Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa
File: 5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa (raw, json)
Hash identifier: LCRFJ6MbP2BiJ+qq7iZMd90mWx8outxEekkh5fcYLmQ=
Subject key identifier: E5:84:0B:AA:AD:A0:72:13:53:F6:23:CD:F2:E6:60:3F:10:82:5A:62
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F43285848F65BD6D443DDB612846E72A0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 14618
IP address blocks: 52.129.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d6:d4:43:dd:b6:12:84:6e:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=4d284beb-9849-4b52-aeee-e71830ab8368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:73:fc:d7:81:b4:86:4e:f6:b8:ce:f4:96:49:
b1:27:0c:63:ba:21:7c:2c:b1:15:cc:4e:0c:5f:e8:
00:01:54:ea:b0:3f:63:7e:ac:99:95:61:1b:fd:de:
a8:63:39:bb:31:6d:5f:ce:dd:bd:ae:37:86:b9:55:
08:4d:7c:4c:08:dc:98:6c:59:e1:23:cc:e7:9b:d0:
24:a8:b9:fb:54:62:97:80:29:6b:b8:a6:27:a9:21:
48:c2:83:7f:67:2d:cc:b6:41:15:dd:9f:55:7f:05:
4d:bb:af:42:1c:30:82:8a:9c:cc:27:7e:92:e0:ff:
4f:8a:1b:ab:64:2c:f8:47:57:e9:ae:f7:ef:b8:2b:
20:fd:d5:24:0b:aa:00:2d:b3:74:f0:c2:23:73:ec:
8f:34:e8:65:c2:f5:07:26:b7:70:c1:dd:b5:ad:0c:
17:cb:18:d8:17:bb:62:3c:5d:be:40:19:67:eb:a9:
88:73:03:28:41:23:05:2b:a7:e6:e7:5b:27:6e:e8:
71:00:b6:3e:83:16:8b:28:dd:b8:a8:54:b5:97:fd:
67:f1:4b:e7:d7:1a:ac:0a:4f:e0:f8:34:b8:c8:92:
3d:6e:0a:b0:50:e2:0d:cd:fd:89:87:19:3f:e6:60:
42:82:ab:b4:2b:1a:c4:aa:f3:bd:ce:78:8a:22:55:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:0B:AA:AD:A0:72:13:53:F6:23:CD:F2:E6:60:3F:10:82:5A:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/5c609a30-0a85-3e93-a4cd-1d976048b9d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:0d:47:00:52:91:13:e9:b4:0b:14:0c:8c:3b:0d:cc:56:72:
87:d6:34:84:65:97:f8:e0:c6:11:d5:bc:19:9f:ce:aa:a3:39:
d7:cf:e0:bb:62:72:8b:83:f7:f6:e4:46:9d:61:2e:d0:82:9c:
0c:f0:bd:58:07:02:de:68:f1:b9:64:e5:6e:13:f0:9e:95:7e:
c6:2c:5a:2d:8f:d0:89:ca:c8:14:9c:30:8e:b0:78:fe:7e:cb:
0a:35:a1:d6:bb:8c:f5:b8:b1:8d:57:00:f7:da:45:87:29:d9:
fb:fc:b7:f8:bc:46:16:5d:2c:25:9a:89:4c:66:f7:15:e7:66:
02:a1:ab:ee:93:62:31:c2:59:c8:f5:70:fa:da:53:f0:d6:a0:
28:e0:6d:48:68:2d:3f:b3:db:61:78:b2:d5:34:a7:31:56:cc:
b9:9d:ec:d5:40:f3:95:7e:11:0a:86:df:e5:09:55:db:41:4e:
fe:e7:3c:07:3b:99:95:cb:ee:b7:cd:60:da:04:26:db:75:23:
3e:d8:77:4e:72:8a:5b:87:76:41:5d:7f:ae:7f:2a:94:80:d7:
0a:5a:66:0d:a1:dc:95:18:53:d2:a0:92:2f:63:d2:36:05:90:
22:3b:7f:ce:ed:a4:77:a0:4a:06:66:24:89:19:27:39:3b:e6:
b8:d5:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:13 2025 by rpki-client