9:9c:1d:
6e:55:61:df:48:8e:54:ec:63:27:1d:26:ad:d6:5f:
71:2b:59:3f:c2:a6:f6:c1:e9:cf:2a:57:6a:52:25:
64:f2:0b:68:f0:1c:86:01:8d:b6:e0:48:76:e8:0d:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:6E:5D:83:0C:18:49:09:7D:C9:4F:F4:B3:00:A1:2B:0E:73:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/e3e28819-9487-3fea-b5ea-b4f3dbb4f8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
X509v3 Authority Key Identifier:
keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:5b:d4:54:23:b7:cb:b6:7a:30:e0:90:1e:37:5b:c3:25:7c:
24:7b:a2:6d:b7:ec:b3:ba:5a:13:38:5d:74:4a:c6:46:05:f5:
94:b8:4c:c1:5b:0d:79:b1:06:3c:99:0d:21:8c:6a:2e:52:ed:
31:ed:f5:d5:94:3d:36:70:37:53:60:ee:bf:1d:9b:ba:49:62:
6a:4a:57:94:97:8d:09:7c:cf:1d:28:7f:a3:74:2a:8a:ae:78:
b5:c6:2d:f5:35:96:30:70:57:bd:1e:18:80:e2:82:b2:b7:37:
e4:65:dd:8a:8d:a7:c4:6e:39:89:ee:81:73:47:d3:03:ed:04:
57:84:97:89:a6:b5:20:ef:3c:d1:87:b7:9b:f3:b3:47:53:24:
c4:a9:1e:92:29:e6:57:2e:c8:85:74:cb:0b:e3:fe:89:a7:bd:
d8:f9:14:2a:aa:a0:3a:ea:6e:2c:6b:94:24:2f:06:fc:9c:6b:
31:8e:25:ed:0c:4d:9e:74:ff:11:a0:28:28:56:51:6b:78:94:
69:7c:62:5b:17:10:de:a0:e3:4d:39:9f:bd:81:ec:4b:30:20:
c3:69:00:27:9c:a2:af:3c:59:4a:67:bb:27:0c:21:5d:1b:a9:
9f:8a:7e:07:48:ea:ba:ae:d6:55:ae:c3:b3:59:b8:c0:27:3f:
8c:f9:24:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2zH8RPQ9MerenMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFlODU2NWItY2Q4NS00NDM5LTgxOGItMGM2NjljMWU2
MDlhMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MWI1MjJjM2EtYTk5Ny00OWQ4LWJjNjMtODM3ZDBmMjRkNGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX0SBGxqh+wdQODeRsfOfHoLzix8lQyWeKYe
0q5tJGBqjSCGr0jgquxku665UIPH8TlvT6PlOyMXLQPwNDCdZqdPTXNFUjlpjGLy
HXqAjA19bXUG7qZIljEfVnNnxQGpe6mQ7cJXOgdS3bQEusWLlVh1/hxoMX3h7LXv
s2vSVXGiQPgx0J/vLNrRS51zc5RUvjMfL5SX1NPTF9SeNxoc5DbDFgpQstvNeqDS
n2RgMxcvTZOWYGALY3cilU8+jTwNTnY0Vk7WvunIfQ1OwQy5nB1uVWHfSI5U7GMn
HSat1l9xK1k/wqb2wenPKldqUiVk8gto8ByGAY224Eh26A0r7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBtbl2DDBhJCX3JT/SzAKErDnNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MWU4
NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2OWMxZTYwOWEvZTNlMjg4MTktOTQ4Ny0z
ZmVhLWI1ZWEtYjRmM2RiYjRmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTFlODU2NWItY2Q4NS00NDM5LTgx
OGItMGM2NjljMWU2MDlhLzkxZTg1NjViLWNkODUtNDQzOS04MThiLTBjNjY5YzFl
NjA5YS5jcmwwHwYDVR0jBBgwFoAUOsOJIAQnBBq9oUI3wx3Tenbe2vYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MWU4NTY1Yi1jZDg1LTQ0MzktODE4Yi0wYzY2
OWMxZTYwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIENMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElb1FQjt8u2ejDgkB43W8MlfCR7om237LO6WhM4XXRKxkYF9ZS4TMFb
DXmxBjyZDSGMai5S7THt9dWUPTZwN1Ng7r8dm7pJYmpKV5SXjQl8zx0of6N0Koqu
eLXGLfU1ljBwV70eGIDigrK3N+Rl3YqNp8RuOYnugXNH0wPtBFeEl4mmtSDvPNGH
t5vzs0dTJMSpHpIp5lcuyIV0ywvj/omnvdj5FCqqoDrqbixrlCQvBvycazGOJe0M
TZ50/xGgKChWUWt4lGl8YlsXEN6g4005n72B7EswIMNpACecoq88WUpnuycMIV0b
qZ+KfgdI6rqu1lWuw7NZuMAnP4z5JKs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:13 2025 by rpki-client