Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
File: 757db988-b3f6-35bd-bf19-c861e85bf57a.roa (raw, json)
Hash identifier: 4exvznYMZ9Oz/4kWT8L7Dpd+MWNrmgr0eAvR0w4meEs=
Subject key identifier: 46:3C:E8:11:69:3B:07:03:FC:86:D6:7A:15:9C:9C:16:0C:9C:6E:CC
Certificate issuer: /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial: 010D0C9F432858487A2084FB96AFEBA3411A83E0
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 5788
IP address blocks: 139.173.72.0/21 maxlen: 24
139.173.80.0/21 maxlen: 24
139.173.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:84:fb:96:af:eb:a3:41:1a:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=8c478ebd-783e-45f8-bb05-484938f71654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:40:f1:ff:fd:01:58:0d:bd:66:14:c8:2a:
92:99:b1:1d:ca:9a:66:3b:89:23:4a:14:f8:56:d2:
b8:af:5b:82:9f:e4:52:3c:32:75:42:e5:ca:f8:10:
4f:b7:a5:ea:11:9f:9d:09:62:f7:a1:fd:68:92:24:
b0:24:6f:17:8a:b2:4d:25:5a:7a:37:ff:fb:15:66:
03:d0:10:d0:d5:27:ba:9c:5e:e2:a0:e3:76:a3:7e:
26:30:e6:28:7f:0c:2b:88:0a:6f:64:69:ea:9a:ad:
bc:9b:5f:8e:ce:6b:c0:93:5c:74:73:6e:22:26:16:
38:24:44:3f:0f:70:98:c8:c5:6e:28:c0:19:3d:55:
73:a8:b6:c0:83:a7:64:97:aa:97:82:0f:8e:b7:b8:
24:71:d6:69:ad:72:01:44:ec:6d:a6:d1:1e:35:a4:
b1:0d:15:0e:0d:d2:f9:1d:87:f1:4c:d0:3a:f6:95:
35:04:d1:57:bf:3d:f2:d5:87:cd:67:fd:bd:1d:e3:
93:69:26:c5:d6:0a:a7:3f:7a:e2:ba:4f:60:39:db:
65:45:e4:a1:f7:81:0a:9d:77:11:a4:a0:a9:92:31:
e4:aa:e2:e1:b4:21:66:a8:ff:01:75:d3:d0:03:44:
cb:a9:37:a2:82:73:0a:24:a3:e6:15:7f:66:43:c5:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:E8:11:69:3B:07:03:FC:86:D6:7A:15:9C:9C:16:0C:9C:6E:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
X509v3 Authority Key Identifier:
keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
sbgp-ipAddrBlock: critical
IPv4:
139.173.72.0-139.173.87.255
139.173.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:82:88:08:a2:d1:b1:ff:7e:2e:73:ee:cc:28:a0:7a:f3:af:
8c:72:d1:ed:66:a5:ea:60:99:40:5f:16:cf:42:8b:e8:f0:85:
10:27:f9:05:c7:65:60:53:c6:55:40:d8:ed:1b:fa:71:7a:89:
b2:ed:f0:43:3c:26:f8:21:29:75:0f:28:b0:f5:93:9b:ae:07:
15:52:76:74:8a:b4:7a:1e:7a:ae:77:88:ec:d9:43:41:b8:35:
6c:30:f7:91:4d:06:66:57:45:38:0c:f9:a4:99:b4:6e:95:ac:
fe:b1:f4:0b:c7:9c:6d:0c:64:79:ac:cc:66:6b:f1:98:11:f5:
c8:8a:bf:3d:b0:99:69:10:86:8a:fc:40:6d:88:18:cf:5f:40:
63:a8:7c:fe:a7:09:e8:fd:06:36:bc:69:db:49:80:e8:e2:9b:
96:84:83:5b:b1:b3:09:25:28:d8:91:de:00:aa:6d:18:4d:c1:
dd:ec:8e:e5:5d:9a:d5:73:9e:36:ac:69:61:8a:ad:1a:31:13:
53:60:d2:8f:4c:ce:d8:99:16:23:8e:6b:40:05:0e:59:a8:b0:
54:34:13:a9:72:c8:ce:84:c2:1d:43:06:8c:13:fe:4c:9e:67:
32:fa:24:37:e9:39:72:f0:cb:39:86:a4:9f:a5:10:e0:c5:ab:
d6:02:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:21:28 2025 by rpki-client