Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa
File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json)
Hash identifier: O4IJpgRBA/JvFugiGdAS7jsjIGgMkHay/O1OIBpFT00=
Subject key identifier: 41:49:9A:A1:BC:1B:3B:AD:74:76:DF:0A:EA:6E:66:77:5E:81:17:AB
Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902
Certificate serial: 010D0C9F43285848530AE9DF8AE5A4F5AB3C6180
Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 397026
IP address blocks: 139.64.168.0/22 maxlen: 22
139.64.168.0/23 maxlen: 23
139.64.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e9:df:8a:e5:a4:f5:ab:3c:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=2d3aaaa9-bc44-400a-b76d-ed80597d38ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:18:b0:81:63:3b:c3:22:af:7b:2a:d3:a6:
35:16:cb:c4:eb:89:22:fc:02:c1:34:97:c3:3b:00:
57:fc:f1:6d:0b:e5:6b:39:8a:3b:1d:a7:fd:d2:c4:
ba:40:93:cc:1f:3f:ec:bc:0a:8a:87:4c:e8:40:04:
7d:3b:a5:d1:58:9d:81:53:15:26:df:92:03:6c:5e:
6a:45:29:10:aa:8d:01:fc:2d:73:26:8f:bf:4e:b4:
e0:c0:73:02:5e:71:8a:7c:17:f7:8d:96:95:17:c2:
66:27:85:bd:6b:f5:72:3b:35:62:18:24:fb:a8:98:
d2:36:21:26:96:e0:d9:f4:54:33:92:9e:db:24:1d:
a1:5b:1b:58:74:83:d4:c4:ce:9f:16:52:f8:46:0b:
be:2e:58:0a:ee:45:08:7d:68:ae:77:bd:b2:0c:a8:
48:70:cc:57:3a:c4:47:8b:1f:46:2b:06:18:42:12:
6c:aa:1d:18:5e:3b:09:8b:41:cb:99:aa:f6:93:02:
33:dd:20:df:4d:40:cf:f3:d5:ec:98:46:75:e7:17:
78:6e:c2:c6:0b:f9:bf:54:50:fc:e5:d3:86:32:5d:
1b:d7:58:ae:6d:4a:78:25:36:a2:f2:03:73:2e:5e:
61:8e:61:3a:3e:c4:e3:d6:bc:0f:c9:bc:c4:2a:ca:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:49:9A:A1:BC:1B:3B:AD:74:76:DF:0A:EA:6E:66:77:5E:81:17:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl
X509v3 Authority Key Identifier:
keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c5:88:b7:e2:02:d9:ce:b3:f2:86:92:6f:a6:34:45:19:cb:
1c:88:6e:2a:3f:10:8d:3b:84:b4:74:97:67:af:ab:99:60:cc:
67:d5:3f:08:d5:fb:f0:8a:f8:ee:80:83:94:04:f3:29:b8:d2:
9d:64:9e:63:0e:27:9a:36:a0:ce:63:2e:c2:b3:56:71:98:51:
5c:ac:67:76:82:39:63:f4:2a:09:db:d5:64:43:fa:d1:76:6f:
3b:05:f3:43:78:3d:3a:1c:59:25:7d:57:e4:e3:4a:1f:01:c0:
de:aa:4c:dc:65:a2:ac:d2:b0:4c:50:f6:6a:cb:ac:c5:86:2b:
01:a7:ad:e0:b0:11:67:5d:08:31:6f:75:36:73:b3:73:96:aa:
98:70:63:59:bf:8a:b7:24:18:57:3a:38:a3:c4:eb:02:53:91:
0b:c4:fd:2d:80:56:3d:20:62:09:0e:5d:49:0b:8f:d3:4f:9d:
9d:06:b2:b3:19:7d:0e:a1:46:41:09:e0:6a:77:a4:3e:a5:d9:
53:09:ca:d1:06:d9:d4:2e:ef:81:9c:fb:75:26:99:c9:72:f4:
a4:8a:2c:a2:3b:fd:f1:9e:de:e1:39:ec:bb:7a:66:44:1b:b7:
a6:07:6e:3d:40:bb:e5:a1:ac:5b:dc:0f:ab:10:92:80:1d:b9:
3b:ce:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:52 2025 by rpki-client