Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
File: 0400b87c-f24c-326c-a2a2-44c7961b7277.roa (raw, json)
Hash identifier: ierocmLmFf5UQFBMM2++vEY57WkVsN54GU2lYrYqiyM=
Subject key identifier: 19:E1:7A:25:E0:01:60:C4:E7:F7:A2:22:D2:7C:74:A8:9C:0B:9E:B6
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F432858491ED6DE1507694565F54C486F
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 399150
IP address blocks: 52.128.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:de:15:07:69:45:65:f5:4c:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=45c41e1c-762e-4617-9305-b12a1a5ce69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:8b:f9:1f:27:6f:5d:a1:6c:fc:17:70:83:
08:22:c6:fa:5a:40:fd:4c:ba:f9:75:7d:64:5c:42:
38:af:a5:89:87:b3:ce:26:15:68:0d:98:3b:5b:66:
cc:fd:36:18:9a:3a:e4:f9:c9:72:a9:ea:3e:ec:64:
76:04:7e:54:24:e7:84:6b:2d:b5:e2:53:a0:dc:29:
dc:00:33:98:ba:18:31:1b:d0:c5:2e:67:cd:8c:ac:
45:ea:16:5a:30:06:8c:2c:a6:25:23:10:25:29:36:
9b:d3:fe:90:95:fb:31:89:84:af:6d:9a:82:db:59:
5a:9c:b5:84:f6:59:e3:1b:a1:2c:df:5e:d0:1a:9c:
3c:3a:a4:19:04:02:31:ea:6f:de:d3:e3:eb:3a:94:
f7:61:d0:67:46:83:1f:dc:c7:e4:42:a5:ca:13:1e:
a2:8a:2e:24:93:51:18:7e:2a:a6:6f:c9:d6:f6:32:
e3:62:59:3a:5f:c7:ef:a2:d1:00:ac:c6:fd:fe:bd:
f9:da:d7:a8:fb:cc:83:ee:bf:72:22:32:f7:e9:e7:
9f:e9:65:b7:66:6a:b2:46:cf:f1:a4:ce:be:fd:b9:
79:8e:d9:2e:ad:d1:f8:ba:dc:da:ea:32:c5:76:3c:
05:72:79:e1:49:96:00:d2:6d:c5:33:bb:4e:ac:58:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:7A:25:E0:01:60:C4:E7:F7:A2:22:D2:7C:74:A8:9C:0B:9E:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/0400b87c-f24c-326c-a2a2-44c7961b7277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:c9:e7:ac:cf:3e:91:97:ef:f2:4c:83:27:f7:c8:f2:a8:ef:
df:8c:dd:ef:67:00:10:9e:fd:8d:00:e5:e4:96:f3:2d:47:2c:
d0:aa:e4:70:2a:97:0d:63:cb:29:0c:86:8d:58:ef:ad:c9:ba:
9d:53:56:2d:76:3f:46:e8:b2:06:df:fd:8e:98:5f:ed:b5:87:
8a:38:7c:b5:4c:06:2b:ce:10:c1:3e:f7:a5:0b:7c:09:c6:3c:
33:f4:1c:54:f5:f8:5e:11:3d:9f:ea:d3:48:b5:57:88:73:b2:
19:25:0a:ff:12:3a:8a:59:eb:11:67:50:41:9d:de:cd:22:37:
2b:96:e4:72:f8:c5:41:d1:36:85:b1:6c:c2:1a:72:b0:58:db:
f0:93:9d:a9:42:d0:1c:01:9e:9c:14:d9:03:be:1d:e9:9c:f5:
fb:c9:9a:06:38:26:b8:46:4f:06:8a:08:05:a3:b4:df:78:9c:
bc:4e:95:91:9d:29:1d:06:fa:b7:bf:eb:8d:13:5b:17:1d:31:
94:64:30:e7:ca:7a:f7:bd:f4:52:5e:fe:ca:93:28:2e:81:de:
44:f6:b4:0e:c1:39:f8:d8:f5:f2:78:64:b1:fa:04:1c:63:a8:
79:67:1e:31:18:75:cd:fa:84:cd:34:92:f7:e9:1e:74:a8:13:
a5:17:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:30 2025 by rpki-client