Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa
File: 9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa (raw, json)
Hash identifier: ZCDJw/VeMS9VxO5L3gE5wTcshvUSIkZOhpAphsIYhUg=
Subject key identifier: 21:B5:45:4C:BB:A2:52:E3:9D:A7:65:9B:F3:CE:12:F3:8D:1F:08:70
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F432858486D904F36E9376E4CB90DD400
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 53927
IP address blocks: 139.131.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4f:36:e9:37:6e:4c:b9:0d:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=759da677-c4ee-4d36-8021-b09bfb1fc537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:da:f0:76:af:16:27:dc:c4:b7:4f:2f:bb:
3a:fc:68:1f:7e:38:9f:6f:85:28:3a:c9:02:52:2a:
71:f0:0a:c5:2e:ae:7a:39:2b:e4:9c:49:2d:a4:b7:
7c:a7:49:87:24:1f:5f:29:4b:77:75:2b:1b:25:e3:
73:1f:46:95:e6:56:d2:94:40:f4:f3:57:bd:cd:af:
90:c9:86:98:26:66:c5:7f:0e:4f:cb:b9:43:3b:6b:
40:24:e4:7b:a5:77:a9:56:2a:3e:97:dd:b4:73:2b:
76:7f:a5:94:6e:f7:44:00:88:06:bc:2a:cf:a7:e8:
60:a7:d6:ae:c4:7d:46:7a:f7:0b:9e:a8:2e:ce:17:
0e:2f:5e:e1:46:6d:37:29:8e:aa:4f:f2:ae:fd:64:
8c:86:96:36:19:74:ce:06:87:57:fb:84:52:11:6e:
c9:98:c9:b5:44:5a:8d:90:d5:a4:a6:05:c9:7d:b5:
02:89:dc:0a:24:13:b0:e7:66:49:1c:67:14:f5:23:
76:f9:75:96:c6:04:17:74:1b:19:dc:05:fb:b1:23:
b2:74:75:3e:66:16:0f:8d:aa:6c:67:3f:bc:b0:e5:
e8:ae:8e:42:f1:6e:30:18:e4:2d:49:69:d2:3d:17:
20:1e:ef:b8:63:59:f9:c9:18:ef:76:94:80:bc:28:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:45:4C:BB:A2:52:E3:9D:A7:65:9B:F3:CE:12:F3:8D:1F:08:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
139.131.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:65:c0:56:d0:42:51:09:4b:d8:6c:4c:01:78:db:3a:a7:a4:
01:35:00:ca:1b:fa:43:a9:5e:d2:c0:3f:21:e1:db:6b:de:72:
50:5d:46:f2:a2:4b:95:b6:82:71:7b:3f:f3:e7:32:24:fb:95:
67:a2:9f:63:62:8b:9f:ed:e7:f8:4e:70:34:48:1b:0b:6b:cb:
21:e3:0b:ae:92:b5:ff:06:64:9a:fe:42:eb:ea:7e:11:b0:2b:
9c:39:38:60:1e:91:20:4e:4e:4d:98:90:81:3a:62:2e:34:bd:
51:88:0c:51:6e:e2:53:61:00:1a:6b:c3:fe:25:1f:df:b8:89:
4a:ab:f7:b9:39:b1:34:c2:a6:46:ad:97:41:cd:29:37:06:63:
bb:9d:10:5b:ef:6b:dc:e2:88:fc:fb:a8:2a:9a:00:8a:bc:08:
47:6e:75:4d:0a:73:9c:71:28:ab:78:0c:67:71:e4:cc:55:ef:
bd:c8:d9:ac:a2:f9:d7:4e:3f:2a:f7:0a:10:2d:8b:94:e2:73:
c7:1b:5a:1d:b8:05:87:03:b6:7e:ea:68:d2:f9:c3:c1:ce:12:
b7:f7:8d:06:41:a2:9c:2f:02:a9:48:3c:ca:93:a5:6c:f3:24:
dd:bc:f7:69:b0:14:2d:1c:be:05:18:c9:10:7d:f2:5b:63:ad:
3a:ea:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:59 2025 by rpki-client