Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/568e9f55-3a45-351e-9458-bac0dd3d3a9f.roa
File: 568e9f55-3a45-351e-9458-bac0dd3d3a9f.roa (raw, json)
Hash identifier: SIzp4x2F+n7wqFOWpI31e4yPuNYxopJb/ESKigvRX48=
Subject key identifier: 6C:92:9E:FD:A6:5D:97:A5:05:CE:EA:75:ED:12:85:62:AE:A7:9A:D5
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F43285848F65BD64DD5CBB90CB7CADA80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/568e9f55-3a45-351e-9458-bac0dd3d3a9f.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 14618
IP address blocks: 52.129.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d6:4d:d5:cb:b9:0c:b7:ca:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=f4834fcc-5b92-46a2-868e-d58c48c42aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:7c:fe:41:9a:52:c7:99:f1:80:12:2d:e0:
6f:9a:9c:b8:61:64:86:d3:88:e9:b6:52:08:fe:a4:
4f:ad:da:1c:d6:a0:2f:04:a4:b7:0c:33:f2:cd:86:
08:03:e3:ce:b2:8f:86:5d:63:78:96:e3:59:a8:5f:
01:da:94:89:8f:4d:81:b1:f4:ed:c7:7e:e4:45:f4:
37:4b:45:46:39:32:d4:6f:bb:3f:29:69:f8:4e:f4:
fd:09:04:71:06:70:90:2c:a4:aa:81:6f:95:ca:e1:
27:d1:46:e9:f9:ba:b0:a8:34:b0:60:83:a2:d0:a5:
4e:3a:89:a0:b8:f8:c2:37:00:b8:b2:92:99:75:00:
5e:d1:9a:e1:3c:00:b7:90:8e:ed:73:14:2f:3c:a5:
c9:45:42:8c:9a:f0:4d:1a:09:e3:a4:7a:5d:d4:37:
65:df:ee:e7:80:97:2e:7b:86:94:ea:29:03:fa:df:
8a:d5:0d:d4:08:ef:79:ca:51:0c:21:00:67:5a:59:
0e:c0:65:0f:b7:9c:f1:af:9b:42:16:1d:3e:43:18:
0c:fd:35:e0:cc:0e:ff:88:22:37:88:1a:44:dd:17:
98:dd:21:7d:2d:0c:e4:88:ce:17:a0:c4:8f:98:e2:
fa:d2:41:59:36:44:48:d7:41:2a:89:f8:b7:30:14:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:9E:FD:A6:5D:97:A5:05:CE:EA:75:ED:12:85:62:AE:A7:9A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/568e9f55-3a45-351e-9458-bac0dd3d3a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f7:6b:92:e2:7e:05:81:c9:0e:0c:cd:37:eb:2a:4d:8c:61:
fa:24:1e:f0:5b:55:20:b1:ee:2b:da:05:33:ad:a8:8d:ee:50:
e3:f2:50:2b:dc:63:5e:ed:1c:2e:14:3e:9e:d7:34:fc:97:3e:
45:15:d8:a0:c0:7e:c2:67:a3:0e:e0:f4:34:2e:ee:34:5f:c6:
f5:5e:ac:da:67:65:42:d2:0f:ef:ab:a7:6d:97:de:35:07:1d:
0b:c7:68:2f:e7:af:d5:d8:59:5e:46:13:16:0e:e5:f5:ad:86:
a2:a3:3c:18:9d:fb:e2:83:e5:07:39:a3:5f:d1:af:bd:ec:54:
4b:cc:6f:dd:6c:fb:97:b9:a1:76:4e:18:fd:50:e3:14:38:79:
22:0c:99:5c:fd:38:42:58:ee:cc:10:c4:9e:e9:dd:c6:de:f3:
ac:25:5a:87:b2:72:0e:7a:8d:15:91:eb:27:a5:68:3f:fc:40:
88:33:66:22:71:67:55:fb:e8:08:09:59:26:e4:2a:b2:e7:29:
b7:ce:da:a8:12:0c:bb:65:2a:4a:84:97:b5:84:b8:04:b1:f0:
c0:7d:56:9e:7e:c5:79:c9:f6:ee:5b:9c:d5:7f:03:ec:08:6e:
8a:94:5a:5e:d9:77:85:4e:e8:91:19:a2:80:25:ed:fe:f0:49:
bf:47:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:13 2025 by rpki-client