Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
File: 0a793ce5-2a13-3752-babb-d659187f1a1c.roa (raw, json)
Hash identifier: nSQ4e4J2FXyyjTCdre7NEgHRmJddUOiJsmJ2ToEnZ9Y=
Subject key identifier: 45:76:BF:97:50:22:57:04:C2:47:44:B9:EA:93:EE:02:7C:38:1D:0B
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F43285848494563F5DF1AD83FB1D90080
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 31898
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:63:f5:df:1a:d8:3f:b1:d9:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=d2bd3539-bbc9-430a-97b2-1169ad341a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:35:38:14:29:59:76:d5:a7:14:d8:6f:bc:
41:c2:05:2e:1b:54:3c:e5:57:6c:f8:10:90:f5:72:
e5:97:3c:4c:ab:db:41:32:24:57:c6:60:6d:55:6c:
62:bb:31:eb:d5:50:25:38:ad:ed:ba:fd:8b:3f:6e:
f5:44:91:ad:59:39:74:8f:8e:62:67:40:7a:38:95:
7e:2c:7e:b5:a9:b9:71:b8:38:47:93:e1:da:49:43:
92:bc:32:0b:42:07:c0:4a:18:95:43:9a:5e:3a:fb:
f3:91:2a:13:e1:4e:99:5e:c5:4c:02:0e:58:81:ba:
bd:4b:6f:df:de:f7:8e:f0:02:34:79:fb:29:62:2c:
ac:a5:0b:75:03:33:6e:f5:b4:4c:a4:dc:a5:7b:da:
9b:27:34:cb:d5:3d:6c:69:ce:56:4e:68:35:46:d5:
eb:6f:ee:a0:24:d4:1f:ab:07:e6:b3:51:6b:46:61:
3f:2d:e0:25:ae:6f:6e:e0:fc:01:67:82:44:f3:a6:
db:6f:9e:cf:4a:e8:fe:ef:c1:7d:43:5f:3a:4d:7d:
74:e2:e9:a4:f6:d8:9e:f0:00:a0:11:bc:fd:3f:32:
bf:35:6c:69:76:c8:eb:5f:bd:90:87:7e:9d:85:40:
02:7b:49:70:66:67:e5:91:3a:b8:3a:aa:98:6c:cd:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:BF:97:50:22:57:04:C2:47:44:B9:EA:93:EE:02:7C:38:1D:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:75:3e:70:4f:b7:d1:65:6e:7d:2c:9f:02:b2:ca:d5:c1:6c:
85:ff:ff:2a:37:d7:d6:44:ed:3c:ec:3b:09:75:85:6a:53:4e:
e9:e6:dd:e6:44:23:bd:2a:63:8c:fb:e3:9f:e6:05:7b:07:ff:
ec:ee:fc:4b:4f:23:bd:4c:b1:b6:7f:ae:b2:ee:ae:af:25:71:
91:b9:eb:1c:4f:5a:3f:d5:57:12:64:28:6e:93:4a:d8:76:ff:
44:3a:f5:27:c9:8f:f1:d5:ee:8d:ad:bc:73:00:fa:02:e2:09:
ba:6f:8b:f6:52:b4:19:65:50:2d:b5:52:05:e4:50:2a:d3:00:
52:90:0f:a7:d0:36:fa:8d:f1:a9:b6:65:f4:f3:56:5d:2e:56:
5b:40:e6:bc:91:71:0e:be:2b:b5:9a:48:11:88:6c:8d:9e:42:
8b:12:75:06:35:ed:6a:6b:43:b6:64:34:15:d6:2d:d3:04:e3:
92:b3:e4:65:b5:32:0d:61:8f:42:2e:5d:c3:3d:a8:85:63:7a:
f3:0c:6a:b3:fb:22:17:9c:82:20:13:08:91:94:48:f7:66:c9:
8d:c7:35:82:8b:b2:93:a9:10:19:75:52:04:90:8f:3f:18:98:
53:9d:65:ec:76:a7:21:74:05:dc:0a:3e:a2:dc:65:49:fe:7b:
20:d9:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:40:41 2025 by rpki-client