Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa
File: 057636be-53d3-33be-86cc-79dd80d5e92f.roa (raw, json)
Hash identifier: dKo+G42Mx6+mTZyUU0snVTPlQAAfshNdZc/uWeKOqeY=
Subject key identifier: AB:15:7A:37:CB:7D:E6:DA:87:34:5E:AA:61:AB:60:E6:4D:D6:61:6E
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE8AA233E68FFB5DDCF0F0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 139.138.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8a:a2:33:e6:8f:fb:5d:dc:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5ab59f87-d408-48f8-9093-9cfbabfb4ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:62:94:ac:a6:e5:07:6a:be:24:e6:66:13:
81:af:3a:1a:b3:f5:52:3e:2c:52:eb:69:8b:38:af:
d6:5f:17:e9:23:de:26:ea:fe:54:5a:3b:4d:41:0a:
6d:db:aa:c0:b8:c8:6e:39:44:ff:85:bb:cc:e1:35:
f6:3f:2f:27:76:b5:7f:73:9a:e3:88:b3:bb:ac:e3:
78:7f:59:5d:f5:9a:ad:23:bb:52:68:54:4c:52:4c:
00:b2:40:f6:85:37:5c:73:cb:21:03:f0:68:0d:bd:
60:43:c0:73:4b:c1:45:e5:9d:76:02:a8:62:08:7c:
f7:86:d1:11:35:77:eb:d8:ae:e6:b0:07:56:3e:40:
c4:22:da:72:1d:5a:0e:cb:fe:c6:67:f8:ac:48:ea:
ca:7e:86:72:47:7f:ef:4c:60:75:5d:70:18:ad:b7:
06:72:86:d5:03:d0:f6:e7:a9:66:a9:c2:2e:47:d6:
e0:a9:d5:49:48:23:eb:08:dc:31:3c:d6:e1:d7:af:
fb:6c:a1:e7:2f:ff:49:50:97:cb:cb:9c:2e:17:5e:
22:9d:53:7f:16:2b:46:dc:47:bd:12:08:cb:cc:fd:
66:b2:58:ec:0a:2b:2d:b8:7d:74:6c:6f:df:fa:d8:
64:0f:ef:c0:4f:32:37:87:f3:64:ba:47:56:ae:26:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:7A:37:CB:7D:E6:DA:87:34:5E:AA:61:AB:60:E6:4D:D6:61:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/057636be-53d3-33be-86cc-79dd80d5e92f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:1d:ac:1a:f4:d5:31:5e:af:ce:79:41:af:af:e3:4d:0b:2e:
e3:81:39:27:24:9f:c2:f7:a1:94:fd:59:57:2f:4a:c5:21:9e:
f6:85:70:fd:74:3b:17:7a:55:91:1f:95:23:e2:f5:d7:b5:b5:
33:98:6a:11:67:fc:82:5a:2c:3a:94:25:73:93:b4:e6:ea:b1:
9c:c9:20:66:ad:d6:f5:6f:d8:45:85:4f:bd:82:f0:51:e0:c8:
bc:2b:08:3e:bc:ca:3e:ce:d7:fd:9d:0b:28:fa:23:83:c1:2b:
ba:b3:5f:7d:58:ff:f5:07:74:36:d5:09:06:e8:fd:09:f5:fd:
88:74:f4:48:43:ae:6a:6c:7c:36:89:e0:c9:ea:4c:51:2f:66:
33:77:1e:dd:b3:07:d6:c7:12:bc:49:40:3c:f9:d8:c2:ce:aa:
55:f5:40:7e:b5:c9:76:b2:15:88:1e:d2:06:3c:9d:cc:9f:98:
e7:20:fa:b0:53:c3:e6:53:62:21:92:fe:22:d0:70:54:86:4b:
ec:e5:6d:f3:00:f3:aa:94:92:44:e2:e5:cd:f0:5d:76:a3:0d:
6d:f8:bb:ae:03:b3:76:ae:17:96:5b:f1:b5:16:1b:bb:25:37:
47:96:6f:f5:81:45:5b:c6:0f:89:c5:db:e8:59:ff:00:de:21:
2d:8a:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:33 2025 by rpki-client