Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa
File: 9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa (raw, json)
Hash identifier: IZ/ZTbjo36vyQok8/KwjX079KTdmRMt+EsQTznNRZr8=
Subject key identifier: 56:49:4E:F4:F0:80:C3:A8:98:96:6F:02:FC:E2:36:15:BA:DE:83:93
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F432858494CC9422093FB5A622AF3D01D
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 53927
IP address blocks: 139.131.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:42:20:93:fb:5a:62:2a:f3:d0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=b6bc48d1-58d6-40a5-92a8-2f9746ec6ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:d9:09:1c:86:53:9c:0f:9c:83:40:06:cc:
65:bd:c0:ea:1a:9f:ba:64:b7:36:25:26:ca:ca:80:
48:82:78:82:e3:95:9f:2a:bc:c0:e6:cb:db:3c:07:
02:e1:bc:6a:aa:7e:80:d2:82:c5:3b:7c:ae:39:c7:
17:8e:fa:87:11:eb:06:8f:f1:12:59:ed:00:20:64:
e2:77:2c:b5:4a:14:39:ef:d7:50:94:e7:38:a9:26:
ff:94:88:d9:44:cd:25:8e:66:ae:2f:d3:8b:c2:14:
62:f9:4f:54:0f:96:c8:cf:53:ef:0e:ba:c0:b8:4b:
ee:15:dd:e9:45:f9:32:c9:21:17:8f:0a:e3:c3:b4:
75:ac:ad:32:e6:96:66:5a:99:ad:69:10:ef:41:af:
0a:01:f0:d7:15:4b:fd:d8:dc:24:58:80:6c:e0:4d:
e0:43:da:36:ff:26:3d:6c:b0:e1:6b:1b:31:eb:6d:
87:bc:90:44:b2:55:1c:91:36:ef:11:af:79:83:07:
a6:15:3d:f7:d6:5f:91:cb:5f:d2:a3:ad:2d:4b:a3:
cd:b5:93:19:7a:16:fa:72:14:74:d7:f8:72:3f:ed:
8b:da:4a:29:8f:b4:f4:92:72:0f:47:75:4a:67:4f:
c9:09:91:33:c8:fc:0e:ea:2c:71:ee:82:35:92:29:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:4E:F4:F0:80:C3:A8:98:96:6F:02:FC:E2:36:15:BA:DE:83:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9a5f844d-2d7d-3a2b-8db4-24cc53ec55d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
139.131.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:44:62:3e:91:ed:26:3b:9e:01:4c:ed:e2:2a:47:78:b1:08:
b6:66:16:cc:2b:1e:e7:ac:4d:78:b8:0a:37:6d:b9:6c:30:a2:
32:18:a1:94:d4:a0:2d:6c:97:cb:c5:7d:e5:9b:55:84:e8:9c:
4e:ed:ec:0a:fc:45:eb:41:39:5d:3a:3a:c4:1d:40:ef:cd:17:
bb:95:28:7d:8e:f8:99:2c:3f:8e:0d:71:8d:79:dc:b0:85:27:
47:89:88:96:d0:79:b8:cd:6d:47:35:dc:87:ff:b2:bc:99:1c:
82:38:42:e5:a4:16:a0:8d:8a:95:50:66:a4:38:0c:fd:b3:39:
ed:07:4e:ad:5e:44:6f:9e:77:7c:28:91:33:a8:5d:89:7b:da:
44:a0:ee:44:04:b0:67:86:0e:65:4c:27:b1:62:b6:f7:fe:da:
f1:b2:8f:95:b6:d8:94:48:0c:ca:9c:cc:7d:29:d3:a7:37:81:
a9:6f:25:d7:5a:35:08:e3:f3:31:c1:b0:23:c7:f3:be:8a:cf:
c6:3b:3d:9a:66:d6:b3:6e:1e:67:22:29:17:3b:73:9b:2c:50:
a7:5c:22:5d:ed:c0:82:4c:b4:51:1d:bd:31:10:a5:38:1b:1e:
08:db:50:a1:d5:9a:26:e4:14:1a:37:e1:19:9a:91:58:5c:f2:
d3:c1:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:23 2025 by rpki-client