Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
File: c753282b-6491-33e8-a0e1-bab307a0dd28.roa (raw, json)
Hash identifier: 3fRs8uPQOartS/F6fZMTItbpGs8d38CZ3YpOPbFU8cw=
Subject key identifier: 22:7E:89:BD:6B:C2:66:11:AA:0C:0B:7F:71:6D:8B:B2:BD:78:13:F3
Certificate issuer: /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial: 010D0C9F43285848B1F721B9A0529AB3F90C3FC0
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
Signing time: Tue 28 Jan 2025 14:02:54 +0000
ROA not before: Tue 28 Jan 2025 14:02:54 +0000
ROA not after: Mon 28 Apr 2025 13:02:54 +0000
asID: 7018
IP address blocks: 139.125.0.0/16 maxlen: 16
192.205.31.0/24 maxlen: 24
192.205.32.0/22 maxlen: 22
192.205.36.0/23 maxlen: 23
199.178.180.0/24 maxlen: 24
204.159.108.0/22 maxlen: 22
206.141.192.0/24 maxlen: 24
206.141.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f7:21:b9:a0:52:9a:b3:f9:0c:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
Validity
Not Before: Jan 28 14:02:54 2025 GMT
Not After : Apr 28 13:02:54 2025 GMT
Subject: CN=99a50a05-634d-4ae3-aed7-f08cfab30d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:09:2b:f1:09:b4:40:22:28:86:56:c6:41:
78:e7:46:82:88:a7:a5:00:9b:fe:01:7f:b1:ac:a4:
64:1b:5b:d5:5b:93:0e:92:40:11:85:af:d0:e0:2a:
a2:e1:e5:09:73:bf:ba:7c:10:14:c4:c9:5f:b8:3b:
b6:fc:be:e2:78:98:44:24:45:d5:0a:e0:55:7b:3b:
ff:51:e8:55:b7:e0:b9:01:fb:50:ef:35:b9:85:8b:
e1:54:f8:74:ee:41:e1:e0:fd:8c:a4:58:dd:c8:9e:
88:7e:4c:7f:ca:08:a0:a7:4a:52:2b:b8:c4:d9:0f:
63:f4:23:84:c5:65:eb:4f:78:e8:5c:37:0c:a6:c8:
32:b2:b9:ee:65:9a:76:23:12:a9:9a:f1:70:a8:3e:
90:9f:ab:e1:df:d4:dc:ca:55:65:19:46:ac:4d:0a:
dd:26:c3:73:bf:ee:59:0b:43:2f:15:99:b4:0c:6c:
a9:c1:59:04:c7:03:8d:48:3f:c4:ac:35:26:30:8c:
ba:18:95:bb:8f:f0:92:98:da:9f:62:09:85:6b:a8:
75:d9:c2:1f:84:d9:01:90:04:ce:f0:ab:7a:30:05:
17:bb:1d:b3:07:7b:54:90:18:d3:33:92:16:ef:2b:
fe:ad:c3:99:da:ef:3a:f8:58:14:2a:fb:44:ad:8b:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:89:BD:6B:C2:66:11:AA:0C:0B:7F:71:6D:8B:B2:BD:78:13:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/c753282b-6491-33e8-a0e1-bab307a0dd28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
X509v3 Authority Key Identifier:
keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
sbgp-ipAddrBlock: critical
IPv4:
139.125.0.0/16
192.205.31.0-192.205.37.255
199.178.180.0/24
204.159.108.0/22
206.141.192.0/24
206.141.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:5e:b6:2b:b8:e4:56:e1:13:70:df:73:b1:38:f4:47:4a:0f:
7e:12:90:c6:b6:dc:37:b2:11:52:64:50:ce:49:0c:cd:9f:88:
84:f5:00:b0:59:39:0d:c5:c5:c9:38:12:50:12:f9:03:24:37:
46:b5:64:c8:c8:78:33:de:37:f7:e5:c2:bd:6e:f5:a1:12:fb:
7e:cc:c1:b7:f9:51:ce:40:c4:65:26:33:72:1b:e0:78:cf:3e:
c3:1e:e5:33:36:58:af:b7:4a:fe:cb:7f:5c:fc:e1:33:0a:54:
4f:eb:b2:b0:22:d1:64:7e:9c:00:f6:ec:55:41:1a:47:25:2d:
5d:2d:9d:4f:7d:76:c3:16:4d:25:df:74:1a:2a:ea:45:f6:4b:
58:d6:8a:df:9d:eb:2a:17:59:f0:cf:47:b1:86:38:85:69:f3:
2c:81:81:58:3f:b1:7c:71:a5:75:01:74:03:24:85:67:79:64:
16:0a:34:cb:f8:6c:85:fc:62:39:b0:f3:fb:2f:f7:37:35:21:
0b:ac:ca:66:f5:36:16:e0:4b:91:88:69:80:16:0b:3a:b0:d4:
a7:e2:dd:b9:61:3f:3e:7d:fe:c2:42:ea:07:5b:e2:09:ad:ac:
e7:a4:2c:0c:59:90:81:c2:5d:cf:a2:ef:2b:eb:61:bb:1a:fd:
54:07:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:17 2025 by rpki-client