Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/fa664348-c6f8-3082-b883-eeddf7c01424.roa
File: fa664348-c6f8-3082-b883-eeddf7c01424.roa (raw, json)
Hash identifier: PZgwoQc5COCpP7PDz/528ru2LPY7AVnFgq4Ug6qow64=
Subject key identifier: 44:38:DA:B0:77:F9:26:FB:76:8B:7D:A1:02:A8:41:EA:74:00:2C:F1
Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial: 010D0C9F432858480644FB4F216A440CAC13B900
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/fa664348-c6f8-3082-b883-eeddf7c01424.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 6461
IP address blocks: 139.60.152.0/22 maxlen: 24
162.247.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fb:4f:21:6a:44:0c:ac:13:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=9f83c445-0c49-44f2-857f-8033a13accf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:1b:8c:a9:00:98:47:9f:5b:ec:91:66:25:
51:4c:be:1d:bc:c9:54:82:15:c0:1a:6d:79:b0:02:
61:d4:88:ae:b3:55:bc:29:30:80:31:c7:07:4c:67:
4b:b2:90:da:e0:b4:24:e8:90:3d:a8:ff:c4:50:e5:
b7:9b:6a:38:ba:c6:82:54:56:ee:a0:80:d9:8a:63:
31:55:bb:63:85:47:16:69:7d:0d:09:42:cb:cb:fd:
46:d4:bd:90:05:e2:8c:a2:b9:e8:84:28:73:eb:94:
22:f7:fc:4f:de:28:c6:d6:59:f9:0b:42:85:c5:dc:
13:6a:f1:f9:e2:a8:b0:db:45:36:e2:6f:b7:87:32:
e0:9e:bb:49:32:d4:dd:9a:20:9a:58:e3:c5:db:92:
c0:50:f4:bb:7c:82:b5:cb:4f:b2:5d:2a:1f:41:08:
5b:24:42:1f:f9:6d:31:f5:5b:97:d7:6f:da:37:f2:
6d:2b:62:00:66:16:0c:24:a0:a6:60:e0:5e:a1:cc:
0e:b2:02:6b:b1:a1:30:9b:f6:5e:c4:6b:84:e3:a1:
03:24:89:4e:67:7c:3b:46:1a:c1:f6:c9:26:cf:c5:
08:aa:67:6e:57:64:35:f5:f4:d7:ac:61:59:91:ef:
90:f4:7a:2a:3b:f4:4c:0f:fb:67:c1:25:4c:22:40:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:DA:B0:77:F9:26:FB:76:8B:7D:A1:02:A8:41:EA:74:00:2C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/fa664348-c6f8-3082-b883-eeddf7c01424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
X509v3 Authority Key Identifier:
keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.152.0/22
162.247.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:ed:a3:5a:da:8d:2c:f8:24:24:a8:f7:e0:13:49:6b:51:de:
42:04:e2:bd:2b:d0:c4:c8:5e:71:6b:e4:e0:91:95:d9:25:4d:
25:b4:80:e1:5f:b4:05:57:8a:29:86:fd:92:20:c8:32:8d:6e:
51:94:62:9b:6a:0d:92:11:80:b7:7d:ab:88:6d:3b:fb:82:56:
4e:44:2d:12:9b:38:cd:80:08:61:27:93:a9:c2:1b:c0:1d:88:
c9:ab:b0:d6:66:a8:00:c8:58:aa:3c:d8:f1:9a:a6:2d:68:59:
f5:88:6e:34:c2:0a:3f:b6:54:77:f7:3b:27:72:61:09:6c:bd:
a3:b9:90:eb:24:10:f9:c6:6d:74:8e:a4:be:89:97:82:0f:5a:
07:dc:85:fb:cd:5a:5b:9d:a5:d5:cd:d0:4f:8f:0f:6e:21:42:
fd:3f:01:82:1b:2c:7c:62:88:c3:b8:80:b0:f3:e2:16:6d:d1:
3d:5c:c2:1c:7e:7f:29:1e:87:fc:96:90:5a:84:fc:fa:9c:89:
ae:c5:87:67:dd:cb:ae:af:06:ff:da:25:27:2f:11:54:24:6f:
59:de:50:ef:cc:08:f2:59:24:5b:b0:f5:e1:4e:07:f2:c8:f0:
18:e4:e6:07:a0:86:2d:f8:bc:b3:ae:a3:1d:c4:5f:14:6a:2b:
7d:85:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:54 2025 by rpki-client