Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/238dc678-ce0b-332b-9562-f74b9c0b467a.roa
File: 238dc678-ce0b-332b-9562-f74b9c0b467a.roa (raw, json)
Hash identifier: 2kZaVdmklbH5p5WmZjRAkaFTWZ8DwnqnJT9DJfF66mI=
Subject key identifier: 68:84:E3:06:47:DF:11:0A:1E:5E:18:D7:54:3A:46:35:05:62:64:48
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F432858491ED6D7D80750B481CE55E040
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/238dc678-ce0b-332b-9562-f74b9c0b467a.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 398712
IP address blocks: 52.128.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d7:d8:07:50:b4:81:ce:55:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=ba10805b-c725-4283-b51a-b1cc791ba955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:26:a4:ca:da:40:91:49:ee:ff:20:18:41:
9b:b6:4e:0f:81:de:38:f7:82:f5:d5:23:a7:3b:b2:
b6:3f:91:2e:16:1d:0f:ae:50:6f:ac:87:9b:4b:97:
08:d4:2d:77:5f:2b:ed:d7:66:98:0b:57:bf:7f:d9:
b8:c3:43:d0:c5:a5:f7:f7:2c:40:9a:d1:c3:48:87:
e0:44:7f:08:e6:f8:57:54:6b:23:03:dd:e6:3f:69:
3c:54:13:24:cd:ed:6d:69:d2:0a:35:0a:24:84:ff:
de:18:f5:e8:fe:ee:44:bd:de:63:50:d8:1a:f1:25:
70:2b:0d:ee:39:88:ae:64:27:66:4c:c8:2d:eb:22:
0e:1d:89:13:f8:22:dd:8d:81:b8:d7:70:6a:d5:d0:
75:c3:a3:80:bd:da:18:15:ac:f5:a6:82:05:87:ab:
37:5f:59:9c:5d:00:80:7e:6b:01:4c:b8:81:d0:e9:
7b:ee:41:34:3a:d9:f1:ea:f2:87:31:c0:91:72:e9:
99:2d:71:f5:23:b0:8f:eb:41:3e:77:46:45:68:8d:
70:7e:69:46:72:d9:e9:3f:58:a4:07:50:bb:4b:b3:
12:e9:a8:42:d9:62:41:c5:19:3f:cc:62:f4:a7:29:
a2:82:0d:cc:e0:0b:1d:1a:36:15:0a:b7:70:b1:83:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:E3:06:47:DF:11:0A:1E:5E:18:D7:54:3A:46:35:05:62:64:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/238dc678-ce0b-332b-9562-f74b9c0b467a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:46:fd:ae:09:91:b5:30:11:4c:ac:c8:9c:a5:58:b4:1c:01:
76:30:9e:b8:98:78:13:fd:26:60:7b:9f:a3:41:f4:99:54:07:
44:20:61:6e:78:74:9c:53:67:11:1a:28:71:a0:40:c6:5c:60:
64:5d:88:31:8f:de:40:5b:52:8b:ee:fc:c9:27:8b:e3:40:b1:
9a:60:22:42:61:b1:87:7c:41:78:57:36:ae:3f:5c:01:a8:76:
59:f5:97:f9:0f:78:cd:ba:96:29:a7:9c:9d:95:16:1e:bb:76:
33:17:c6:d6:7a:e3:40:62:84:87:f9:30:58:3d:ff:7f:e5:46:
f4:2b:94:ac:b1:bf:15:de:3e:be:4f:6f:43:a8:3c:7d:e1:78:
01:15:50:52:ef:d2:c3:65:b8:95:21:89:67:ac:75:e1:40:ea:
50:28:bc:05:de:69:b5:ea:80:77:9b:aa:f4:6c:31:6f:0c:87:
30:1a:db:1a:85:44:d9:dd:9f:47:81:6e:c3:ea:da:2c:af:04:
98:39:a3:00:d6:87:9a:f4:ab:0c:33:fe:bc:05:9e:78:0f:8a:
37:12:0a:50:88:2c:68:4e:38:b8:85:e5:ef:26:ed:11:d9:25:
6f:bb:e8:74:be:1a:94:81:4e:41:95:3e:4b:a9:43:b9:20:00:
4b:5d:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:22 2025 by rpki-client