Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/a5f50612-4ed3-3a10-a7e7-924a2f984258.roa
File: a5f50612-4ed3-3a10-a7e7-924a2f984258.roa (raw, json)
Hash identifier: 0vjNIqfVvnptq+ECmQDvBXfdhJe8ZBCRFgNHNibsCIE=
Subject key identifier: 9A:D2:35:B9:16:74:AF:30:8E:64:88:4B:02:83:0A:73:2E:52:E3:E9
Certificate issuer: /CN=9f007560-e50b-4110-8b41-2c958f05b1b3
Certificate serial: 010D0C9F4328584823954B51DB8A16D0F6A10580
Authority key identifier: 32:E8:BB:52:E1:4B:D5:8D:1B:32:47:D1:B3:E9:05:70:4A:F2:9A:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/a5f50612-4ed3-3a10-a7e7-924a2f984258.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 399019
IP address blocks: 141.193.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4b:51:db:8a:16:d0:f6:a1:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f007560-e50b-4110-8b41-2c958f05b1b3
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=69d690a5-652d-40d3-8c28-47a645d9a249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:4e:be:0b:30:29:3a:f4:99:a5:e8:6b:05:
e6:c9:b6:04:47:f0:40:78:c4:14:38:38:69:3f:2d:
23:aa:c9:92:40:07:83:62:bc:70:43:56:44:66:af:
c4:2f:b6:9c:b4:2c:66:aa:51:91:94:cf:c3:bc:cf:
1e:e8:f7:50:84:a5:10:c9:40:10:6f:c0:63:b7:76:
17:f2:80:50:75:44:89:2b:c4:df:4d:5f:b2:72:1d:
43:49:4c:bd:11:d4:59:d6:c2:c8:67:6a:51:64:71:
6b:04:cc:93:6c:f6:88:9a:b4:9e:03:c2:e8:62:e8:
5c:3e:49:d3:32:09:ba:a2:32:81:15:7b:1a:21:d0:
2e:e4:c0:b8:d0:44:6f:34:7b:2a:aa:03:41:38:a1:
ce:ad:cb:8f:e3:45:d5:a1:d8:84:79:65:7f:a3:d8:
7c:2b:09:93:0d:28:43:23:f0:0d:d9:32:69:79:31:
29:e5:91:4c:ce:f3:61:f5:59:be:ea:f4:a4:bb:0b:
e9:03:30:2e:39:28:5e:d5:78:6a:3f:56:54:22:66:
92:b6:4b:b5:84:14:dc:07:83:ca:8b:bc:bf:d3:3b:
25:19:46:40:cb:28:d9:5d:05:af:0b:0d:49:95:46:
ce:9a:08:e6:9d:ab:e3:aa:fe:62:fe:fb:17:a8:89:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:35:B9:16:74:AF:30:8E:64:88:4B:02:83:0A:73:2E:52:E3:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/a5f50612-4ed3-3a10-a7e7-924a2f984258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/9f007560-e50b-4110-8b41-2c958f05b1b3.crl
X509v3 Authority Key Identifier:
keyid:32:E8:BB:52:E1:4B:D5:8D:1B:32:47:D1:B3:E9:05:70:4A:F2:9A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:c2:fa:c7:b0:4a:b9:b4:20:b4:ea:73:4b:b4:d6:24:cf:67:
cf:87:df:03:b0:92:07:5c:0e:e7:8a:4d:8d:12:73:04:b3:64:
4d:71:15:59:f0:74:c3:0b:37:a4:a8:b0:20:30:95:e9:73:92:
3c:e3:4c:9b:6c:5f:22:b9:7a:88:73:26:4e:1b:36:cd:f4:e2:
97:f4:1d:c2:cc:0f:cf:ad:db:59:3e:53:55:b5:35:f3:51:61:
b4:0c:b1:af:dd:68:a2:55:d2:00:9e:6a:94:b8:0e:14:55:d5:
85:ff:fc:56:d1:06:0c:75:8a:c9:5f:83:ec:37:09:c6:5c:a9:
1a:84:ff:3b:00:3d:f6:b0:6e:5e:24:0e:68:26:1b:eb:42:76:
8f:88:34:ad:3e:24:c2:c2:97:db:29:22:d9:c2:3d:bf:79:e5:
da:19:20:a2:90:3a:70:9b:3c:5a:41:9b:69:c0:87:0c:c1:66:
2d:45:9c:55:e0:67:c0:84:b6:65:00:c9:05:9d:7a:76:fe:6a:
c9:d5:07:91:4a:dc:a8:7b:ad:04:35:b5:06:18:75:70:cb:7f:
6c:2e:6d:7a:33:c0:cc:17:a4:e5:ae:4f:82:57:b0:80:f4:ca:
3e:53:bf:94:0b:cf:38:06:5a:08:75:8c:80:64:4b:67:77:11:
74:e0:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:09 2025 by rpki-client