Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
File: 1f825b44-9c70-33dd-b03f-6d808154234c.roa (raw, json)
Hash identifier: PVNb2rF/eGW2kG9YyO7DY3TQc+IY3wvS/xyIGUq2XGg=
Subject key identifier: 80:9F:FF:83:68:42:DC:FE:2F:44:9B:72:32:56:CB:CC:4A:08:52:30
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584908817C17E93B7A425D55F640
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 7018
IP address blocks: 52.128.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7c:17:e9:3b:7a:42:5d:55:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=f7871cd2-d892-4fe6-963c-13290c21ba34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:65:2f:b2:c5:c8:7e:5e:ee:d4:ea:14:f1:
fa:68:36:8a:79:ed:c5:75:49:21:e9:51:29:51:38:
4b:61:3b:a0:a7:61:70:33:47:eb:39:d1:72:06:2c:
60:1b:cd:f8:b8:ea:69:c9:4e:34:b5:5b:98:9a:9c:
01:e5:1d:ec:6b:e3:77:22:3a:4c:75:0a:26:65:d2:
1f:9e:92:50:14:c1:80:c8:ab:a7:df:0f:2c:af:f6:
ee:24:f9:08:fa:39:60:d7:70:43:1e:01:d3:5d:05:
73:12:d4:f9:eb:a5:7c:e5:de:b8:c0:5a:37:e3:48:
33:c9:74:c1:50:b1:7a:c6:1a:60:1a:e1:cd:8f:3e:
c0:b2:e6:86:53:9a:55:cb:a1:f3:76:41:42:5f:a4:
16:91:97:4f:98:30:83:c1:a3:29:fb:28:09:a3:fd:
05:4d:59:ad:ec:8e:8e:e7:29:83:bf:3b:fc:ea:48:
2f:df:06:31:60:0a:ef:c8:4d:12:d8:fb:ba:dd:7d:
15:5e:d7:84:92:c0:ae:95:64:61:a2:b7:ef:0a:a3:
80:d3:72:36:15:af:bb:72:c8:eb:e2:ef:c5:34:a7:
19:3b:72:f9:c7:b6:f4:0c:8e:d3:d0:1d:39:a8:36:
a9:d7:b6:bc:fc:c8:d1:bf:0d:e2:f3:9a:32:3e:7d:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:FF:83:68:42:DC:FE:2F:44:9B:72:32:56:CB:CC:4A:08:52:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/1f825b44-9c70-33dd-b03f-6d808154234c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b4:54:82:30:85:e1:e4:c3:b0:24:19:ba:fc:a0:4e:ab:5d:
cd:58:d5:8b:8d:2a:b3:4b:0a:e6:74:a5:53:1f:bd:c6:7b:2c:
79:f7:52:92:09:73:6a:c9:79:77:77:e7:9d:46:1e:16:25:e9:
2c:1f:e7:e8:46:a0:b2:62:91:a8:cf:4c:20:c9:7e:ba:8f:6b:
65:98:07:5e:0e:20:bd:15:d7:59:22:6f:5c:21:78:96:03:9c:
66:0f:06:70:29:3e:9a:76:ac:11:f4:51:1e:5b:a6:67:0e:9f:
0f:c7:02:ad:bc:7d:65:63:df:f5:dd:1b:4d:9b:2a:59:d6:8b:
31:80:3c:eb:77:ae:27:36:80:fb:cc:16:34:6e:d5:2a:18:d5:
d2:d2:e6:61:3a:bf:c4:ea:11:18:63:4b:5e:82:c9:d9:6a:82:
36:6d:2e:e1:4e:3f:93:92:12:3e:20:59:4d:2b:1b:56:5b:3c:
27:45:12:79:0b:f8:9e:b0:95:56:6f:94:23:0c:b6:af:7e:25:
4c:a0:90:aa:9c:ff:21:67:09:d8:ab:e8:79:4d:d5:d0:41:2e:
0e:fa:61:bd:0d:e2:31:60:15:02:e3:19:8e:52:5b:69:6c:40:
c2:ff:e6:fe:32:88:3b:8b:39:2b:a7:79:e6:df:c0:79:d4:75:
57:d6:d4:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXwX6Tt6Ql1V9kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm
MDk0MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
Zjc4NzFjZDItZDg5Mi00ZmU2LTk2M2MtMTMyOTBjMjFiYTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpFlL7LFyH5e7tTqFPH6aDaKee3FdUkh6VEp
UThLYTugp2FwM0frOdFyBixgG834uOppyU40tVuYmpwB5R3sa+N3IjpMdQomZdIf
npJQFMGAyKun3w8sr/buJPkI+jlg13BDHgHTXQVzEtT566V85d64wFo340gzyXTB
ULF6xhpgGuHNjz7AsuaGU5pVy6HzdkFCX6QWkZdPmDCDwaMp+ygJo/0FTVmt7I6O
5ymDvzv86kgv3wYxYArvyE0S2Pu63X0VXteEksCulWRhorfvCqOA03I2Fa+7csjr
4u/FNKcZO3L5x7b0DI7T0B05qDap17a8/MjRvw3i85oyPn1phwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICf/4NoQtz+L0SbcjJWy8xKCFIwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi
NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvMWY4MjViNDQtOWM3MC0z
M2RkLWIwM2YtNmQ4MDgxNTQyMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy
MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk
ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1
NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNIDcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEW0VIIwheHkw7AkGbr8oE6rXc1Y1YuNKrNLCuZ0pVMfvcZ7LHn3UpIJ
c2rJeXd3551GHhYl6Swf5+hGoLJikajPTCDJfrqPa2WYB14OIL0V11kib1wheJYD
nGYPBnApPpp2rBH0UR5bpmcOnw/HAq28fWVj3/XdG02bKlnWizGAPOt3ric2gPvM
FjRu1SoY1dLS5mE6v8TqERhjS16CydlqgjZtLuFOP5OSEj4gWU0rG1ZbPCdFEnkL
+J6wlVZvlCMMtq9+JUygkKqc/yFnCdir6HlN1dBBLg76Yb0N4jFgFQLjGY5SW2ls
QML/5v4yiDuLOSuneebfwHnUdVfW1IQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:29 2025 by rpki-client