Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa
File: b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa (raw, json)
Hash identifier: BA2/vIFcvQ35NxxpHj4XxvlGAsWYjfsGpXjVbQ8KAEk=
Subject key identifier: C8:9B:0F:B7:5B:76:82:3B:50:4E:33:54:21:21:DC:43:B9:E8:AB:24
Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094
Certificate serial: 010D0C9F4328584908817C0B6A3AFD7694FCE108
Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 7018
IP address blocks: 52.128.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7c:0b:6a:3a:fd:76:94:fc:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=600caa92-ea85-409d-a2d6-7bcf80defa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:52:ab:2b:34:c7:96:1c:c1:31:de:5b:cb:
a5:a9:31:e8:40:34:dc:2f:e1:a7:54:92:03:8a:d2:
2a:fc:21:3a:77:35:3e:af:50:84:ca:cf:20:05:a6:
f7:a2:f7:10:2a:8a:4d:e7:37:48:9a:55:99:6a:64:
69:73:29:38:95:eb:dd:b5:65:a2:dd:ce:83:3a:35:
70:f5:09:2a:84:85:03:48:2b:17:b8:aa:17:c2:0d:
65:cc:c1:09:d0:96:49:fd:68:1f:5c:f2:49:89:5a:
6a:cd:b8:01:13:a5:26:7a:73:d2:9b:eb:a3:5c:74:
89:6c:7e:ca:a6:4f:88:60:f5:6a:39:9c:ca:a7:d2:
72:d1:c8:be:c2:0f:24:b2:cb:7f:fe:f4:54:fa:b3:
e1:19:2b:ef:d1:ef:4e:e4:f0:25:4e:bc:85:3a:56:
ea:9b:84:f8:8f:97:97:f0:a0:e1:90:47:26:95:f8:
36:f8:56:4f:05:37:24:9b:db:2d:67:d5:e4:ca:93:
17:5a:48:ec:77:a5:13:89:ae:82:ba:4e:a1:3b:05:
89:2c:f2:96:ba:ea:62:b7:6a:3d:ae:56:77:0a:6e:
80:4d:57:c6:f6:f3:47:7f:e6:e3:24:de:43:f0:0c:
5a:45:7e:9b:7e:ca:fa:b0:94:c4:fd:0b:17:1e:b9:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:0F:B7:5B:76:82:3B:50:4E:33:54:21:21:DC:43:B9:E8:AB:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/b9f890ec-03a4-354c-b5a1-ab1e39f1ae8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl
X509v3 Authority Key Identifier:
keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:1f:69:9b:94:72:a8:b4:fb:ee:2d:e2:d3:55:30:6c:5f:ab:
07:ae:ac:d5:44:ca:96:71:71:aa:ff:ea:5e:0d:46:8d:51:11:
50:b3:9e:36:17:88:c0:06:c8:e7:52:0d:b4:f5:29:8c:26:b6:
76:7f:3c:07:8e:eb:a0:ee:c8:f1:3d:da:30:b7:1e:19:b3:30:
4c:a2:db:5a:20:22:50:b7:94:19:f5:f2:ef:35:a9:e6:d2:03:
61:95:7b:d3:f4:cf:a0:ce:16:8b:f5:a2:b6:0f:97:83:76:84:
d2:e4:ac:d9:f7:9a:a1:4f:2e:ac:ac:6c:fc:e0:e3:1a:08:5b:
73:27:0c:0f:58:57:63:11:6d:f1:ef:f3:f4:43:78:f2:9d:72:
33:79:6f:1f:6b:09:bb:f6:4a:ae:df:dc:92:d2:9a:ef:2b:50:
9a:34:aa:00:df:de:c2:dc:16:39:fc:a6:8e:cb:7b:6e:7d:4f:
90:0c:ee:34:65:6d:59:e9:7f:f1:4e:13:e1:3d:b1:bc:41:a6:
92:0c:b0:32:c0:bb:9f:31:f2:c6:7c:d2:65:7d:4e:63:51:67:
1f:c8:64:0e:7f:b2:73:77:20:ca:00:43:e7:03:c7:a3:5c:3a:
99:bf:8a:dd:15:8b:87:09:ba:80:30:e7:f4:7b:b0:bb:a8:e8:
53:6b:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:28 2025 by rpki-client