Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
File: 59e7face-109a-3046-80f2-18e812612b71.roa (raw, json)
Hash identifier: nVxs3W1L3ZbhE9IamSovlt/gUgO73iGcnI7RjdPTL7c=
Subject key identifier: 87:DB:C2:99:1E:2A:D2:AE:5C:44:0E:72:32:EA:B7:55:E2:4B:33:98
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F432858493C094108983A4E782D594B80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 394089
IP address blocks: 140.209.192.0/19 maxlen: 24
140.209.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:41:08:98:3a:4e:78:2d:59:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=12af1668-8c75-46e0-81ae-74fbfefdf73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:b7:82:41:bf:3a:c9:50:1c:62:75:42:5d:
60:ff:5c:cc:f3:20:82:e3:be:f6:3b:5a:5a:a2:8d:
21:be:f8:6d:36:c0:e4:aa:1a:f0:0c:14:fd:f3:ae:
87:2f:b6:18:6a:13:ad:a5:63:c8:4d:8d:b7:67:ca:
39:af:56:39:b1:7d:5b:fb:6b:fa:1d:8c:59:28:45:
84:e7:72:85:17:2a:6d:26:bc:81:ea:ea:c8:00:07:
3e:31:8c:12:37:5a:e6:2e:09:81:06:d1:14:53:a4:
a7:dd:fd:8e:7d:2d:80:6d:89:d5:25:9f:85:78:ca:
41:de:03:3d:9a:12:48:68:92:2b:9d:ac:31:02:f1:
95:41:fa:eb:f3:cd:01:08:c7:11:7d:59:40:4a:f6:
f3:8d:20:42:ef:6a:29:8a:8f:09:db:df:58:6d:5e:
a5:2d:6f:f4:fd:db:f6:e2:c9:ff:ea:54:74:70:9a:
1d:62:e8:fa:bb:c3:ac:f5:a0:7f:c3:54:13:f1:61:
43:b1:2b:4c:90:62:9b:7c:78:9b:ee:80:e1:20:19:
29:2f:a2:cc:49:0a:b8:ac:45:c1:a5:56:e1:4e:3b:
0d:bc:ec:fd:60:d0:42:ec:1c:0e:14:42:7a:d5:71:
9c:c1:59:db:19:b2:1c:0c:e6:f4:22:ac:ab:cd:b8:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DB:C2:99:1E:2A:D2:AE:5C:44:0E:72:32:EA:B7:55:E2:4B:33:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
140.209.192.0-140.209.239.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:a9:d6:a6:27:b3:a6:c5:14:fd:1e:69:b5:a3:48:c4:78:5e:
cb:c1:38:49:2f:1c:80:90:56:b6:7c:bf:d9:e1:27:7f:29:ad:
6c:35:a2:cc:11:ff:81:23:28:8a:6a:ca:9e:38:05:eb:92:26:
bc:04:78:dd:de:1b:60:ac:cf:14:a9:ff:93:c0:e4:50:65:b9:
00:10:43:15:1b:5a:90:c0:87:34:6f:97:25:cc:1b:ec:74:10:
af:77:c1:a9:67:61:eb:27:e9:7f:c2:26:8b:cb:17:2c:52:1c:
be:f8:7d:c1:8b:09:e8:72:ca:dd:b6:32:ea:5c:33:f9:89:40:
60:73:fc:0f:79:d1:9a:91:ed:53:11:ec:bf:15:37:7c:66:4c:
ce:7a:7a:ae:d8:73:a9:99:5b:14:4d:57:52:63:93:f3:9a:7a:
ac:3b:b4:f0:f4:e7:7d:49:c4:3a:ba:b5:eb:8c:9b:04:c1:ff:
8f:03:92:97:05:84:dc:a0:58:2c:45:f2:58:5a:13:eb:33:2d:
46:17:0a:5e:eb:ab:ae:a3:a5:d8:da:8f:10:2f:d1:c4:37:a1:
40:a6:9a:3b:55:ad:6a:8c:33:a7:1a:bc:6a:a2:7d:65:0b:a4:
9b:ab:b2:85:3d:02:a9:35:09:14:1f:8f:91:25:a7:fd:63:51:
01:18:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:37:13 2025 by rpki-client