Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
File: 571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa (raw, json)
Hash identifier: NvcrDR7EpIcuC2INTA3O5flNpueysWpSB/YQLQI3E2Y=
Subject key identifier: 52:CC:03:45:A2:B4:79:2A:87:A8:96:39:99:A8:CE:F2:7C:4A:7C:82
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F432858480BDA703C888773F646A32180
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 36351
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:70:3c:88:87:73:f6:46:a3:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=625d2e6b-697f-4f2e-bcae-bdc3a996a166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:15:09:06:1c:2b:5b:16:43:e4:74:44:32:
ce:74:62:50:fa:5b:e3:c3:54:f3:d0:20:0b:a8:a3:
3d:62:f2:77:c8:8b:2d:9a:1c:69:87:4b:84:f0:2f:
50:f0:d2:50:19:39:f5:3d:ef:0c:48:7f:51:0d:de:
aa:ec:07:24:bf:88:52:b6:15:cb:f0:73:91:4b:a3:
e4:d1:57:6f:8b:dc:67:62:34:e8:d8:05:02:5c:88:
b1:03:41:fb:bb:54:0e:38:f6:03:6f:43:13:3c:8b:
21:12:2f:a0:d6:bc:46:3f:e4:fa:f9:7d:33:e1:12:
2c:48:a9:69:40:18:78:9d:50:ab:f8:44:19:a5:5d:
25:7a:e8:72:00:fa:cf:bb:be:6e:97:36:4e:5f:48:
f8:6b:29:e2:61:c3:cf:9f:38:3b:94:39:19:5e:0a:
3d:d7:04:a1:54:89:a6:ab:35:3b:65:cd:55:a0:3d:
f5:46:d2:12:00:45:19:71:59:2b:cd:8a:cd:d7:f7:
02:52:36:cd:ee:95:f0:a9:96:a3:6d:d4:de:af:26:
bb:70:1b:46:71:2e:74:c2:4f:79:40:ca:c8:42:89:
52:38:7a:52:7b:e6:59:83:07:c0:6d:04:4c:e2:46:
94:29:62:fd:96:7e:10:06:88:da:d8:b8:af:53:9a:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:03:45:A2:B4:79:2A:87:A8:96:39:99:A8:CE:F2:7C:4A:7C:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e7:8e:94:ea:f2:80:6b:f8:b4:b3:fa:94:f1:3d:b3:01:f3:
44:c2:f2:f4:86:f2:0d:0a:52:3f:21:07:a6:fc:1c:bf:51:73:
f4:93:3b:8b:2e:7e:91:3c:34:48:3b:a0:74:16:38:95:59:60:
5f:db:83:8c:22:2d:d0:dd:c5:ed:30:5a:f8:6b:fb:60:d8:c4:
93:36:e9:5f:bd:e0:8a:b3:c4:d0:37:b1:c0:1c:2d:26:de:f6:
9e:09:e1:7c:f2:91:38:c8:f8:6f:38:05:35:8d:29:4a:59:dd:
a2:60:e7:70:6a:90:f5:10:17:a8:c8:1a:54:1c:53:6e:38:d7:
ef:ef:55:2a:3f:78:2a:48:90:9c:9a:a8:e5:a5:70:d5:fc:43:
76:87:95:83:73:bd:39:bf:3a:5f:f7:12:09:c9:38:a5:bf:b1:
3e:87:d2:9b:c3:fc:73:62:3a:35:5b:43:0a:cf:8a:dc:22:0a:
6e:fb:47:93:df:2f:f9:e6:34:42:e1:b2:ab:a5:9c:b2:b5:97:
45:23:8a:d7:34:df:29:4a:1b:92:91:27:a0:e0:9e:7b:1b:49:
e5:ff:fd:d1:8d:05:17:56:a0:3d:0f:88:2e:a1:f8:b9:b1:7e:
2a:a9:79:67:4b:5a:b6:a5:6b:d1:02:6c:56:43:b6:b8:0e:86:
97:dc:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:59:10 2025 by rpki-client