Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6a3fb9-d2ab-398b-9f2c-d8e790f0dfeb.roa
File: 2a6a3fb9-d2ab-398b-9f2c-d8e790f0dfeb.roa (raw, json)
Hash identifier: ytjyaR+nH7H3rU19mXZt2oSi3NhUYzLEViwOiAa3pLI=
Subject key identifier: FB:FB:11:8E:CF:19:AD:F1:F3:D6:CE:BB:7B:B0:47:1E:17:31:87:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858497AD9B209D2B91F8DCC3923A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6a3fb9-d2ab-398b-9f2c-d8e790f0dfeb.roa
Signing time: Thu 10 Apr 2025 13:00:59 +0000
ROA not before: Thu 10 Apr 2025 13:00:59 +0000
ROA not after: Wed 09 Jul 2025 13:00:59 +0000
asID: 63949
IP address blocks: 139.144.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7a:d9:b2:09:d2:b9:1f:8d:cc:39:23:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 10 13:00:59 2025 GMT
Not After : Jul 9 13:00:59 2025 GMT
Subject: CN=8d334b6b-2686-44f5-92dc-8bbb603a4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:89:56:0b:0d:f0:c8:cf:15:f4:2c:eb:ac:
ff:34:ad:aa:9a:6e:89:a4:3b:b9:e9:a7:e6:d9:23:
e1:4b:68:e4:ab:cd:6f:38:2e:b6:6d:35:3f:4b:b9:
df:32:64:27:29:73:9c:6e:9b:4f:1d:24:d7:f0:15:
ee:65:6f:2f:64:f7:db:fb:d3:6c:a6:0f:2c:81:22:
53:20:6b:e2:52:9b:4c:70:6a:48:db:17:27:9d:77:
79:7b:a9:31:9b:6e:f1:0b:b8:0a:08:99:e3:4d:19:
b5:ce:44:86:b6:2b:92:ab:5d:43:8f:da:7a:33:f2:
07:88:5f:4b:c5:e2:e3:2a:ce:af:e1:83:17:f0:6b:
51:62:d3:be:b2:20:eb:01:c5:b4:03:a1:a5:e8:89:
a4:67:98:cc:b7:b4:e9:bf:18:18:38:4a:05:90:36:
bb:a4:30:5b:ad:9d:a3:e0:2a:6b:d2:de:71:3f:76:
0d:ab:b2:4d:e4:1d:b6:be:69:45:47:3a:de:82:cf:
27:74:c5:30:e7:36:93:ac:36:6e:25:35:a5:a6:87:
05:bb:43:da:4d:ad:e3:6e:68:94:08:e3:87:45:82:
8a:e5:cb:4e:e0:14:bb:34:55:15:bb:16:96:bf:f9:
64:12:f9:80:e9:47:17:74:3f:cc:85:06:e3:78:bf:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:11:8E:CF:19:AD:F1:F3:D6:CE:BB:7B:B0:47:1E:17:31:87:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6a3fb9-d2ab-398b-9f2c-d8e790f0dfeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
139.144.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:08:81:2c:22:f6:90:bf:ad:59:80:88:6a:8a:93:f9:e2:d2:
1a:0f:b9:16:21:d1:76:6a:57:01:ba:4d:d1:4e:8d:60:2e:2d:
03:1f:a5:c5:59:11:60:57:57:62:a1:83:95:60:88:5e:ba:ee:
b7:74:9e:ef:1a:40:db:1e:ae:bf:12:eb:50:a8:c1:f4:f9:da:
2a:24:b3:a2:2f:7a:4c:bc:78:a8:f7:e6:9e:ae:39:ad:7d:46:
b9:aa:7f:a1:db:a8:dc:fb:16:a8:fa:4c:fc:cf:0e:2c:78:88:
ac:0f:5f:48:49:53:48:50:95:ee:1b:39:40:6c:21:8e:f6:29:
2b:b4:5e:05:36:97:91:d2:bb:71:7f:79:d4:48:38:70:2f:51:
d8:77:64:d7:f8:8c:c6:f0:cc:7a:09:42:fd:c0:29:44:9c:5f:
85:53:04:8f:c8:21:77:bc:1b:d0:7a:2b:0c:22:de:7a:b1:0d:
e5:da:f6:a4:bc:25:1f:fa:9e:78:82:68:45:3d:5d:62:43:96:
14:17:27:be:ba:d7:c7:95:b2:c0:af:bb:9e:72:0e:95:d2:d4:
27:6b:f2:b8:de:23:51:07:c0:08:3d:07:f7:6d:dd:b5:86:68:
83:b7:16:98:ca:19:6a:71:5d:18:02:fa:4b:88:07:9b:ea:08:
6a:9d:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:39 2025 by rpki-client on console.sobornost.net