Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa
File: dcd6626c-1861-32f9-8607-92a02a22b123.roa (raw, json)
Hash identifier: ig3Xu5eqr1BJWYkZOE+stD6l6RgVQNZaxs3kyhxYPCg=
Subject key identifier: 7D:D2:12:34:55:2B:CB:CE:7A:90:E9:94:F0:AD:7E:99:32:DF:33:2E
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F4328584819CFCD6AECB1E6AB3F46CF00
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 399107
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cd:6a:ec:b1:e6:ab:3f:46:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=1b1f66d5-deb1-47c2-9fba-1a33f361d667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:f3:87:b9:9f:b9:bf:61:44:ed:19:14:ee:
3f:0c:6d:0b:fc:c6:02:23:be:0b:ce:7e:39:30:79:
4c:86:3f:9b:74:c4:52:ad:0f:9d:55:17:fe:39:2e:
9b:c8:4d:e0:49:0e:09:e9:42:c1:47:7e:0f:ec:16:
42:70:a7:da:54:07:66:1b:ac:ac:e8:d2:9b:7b:b3:
e8:b2:46:ae:20:ae:ec:a6:e7:94:84:09:2c:cd:eb:
7c:20:6c:6e:46:e0:f1:0c:e5:32:4b:41:fc:42:e5:
f9:13:8d:a2:cd:a1:75:6a:1d:bf:71:e5:a8:fa:a6:
86:25:95:50:93:3f:2f:71:56:20:49:4f:ec:81:8e:
d3:34:0e:ec:46:a5:dd:ba:10:c3:2a:d0:cc:2e:a1:
29:82:eb:5f:09:3a:06:e1:6c:4a:98:f2:27:22:16:
ae:f6:47:20:3f:f2:d2:aa:25:14:dd:cd:6a:85:d1:
a6:97:10:07:f9:42:ea:70:c0:15:98:2e:29:9f:00:
7e:dd:cf:64:a9:a6:70:4f:82:14:17:07:8e:98:92:
87:5a:fd:75:75:c9:d7:0d:da:cf:2a:e7:af:45:e9:
ea:4f:78:5c:b0:3d:67:a7:13:24:6b:f0:82:c0:b7:
de:2c:92:48:58:ef:d6:3c:ba:34:ca:f6:3f:ff:2b:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:12:34:55:2B:CB:CE:7A:90:E9:94:F0:AD:7E:99:32:DF:33:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:23:ee:ee:ca:c5:22:3e:94:ed:93:cc:f1:2f:d5:6e:30:ee:
85:2f:95:38:c5:a8:b4:57:28:12:d3:b0:09:8d:7e:c7:55:0f:
c2:e9:26:b0:a0:27:42:fa:56:65:c0:56:a4:c6:31:6e:44:b9:
11:47:d3:e7:eb:15:ea:ca:53:09:1c:6c:69:dd:9e:f2:0d:93:
54:9d:ad:f5:62:e0:35:2e:fb:c7:f0:5e:27:99:ef:a6:5d:93:
9e:5e:95:27:74:88:04:ff:ba:1a:a5:29:de:02:b5:34:71:a2:
1c:50:18:ed:7f:ec:94:9f:15:88:36:58:ed:94:85:e6:84:9e:
32:e9:f2:e8:ff:2c:e3:8f:67:22:9b:92:c9:e5:c3:9f:5d:93:
8d:26:ca:bd:7b:b5:41:42:f2:03:cd:c6:16:c2:e0:4f:04:db:
82:1d:6d:14:77:07:95:4d:8e:ae:f3:96:e2:1f:b4:94:04:57:
6d:46:b8:10:49:fb:57:74:90:2c:ab:69:ec:36:73:df:dc:15:
bf:f0:76:7c:90:38:e4:de:26:e0:54:d1:72:0f:b2:9a:fa:c4:
21:a0:ae:11:80:bf:ae:37:cf:95:24:47:90:a2:33:5d:a1:4d:
92:1e:23:ee:5d:bb:20:0f:d1:7e:37:0b:e2:7e:86:78:50:79:
51:56:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:58 2025 by rpki-client