Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa
File: 68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa (raw, json)
Hash identifier: Pnp1m2+y0vfyr2911UpHRL8XzITbtYVn0wS/6AotfkM=
Subject key identifier: 2A:95:E1:C3:BD:A7:74:9A:76:25:A7:70:EF:52:51:88:30:7E:0E:20
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F432858494CC93DAA6CCFCA65435CF380
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 394625
IP address blocks: 139.64.176.0/24 maxlen: 24
139.64.177.0/24 maxlen: 24
139.64.178.0/24 maxlen: 24
139.64.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3d:aa:6c:cf:ca:65:43:5c:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=8f9da13d-d95e-4246-bc6e-d0561c5728a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:a0:90:2b:2c:46:6f:2e:42:83:5a:e8:63:
50:6a:19:59:84:2c:f7:90:07:aa:e9:9b:6d:a2:5b:
7d:36:8e:bd:c1:29:23:c0:d1:32:17:36:a2:1b:84:
f4:66:41:ee:0b:62:81:4f:0e:ed:2a:36:be:25:c9:
3f:66:42:ec:48:1d:ae:25:b1:c1:d0:27:ee:24:5f:
00:cb:9d:1f:c7:ec:a0:46:71:7d:09:34:3f:23:7b:
71:9e:d5:e0:b3:65:7b:99:ef:e2:cd:35:94:a8:b3:
cb:4b:22:60:0e:25:4d:9b:5e:09:83:af:a3:b8:92:
4f:d8:9a:d9:b2:73:1b:b2:45:64:a9:6b:79:3a:24:
44:fb:fa:91:5c:5d:fa:3e:46:42:ad:29:7d:be:a6:
e1:b1:cc:63:75:2d:b7:86:04:b5:e9:df:03:a1:24:
b6:0e:a6:86:4d:1a:01:c4:0a:c7:58:3c:e7:07:99:
f5:b9:a0:61:c3:ac:2d:02:5b:1f:13:a2:ca:16:11:
79:22:37:a8:a0:41:fa:2d:f8:37:35:97:a8:c2:68:
b4:61:31:8f:ba:16:25:2d:61:a1:de:1d:3d:78:cd:
1b:63:26:00:8c:9d:bb:c8:d4:36:21:26:7b:77:35:
58:2a:c6:54:ff:38:56:f7:89:75:5f:e9:9b:55:ae:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:E1:C3:BD:A7:74:9A:76:25:A7:70:EF:52:51:88:30:7E:0E:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/68eb0e8c-df9b-3fb3-986e-45bf338c1946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:39:ab:21:61:b5:ab:cd:d5:c9:a4:65:b6:ff:e0:a4:b8:38:
b4:fa:24:8a:00:7e:76:21:58:c2:13:27:64:2b:1e:75:1b:fd:
4f:e8:8c:a3:56:d0:c1:0a:d7:bc:2a:f6:f5:4a:47:98:46:fd:
96:94:7a:d0:d8:ff:fa:38:99:4f:c3:93:f6:44:a0:ec:d4:63:
8b:09:7c:19:0b:04:cc:f9:eb:c9:26:06:43:10:48:0e:b2:f2:
67:03:de:d9:f7:f8:06:3b:cd:6a:97:36:c9:35:71:97:00:ce:
48:60:d9:8f:12:18:3a:b9:b9:ce:b0:a9:6e:f0:88:44:7a:46:
8c:34:10:9f:74:a0:6e:39:4a:50:65:99:ef:ca:f5:14:95:32:
9e:0e:f3:1d:72:2a:2b:41:a6:05:f6:ee:c0:db:a6:24:ba:f1:
31:b2:85:61:0a:1e:4a:15:24:ad:4d:9e:f5:62:99:4e:c5:12:
49:d1:65:95:05:1e:10:75:c3:a4:6b:b1:ef:3a:b4:d3:28:4a:
de:fd:22:a3:7c:40:8a:57:20:59:58:47:65:c3:f9:3d:d6:fa:
9b:76:d5:63:8f:f3:0c:e0:78:62:d4:f6:fb:7a:c4:43:8f:82:
af:87:80:b7:c9:e1:7e:df:92:6c:c3:94:f9:b8:df:61:c3:99:
59:ee:19:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT2qbM/KZUNc84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4
NmQ3MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
OGY5ZGExM2QtZDk1ZS00MjQ2LWJjNmUtZDA1NjFjNTcyOGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeGgkCssRm8uQoNa6GNQahlZhCz3kAeq6Ztt
olt9No69wSkjwNEyFzaiG4T0ZkHuC2KBTw7tKja+Jck/ZkLsSB2uJbHB0CfuJF8A
y50fx+ygRnF9CTQ/I3txntXgs2V7me/izTWUqLPLSyJgDiVNm14Jg6+juJJP2JrZ
snMbskVkqWt5OiRE+/qRXF36PkZCrSl9vqbhscxjdS23hgS16d8DoSS2DqaGTRoB
xArHWDznB5n1uaBhw6wtAlsfE6LKFhF5IjeooEH6Lfg3NZeowmi0YTGPuhYlLWGh
3h09eM0bYyYAjJ27yNQ2ISZ7dzVYKsZU/zhW94l1X+mbVa7C/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqV4cO9p3SadiWncO9SUYgwfg4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj
NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvNjhlYjBlOGMtZGY5Yi0z
ZmIzLTk4NmUtNDViZjMzOGMxOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx
MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl
ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy
ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFM5qyFhtavN1cmkZbb/4KS4OLT6JIoAfnYhWMITJ2QrHnUb/U/ojKNW
0MEK17wq9vVKR5hG/ZaUetDY//o4mU/Dk/ZEoOzUY4sJfBkLBMz568kmBkMQSA6y
8mcD3tn3+AY7zWqXNsk1cZcAzkhg2Y8SGDq5uc6wqW7wiER6Row0EJ90oG45SlBl
me/K9RSVMp4O8x1yKitBpgX27sDbpiS68TGyhWEKHkoVJK1NnvVimU7FEknRZZUF
HhB1w6Rrse86tNMoSt79IqN8QIpXIFlYR2XD+T3W+pt21WOP8wzgeGLU9vt6xEOP
gq+HgLfJ4X7fkmzDlPm432HDmVnuGaE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:00 2025 by rpki-client