Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/f5ad0dde-a733-3deb-81db-42293449a543.roa
File: f5ad0dde-a733-3deb-81db-42293449a543.roa (raw, json)
Hash identifier: 7uYScmpx69eVE7UgMdQSf9fw5PboPQycdwX8zh9836g=
Subject key identifier: 72:7E:1E:C3:58:8A:52:3B:61:7A:8E:1A:F0:B1:04:E0:47:03:AD:AB
Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137
Certificate serial: 010D0C9F4328584851A5796155AA2D91D60F1228
Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/f5ad0dde-a733-3deb-81db-42293449a543.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 396052
IP address blocks: 139.60.128.0/20 maxlen: 24
139.180.232.0/21 maxlen: 24
198.17.52.0/24 maxlen: 24
208.69.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:79:61:55:aa:2d:91:d6:0f:12:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=3e0c5096-9dc4-4f3d-a78b-5e77a90fda11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:de:53:65:eb:d2:12:52:ba:64:f4:6f:ec:
fe:ae:79:50:9a:cf:fc:0a:79:8e:86:a1:d7:65:f3:
68:0d:fc:66:2a:39:75:be:c2:da:94:d3:27:91:53:
d3:53:04:ec:70:4c:22:91:73:06:8c:84:08:ab:c2:
1e:3a:76:39:d3:fc:f8:c1:2d:6b:d8:93:00:0d:3c:
4a:78:a1:6f:94:00:80:4a:29:fa:25:8b:e8:03:27:
d6:9c:58:55:08:4c:b4:43:9d:4f:d6:f4:9c:21:87:
cf:c3:d0:b8:65:b7:da:85:2c:09:3e:4c:0c:e3:51:
d5:aa:72:e9:57:ee:be:94:9a:fe:21:d1:3f:d1:78:
a4:f1:f9:3f:0c:6f:f9:00:87:2c:93:f4:84:c8:c8:
4a:44:4e:14:40:e0:25:76:77:aa:d2:b3:8c:68:84:
6c:38:1c:89:3f:0b:71:bd:d7:91:aa:60:20:d3:05:
da:74:18:47:9a:cb:b1:01:6a:d3:af:35:0c:6e:0b:
7b:01:48:cf:47:e7:90:c1:51:fb:33:33:b3:9a:ca:
bb:72:48:4d:1a:fd:e0:87:53:49:63:f9:1a:88:42:
6a:6a:f0:04:b2:16:7b:be:7f:17:99:0c:18:0e:92:
97:0e:ae:6b:78:55:80:19:d6:78:6a:8f:33:98:b5:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:1E:C3:58:8A:52:3B:61:7A:8E:1A:F0:B1:04:E0:47:03:AD:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/f5ad0dde-a733-3deb-81db-42293449a543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl
X509v3 Authority Key Identifier:
keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.128.0/20
139.180.232.0/21
198.17.52.0/24
208.69.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b2:90:92:93:41:d7:cf:b2:26:98:40:80:aa:80:eb:cb:44:
98:ff:b3:11:87:a5:fc:21:ee:4d:7c:82:aa:b2:c7:1d:5f:9a:
29:eb:fc:05:52:cb:b0:64:f6:12:17:9f:7e:56:ec:de:5e:ac:
d1:90:ba:a7:f5:ea:47:7f:02:dc:cf:e4:6d:f5:d0:38:db:1d:
e7:24:54:fe:ff:a3:63:78:59:bb:e9:56:71:a2:4d:cf:81:ac:
94:6f:16:3b:46:ca:f6:65:21:92:3a:b7:19:6f:ec:78:47:e5:
12:b0:7c:61:34:37:d6:9f:e4:14:16:da:60:88:35:f8:aa:5a:
7d:49:c0:f0:2c:1f:a1:d5:c0:d2:93:28:91:bd:68:41:03:c5:
82:1c:1e:bc:4d:76:ae:f5:88:c8:a7:86:c2:1f:71:b1:73:a9:
de:43:64:00:50:03:9b:93:44:6b:2e:51:bb:ae:10:a0:d8:c0:
05:7c:83:71:1f:fd:1a:25:d0:6d:b1:7f:81:56:11:dc:43:03:
ca:b2:29:00:d9:e1:37:fa:ff:d6:72:e6:33:5c:e7:4a:9a:37:
58:77:84:2b:65:8e:03:ce:ad:f4:ea:40:1e:c8:28:76:8a:1b:
75:d3:f9:33:61:8e:b2:ea:7d:a4:50:da:b4:1e:31:24:13:43:
63:f3:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:21 2025 by rpki-client