Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce947e6-459b-3a2b-8f6c-087f0c2be409.roa
File: 5ce947e6-459b-3a2b-8f6c-087f0c2be409.roa (raw, json)
Hash identifier: AIU8LpqeIW7C6rImoUIG+LYtw2jnZnNCyssgcfaOnKQ=
Subject key identifier: F2:70:12:DB:30:84:51:2D:60:6D:3B:C3:19:66:11:21:27:D8:56:A8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489BA0AFAACB13EFB4EB19C280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce947e6-459b-3a2b-8f6c-087f0c2be409.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 63949
IP address blocks: 139.144.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:af:aa:cb:13:ef:b4:eb:19:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=3506ed30-bd86-4d51-8f3c-e73a12f34f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:6f:a9:06:c8:3a:b5:db:3e:3b:03:a5:b9:
5f:8f:03:7c:56:23:2b:da:c4:03:4a:f7:3c:b7:da:
93:e1:b0:d5:46:8c:fb:2f:aa:dc:8b:ae:48:3e:b4:
e4:e7:89:b7:1e:cc:6c:81:72:5d:a7:d1:21:cc:ae:
ed:ff:ac:9f:76:2c:a3:d4:cd:ea:2f:21:d4:21:9a:
7c:a4:8e:47:f6:ac:20:ac:6a:8e:25:e0:87:e9:fb:
84:07:64:d5:e7:e2:6d:fd:42:22:e3:83:09:bb:90:
26:d2:f8:ff:23:e5:ae:27:91:7d:5f:80:4b:c1:be:
90:c7:99:f0:9a:2d:da:72:59:0b:eb:60:97:68:e8:
73:cf:82:c4:2d:ac:d3:6b:bb:be:f5:ac:78:39:92:
f3:cd:60:d9:81:23:fb:9a:84:f8:8f:da:44:57:a8:
02:ca:f0:aa:99:99:31:92:d2:82:99:2b:c2:a1:59:
29:10:05:f0:1a:19:91:70:0f:cd:61:5f:82:2f:c1:
dc:ac:39:ec:23:35:04:3a:5b:bf:d8:4a:be:ba:1c:
36:76:95:fc:25:7a:c9:ea:39:3c:88:7a:1d:96:f3:
5b:0e:f2:d9:38:73:fc:1e:72:df:c1:83:c5:7a:59:
89:e0:06:ff:d2:27:31:9d:87:e8:56:30:cb:6f:c7:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:12:DB:30:84:51:2D:60:6D:3B:C3:19:66:11:21:27:D8:56:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ce947e6-459b-3a2b-8f6c-087f0c2be409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
139.144.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:21:14:77:aa:8d:e9:33:d3:ba:21:04:2f:aa:1e:5a:da:69:
2b:d3:1c:5d:68:a2:ee:10:d0:dc:20:90:21:a5:e1:46:b1:41:
e7:be:b5:de:1f:81:f7:e9:cf:7a:ff:96:99:15:b0:99:39:a0:
ed:77:44:ea:c7:70:db:9a:f0:cf:ac:55:9d:5c:63:b7:1b:52:
7e:af:76:fe:f8:6a:4f:e8:92:96:3f:58:8e:f7:11:e7:35:46:
35:a4:54:06:06:5b:17:8a:7f:50:b6:a6:b3:dd:ab:2a:a4:77:
38:81:a3:fd:c9:de:d7:d2:89:30:7a:77:be:f0:89:64:eb:cd:
6a:13:08:a5:63:82:f1:d0:eb:e5:7a:81:64:1f:23:4f:86:7e:
0e:50:1c:c3:c5:10:b0:22:15:a9:a6:e8:03:6a:dc:14:bb:4d:
03:4b:d9:00:cc:16:4f:df:ca:c1:9a:de:4d:79:8f:4e:77:2d:
4d:9c:66:26:c1:db:70:a7:df:79:73:72:7c:59:70:bf:7c:73:
a6:76:b2:a9:c5:97:0b:17:e2:7c:92:53:6e:3a:f0:7f:cc:18:
31:ac:c6:7c:b1:1a:14:f2:08:86:8e:17:b7:6b:1a:ea:6e:6d:
fd:37:fb:6f:ab:32:d2:58:c4:66:a0:10:53:9b:98:57:d5:56:
ab:e1:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:42 2025 by rpki-client