Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa
File: 4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa (raw, json)
Hash identifier: E++ludHaDaWtRz8A3tosce3dLvqmWxVAQCX33rvKgqI=
Subject key identifier: 62:21:68:F4:5B:AA:9B:E8:98:C6:B8:5D:60:96:5A:20:94:E7:4C:80
Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial: 010D0C9F432858487325A8A2695B15819A032500
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 395301
IP address blocks: 139.60.76.0/24 maxlen: 24
139.60.77.0/24 maxlen: 24
139.60.78.0/24 maxlen: 24
139.60.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a8:a2:69:5b:15:81:9a:03:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=5a4e8fdd-48de-4ca6-b4d4-3c2892f32ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:cf:04:8c:db:77:39:5f:40:9d:c1:cc:0a:
d1:19:a7:fc:41:59:e8:3b:6e:66:c3:68:de:16:b0:
73:3f:19:26:59:e5:7d:19:06:ce:ae:6b:1c:ac:d5:
cd:4a:30:80:fe:e6:6a:8d:b9:50:93:a7:b4:03:c9:
b9:c2:14:ef:2a:c9:19:82:f9:24:80:df:aa:18:4d:
b0:a4:33:bf:fe:27:2f:e2:78:6a:f9:56:34:66:55:
68:d6:08:ff:14:72:09:e8:f3:bd:d6:35:d6:d4:d8:
b7:ab:98:a0:93:61:18:32:71:f8:29:c6:09:a8:61:
96:b0:ad:99:54:8c:e5:47:72:6a:6c:9b:a5:ac:00:
58:45:21:6d:20:6b:eb:53:ad:61:86:eb:99:3c:c1:
d7:f7:74:c8:3e:03:d9:fe:ad:ec:18:de:a8:be:b1:
c7:20:38:51:cc:99:d3:90:1c:4d:73:90:86:e6:2e:
b5:89:61:11:ec:9b:e5:ae:04:ce:ce:5e:8e:e9:78:
47:44:07:57:bf:f4:b0:d6:dc:c4:60:1c:33:33:7a:
8e:2d:98:dd:b6:3a:b2:fb:c9:08:f2:86:a9:7e:d9:
07:5d:67:0e:6c:66:46:b0:d4:35:c2:64:5c:fb:44:
5b:9f:54:cd:a1:d2:5b:b2:1e:10:3a:7f:c6:cb:69:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:68:F4:5B:AA:9B:E8:98:C6:B8:5D:60:96:5A:20:94:E7:4C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/4fd253a7-b02b-30c8-9608-8aa7c99fa54e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
X509v3 Authority Key Identifier:
keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:3b:61:15:0d:bd:58:ac:92:6e:d5:61:8a:cd:c9:f4:2c:2c:
1f:09:33:15:cc:0a:9f:19:09:9f:23:46:1f:3a:16:46:80:99:
b8:ee:f2:a0:4d:e3:6b:98:a9:6b:fc:ef:d7:55:fb:a5:f6:1c:
8e:60:48:a0:23:e1:57:d5:11:cb:98:8f:0b:77:e8:cf:2e:63:
65:6b:e3:53:85:68:8a:19:05:45:e6:df:56:26:39:a4:8b:65:
bf:53:c0:71:6c:82:18:cd:0c:f7:30:74:99:fb:fa:4c:f7:aa:
0f:6b:28:36:21:37:f9:d0:72:20:ed:f9:72:7d:a0:85:74:94:
67:9f:48:8f:e7:d1:19:a2:df:50:18:6a:66:62:16:bd:8a:85:
41:b7:74:b5:d4:c0:0b:14:42:fe:a5:f0:9c:f5:27:64:80:42:
7e:8a:d2:ca:8c:fb:10:a1:76:f6:f6:8b:1d:2d:2a:ef:18:e9:
5f:79:f3:53:d4:d3:09:48:bb:7a:28:a1:f1:63:38:29:a3:ff:
d9:d8:a2:86:10:4d:68:97:72:38:33:ba:d9:df:a5:66:c1:b6:
39:b2:34:25:f4:c0:19:b3:d9:35:97:bb:6a:53:88:d1:37:ca:
fa:45:04:6e:b2:bd:6b:b9:eb:1b:96:ce:80:74:54:2c:1a:be:
6e:b6:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:23:40 2025 by rpki-client