Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
File: 1a850553-c1f9-3561-bb79-65835fe4fee4.roa (raw, json)
Hash identifier: WLqazEn1EVb8Bzy8NdvWsGjOjPYG/+e3iY2IcrPcmqQ=
Subject key identifier: 34:D6:35:93:48:44:4D:7B:E0:E8:DB:28:7F:27:2D:94:51:5F:52:2C
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858494E2EB34B2F2F303240C22880
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 30215
IP address blocks: 139.138.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b3:4b:2f:2f:30:32:40:c2:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=5d8fb94f-a3ef-45e8-b3cc-c999b8ca9c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:39:63:30:24:07:51:02:77:d8:fe:0d:2d:
94:9c:88:f2:86:7d:14:59:be:19:35:1c:4a:ec:18:
00:9a:b3:69:a8:70:95:9d:ee:5b:11:69:b2:bf:e8:
f9:db:6e:28:d8:0d:13:5a:c5:a3:8f:70:fc:7a:32:
b7:26:77:46:d2:9b:e0:9b:62:9b:59:d9:b9:8d:41:
9c:b7:72:92:fc:31:c9:a6:5d:fe:86:17:f8:d6:48:
84:e1:72:77:e7:41:22:61:a6:2a:73:38:1f:8d:d2:
a1:cf:ff:3d:cb:a3:4b:35:c8:2d:5b:cd:96:4a:61:
4c:66:57:93:72:07:e9:90:42:f4:e0:c3:8a:02:7c:
57:d4:4a:79:7a:20:9e:ba:33:db:22:dd:a0:78:58:
3f:5f:0e:48:50:d8:fc:a9:8b:0a:22:0a:7d:fd:90:
58:b8:90:20:fa:c9:90:b2:22:a4:af:dd:b5:a5:b8:
ac:2e:ce:ea:20:a1:8f:de:a6:37:c7:1d:09:f0:83:
72:52:1b:cf:64:9b:d3:9e:90:90:54:2d:ad:51:f9:
d2:0f:af:44:26:95:e5:08:d5:19:53:1f:d2:70:ac:
09:10:5d:e5:72:5d:68:fd:55:f5:79:16:ab:b9:e5:
0e:3a:c4:18:57:ff:47:53:64:c4:a2:5b:87:e5:cb:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:35:93:48:44:4D:7B:E0:E8:DB:28:7F:27:2D:94:51:5F:52:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1a850553-c1f9-3561-bb79-65835fe4fee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d2:45:1f:07:3b:67:9c:e1:25:a2:db:e7:77:99:7e:c6:56:
16:1e:5d:e1:8d:53:e0:55:59:0b:e6:8c:3b:c3:70:f9:4f:08:
70:44:96:f8:55:75:8a:37:1f:f9:fa:f8:66:42:dc:95:70:ff:
59:46:a3:f1:34:1e:2e:22:cf:8d:a2:67:5a:8a:e5:cb:f9:c5:
87:e5:de:1f:04:3c:77:fc:9a:88:48:04:be:e1:40:7a:d9:75:
c4:7f:f8:be:2e:88:dd:c3:a1:33:91:7b:84:fe:68:a0:96:0a:
c1:58:7d:08:3d:82:87:2e:cd:08:5b:a9:28:03:fb:03:52:84:
3c:d4:67:e6:7c:e1:36:88:c4:73:62:17:af:1f:96:54:94:0a:
c1:54:c0:7d:1f:85:6c:d3:94:d2:bd:ac:7d:e5:15:b7:50:1f:
84:77:19:10:de:f4:07:c5:f9:5f:f4:a5:67:71:ea:7b:32:23:
48:29:5d:82:fe:6d:e1:7b:74:3d:55:4e:96:d7:86:32:e0:f3:
5a:96:b1:c9:38:8a:ae:b7:74:10:62:42:89:df:f9:56:c5:fe:
69:32:26:41:31:4d:0e:04:62:53:ad:ef:b1:91:94:0a:80:c7:
76:0b:1a:d3:4f:3e:10:0b:9e:65:9d:91:8a:36:40:b9:d4:8f:
37:bd:b0:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrNLLy8wMkDCKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
NWQ4ZmI5NGYtYTNlZi00NWU4LWIzY2MtYzk5OWI4Y2E5YzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntw5YzAkB1ECd9j+DS2UnIjyhn0UWb4ZNRxK
7BgAmrNpqHCVne5bEWmyv+j5224o2A0TWsWjj3D8ejK3JndG0pvgm2KbWdm5jUGc
t3KS/DHJpl3+hhf41kiE4XJ350EiYaYqczgfjdKhz/89y6NLNcgtW82WSmFMZleT
cgfpkEL04MOKAnxX1Ep5eiCeujPbIt2geFg/Xw5IUNj8qYsKIgp9/ZBYuJAg+smQ
siKkr921pbisLs7qIKGP3qY3xx0J8INyUhvPZJvTnpCQVC2tUfnSD69EJpXlCNUZ
Ux/ScKwJEF3lcl1o/VX1eRarueUOOsQYV/9HU2TEoluH5ctTGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTWNZNIRE174OjbKH8nLZRRX1IsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMWE4NTA1NTMtYzFmOS0z
NTYxLWJiNzktNjU4MzVmZTRmZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4ocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvSRR8HO2ec4SWi2+d3mX7GVhYeXeGNU+BVWQvmjDvDcPlPCHBElvhV
dYo3H/n6+GZC3JVw/1lGo/E0Hi4iz42iZ1qK5cv5xYfl3h8EPHf8mohIBL7hQHrZ
dcR/+L4uiN3DoTORe4T+aKCWCsFYfQg9gocuzQhbqSgD+wNShDzUZ+Z84TaIxHNi
F68fllSUCsFUwH0fhWzTlNK9rH3lFbdQH4R3GRDe9AfF+V/0pWdx6nsyI0gpXYL+
beF7dD1VTpbXhjLg81qWsck4iq63dBBiQonf+VbF/mkyJkExTQ4EYlOt77GRlAqA
x3YLGtNPPhALnmWdkYo2QLnUjze9sPA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:30 2025 by rpki-client