Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
File: 0a793ce5-2a13-3752-babb-d659187f1a1c.roa (raw, json)
Hash identifier: 3F2fiGzPE4w6nrySMBtXluriZX854dMcXIMre77Grs8=
Subject key identifier: A6:81:21:7A:9D:CC:ED:B1:B8:19:66:63:4D:7F:C3:67:9A:8B:19:BE
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F43285849287E5DDB717D2D81DCA59700
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 31898
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:5d:db:71:7d:2d:81:dc:a5:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=438259b5-e6c5-458d-98b8-726452d05df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:0b:7a:9d:53:bd:dd:09:aa:c4:80:90:93:
0b:32:c1:c7:59:60:4d:e6:d5:9b:94:0b:16:41:a9:
c5:59:f8:65:48:13:79:12:4c:9e:c5:41:9f:6e:4d:
d4:4f:7b:4a:d4:e8:7b:10:6b:44:8d:51:03:f7:4d:
b6:14:f7:a6:3b:c5:46:29:0d:48:e4:3f:9c:70:79:
e4:b0:51:b0:ee:8e:cd:77:50:af:c5:79:af:32:41:
cb:ba:f6:89:4a:7c:ee:3a:ae:af:bf:e9:43:e2:95:
68:85:f1:c7:70:df:d4:55:92:a4:a7:67:b3:8f:00:
ba:6f:3e:c6:6c:ab:cc:e1:a4:09:52:ec:38:2a:f0:
79:b8:0d:99:31:e4:21:05:08:3d:3a:9e:f9:3f:8f:
1f:37:a2:2c:bf:2a:ae:1a:8e:99:e7:7b:25:c7:66:
2b:e1:fc:b2:0e:9d:cd:25:6f:6a:85:cc:b0:d0:93:
98:17:e1:1f:35:65:8e:32:b7:a6:d2:db:7a:a0:b1:
26:3e:09:d2:6e:ed:e6:9d:a5:db:7d:32:4a:02:8f:
4b:d3:4f:be:36:9a:cb:a9:12:50:84:6b:e2:2c:c4:
e3:43:e9:03:b4:53:11:e4:41:6a:75:e7:4a:ef:f8:
df:23:eb:2d:b5:90:6e:6c:75:96:98:af:b9:92:da:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:21:7A:9D:CC:ED:B1:B8:19:66:63:4D:7F:C3:67:9A:8B:19:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:28:fd:cf:32:01:64:cc:66:47:af:32:6d:d6:23:30:58:bc:
ce:64:26:58:f2:5b:1c:c2:44:44:31:0b:91:14:4f:55:37:44:
eb:db:6f:f0:13:72:54:9a:d9:21:06:41:d0:b8:36:72:06:e4:
6a:55:c8:9f:24:9d:49:21:56:d6:06:c2:2f:69:5f:95:ac:65:
d9:0b:07:0b:b0:1b:83:12:85:ae:a9:2d:7e:40:c2:5e:2d:17:
47:75:06:ee:85:fe:6c:7d:3c:65:98:67:87:98:61:59:ae:58:
78:63:8f:a2:ad:b7:83:68:b3:57:10:18:32:07:74:65:9f:83:
77:2e:cf:65:7f:8e:c5:bb:be:fd:fa:87:24:ba:09:dd:1d:c3:
05:ce:5a:79:45:d8:c2:92:4a:ce:14:cb:e4:68:e6:9a:f1:e5:
33:31:f8:8c:f1:68:6e:3f:85:cd:d8:06:61:52:9c:03:ea:31:
46:4d:b9:43:4e:be:b0:18:fb:1b:e7:87:5c:55:d2:93:10:43:
f7:44:7f:e1:c2:e8:f4:98:77:ca:56:05:15:bd:30:9e:c8:f0:
95:a0:38:f1:37:85:65:c7:ef:3d:4e:62:ec:d8:87:c2:8f:0f:
89:4e:45:d3:9d:d8:4b:0b:85:15:34:6f:d6:ea:b2:a6:5a:25:
a7:b4:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:29 2025 by rpki-client