Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/5b108945-54d4-35d4-9bf1-52584b828763.roa
File: 5b108945-54d4-35d4-9bf1-52584b828763.roa (raw, json)
Hash identifier: JBA/dRXS0UZPXUtntBoPFjEW/thWPBfatAvkYuwPpQg=
Subject key identifier: BF:E4:21:B2:9F:41:79:E8:FF:4A:04:83:A1:1B:D9:EC:FE:D7:EB:8E
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584882809E095FB53FEC6FB33F00
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/5b108945-54d4-35d4-9bf1-52584b828763.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 3257
IP address blocks: 52.128.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9e:09:5f:b5:3f:ec:6f:b3:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=b8556009-07b1-42f3-b18f-870c2eac9be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:77:6b:10:7c:1f:ff:41:97:7e:86:8f:2c:
e7:e4:c1:7e:0d:c9:67:f1:a6:53:2d:86:a1:5d:e4:
38:df:1a:31:2f:21:5d:a8:cb:56:e3:02:1d:69:f0:
08:eb:c0:b7:f5:6b:f1:80:16:fb:e8:23:ed:b4:c7:
0b:48:c1:1c:55:9c:80:10:4b:c9:08:d4:49:bc:06:
c7:54:1a:e1:d4:24:be:9c:01:5e:9d:e4:31:09:85:
1d:77:00:5c:84:7e:b3:09:24:7b:79:1d:20:1c:6c:
d6:55:d7:54:41:f0:3c:a3:bb:54:94:a5:02:b8:2e:
e0:56:99:69:c1:fc:1e:58:39:72:42:23:65:7e:70:
dc:09:ac:6a:aa:b7:11:b3:2f:09:ed:eb:ca:eb:e2:
a2:1d:97:1c:89:23:e8:f6:0f:62:8d:da:60:ba:c1:
40:c6:6d:4e:db:e1:ce:48:12:ca:24:18:ac:23:83:
28:63:44:5f:bc:5e:9e:5d:80:ae:80:d4:43:70:4e:
72:60:53:3b:d0:57:d5:41:b9:f0:b0:14:58:60:1c:
59:67:d9:4d:8f:73:6a:44:05:11:90:63:1e:05:c6:
79:50:26:35:90:b0:a8:61:db:b2:02:b6:64:f5:7e:
3f:98:81:50:36:8b:76:fb:a4:3b:fa:32:55:a5:1a:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:21:B2:9F:41:79:E8:FF:4A:04:83:A1:1B:D9:EC:FE:D7:EB:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/5b108945-54d4-35d4-9bf1-52584b828763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:de:23:7e:a2:9b:c6:43:42:01:40:18:9c:31:57:5f:df:93:
79:6d:6a:f3:7b:fe:43:6d:34:eb:48:5d:9f:92:54:0d:80:dc:
fa:0a:55:2c:bb:fd:49:db:e8:b5:96:b2:1c:a0:fc:08:20:c8:
19:ff:d6:9d:94:a8:39:db:2f:ea:bb:19:27:b5:6f:da:ef:3b:
75:90:5a:79:e7:cb:4b:c8:6a:02:6a:0a:ff:7b:49:49:cd:19:
1b:0b:54:34:da:32:c9:7c:78:12:5e:e1:f0:b1:38:e7:d3:fe:
f4:9e:c0:5e:5a:35:f8:f4:bd:da:f1:9f:ed:70:4c:3d:c0:a8:
4d:8b:16:3c:82:8d:69:60:ca:1e:20:b8:86:4e:32:67:49:67:
40:b0:da:b0:7d:8d:9b:ed:aa:6a:0d:c8:5d:3a:47:f8:81:fb:
78:b1:d2:8f:e0:71:02:d6:2b:a2:90:3c:e0:ee:72:90:be:f0:
c4:01:d4:eb:3a:a8:c6:20:20:28:bd:b4:b5:a9:6f:45:fb:6d:
97:81:d6:34:3b:28:83:2a:5f:02:e0:9e:98:11:9b:9d:12:03:
d4:e4:b4:7f:26:c2:88:c2:5f:7d:b2:27:cf:c3:41:c9:ed:af:
5f:36:bc:11:7f:77:ca:6a:ee:6c:18:44:3a:34:af:9f:4d:86:
10:78:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:20 2025 by rpki-client