Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
File: cd0060f5-e37a-3324-8658-1489af29e5de.roa (raw, json)
Hash identifier: RXqAHNAEvo1SWFA/CxMQ7JPVcpOZaiFRWrn0BUvjOyU=
Subject key identifier: 56:5D:D0:E2:06:E1:FB:30:CE:1F:F9:CB:48:8D:22:F8:08:DE:B9:10
Certificate issuer: /CN=2805bc8b-434a-454a-85db-2fe9075e8548
Certificate serial: 010D0C9F432858480644FD9BD79DA15E4AC4DD00
Authority key identifier: A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 397299
IP address blocks: 139.60.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fd:9b:d7:9d:a1:5e:4a:c4:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805bc8b-434a-454a-85db-2fe9075e8548
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=2db706ae-1e24-4918-b4a2-793b0bfede29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:06:da:e1:8a:40:db:7a:2b:a6:64:8d:7d:
ff:40:b2:51:74:36:14:7a:ed:c9:51:21:ae:13:6a:
9e:e8:ac:7a:70:37:c1:5a:a3:9f:a1:88:95:5c:35:
d2:7d:e0:8c:74:80:15:a3:35:16:53:06:75:cc:36:
51:33:4e:5b:56:a3:e2:89:19:1b:98:24:57:d0:6e:
f8:06:c4:0a:77:92:ab:ab:8d:79:24:54:dc:60:73:
27:e1:f9:ba:64:a0:26:36:8f:fc:20:7d:43:a0:24:
30:76:3b:06:22:7c:8f:6e:b2:ff:08:3a:d7:18:93:
38:66:bc:ba:6c:cd:b9:e3:b8:fb:26:d6:b9:06:03:
e6:11:ef:22:83:84:60:90:bb:3f:d8:52:bf:b1:d5:
20:32:35:b0:c2:8b:65:d4:6c:6f:c3:97:11:52:a4:
03:80:c6:b8:47:d2:ee:2a:fd:d1:3f:d2:53:bc:25:
b6:93:96:6f:a2:88:1b:63:f7:74:0c:42:93:1a:1f:
0d:e5:37:c3:a4:10:e0:ea:0c:8b:09:68:81:4c:12:
5a:c9:1d:0c:a1:76:d4:b5:5b:01:64:17:86:a1:22:
38:46:e6:c6:43:4f:ff:67:1b:d4:2e:be:01:bd:34:
ad:1c:c4:70:29:2b:b4:be:0e:b7:9f:ce:46:8a:9b:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5D:D0:E2:06:E1:FB:30:CE:1F:F9:CB:48:8D:22:F8:08:DE:B9:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/cd0060f5-e37a-3324-8658-1489af29e5de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548/2805bc8b-434a-454a-85db-2fe9075e8548.crl
X509v3 Authority Key Identifier:
keyid:A9:BD:15:5C:FE:78:57:EB:CA:57:76:C9:52:5F:F7:57:BC:22:DF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2805bc8b-434a-454a-85db-2fe9075e8548.cer
sbgp-ipAddrBlock: critical
IPv4:
139.60.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:ec:02:bf:9b:da:87:9e:c3:c1:ad:39:99:4a:16:b6:ad:21:
8b:1d:23:02:0d:5a:70:2b:6b:ed:09:4c:c9:ea:11:5e:c9:81:
f0:e7:bb:28:9e:8a:97:02:e8:e7:25:b7:44:ef:1a:16:c1:d4:
86:60:24:00:b1:8b:5d:f9:98:7e:7b:a7:71:19:36:0a:3d:cd:
98:ed:f3:db:4d:78:6e:2a:99:09:e6:fe:e2:15:f6:6a:7c:5b:
a9:fc:ff:02:01:85:65:d8:02:3f:99:00:e4:02:ab:41:26:e8:
8b:17:f2:59:59:90:11:ab:61:01:d2:b0:5d:c8:48:40:2a:73:
55:21:e8:ea:63:c2:0b:3e:ac:b9:9a:7f:4f:2c:65:2f:71:d5:
e4:92:9e:60:b1:d1:41:8c:c2:ae:a5:2e:aa:79:3f:07:a7:08:
ac:9d:90:7f:db:df:33:c7:67:05:53:6f:25:5d:4e:ed:cb:b8:
60:65:33:7a:aa:c5:6f:bc:ba:ac:c9:06:e3:5b:92:da:15:84:
86:a8:65:57:8a:67:b7:20:27:2b:31:2d:91:31:43:b7:4f:fa:
22:f3:68:74:4f:66:0f:c5:14:e4:92:01:4d:39:52:ba:40:cb:
1a:6c:02:90:b3:48:68:ee:da:5b:2b:d3:fd:6f:66:43:98:70:
67:e6:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:46 2025 by rpki-client