Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1b660a09-b407-345f-b8ef-dcd2ae71cd9f.roa
File: 1b660a09-b407-345f-b8ef-dcd2ae71cd9f.roa (raw, json)
Hash identifier: NI9b8RPNMT8q0j+ZYNR41WFaay2vgGhTkDMZgCdPVko=
Subject key identifier: 86:1A:88:15:97:4E:B4:E1:01:D3:2D:7B:0A:47:94:3D:5D:8D:8E:BE
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD0B92096FC134E679680
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1b660a09-b407-345f-b8ef-dcd2ae71cd9f.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 139.138.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d0:b9:20:96:fc:13:4e:67:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=e47e8f65-48a0-4224-89c6-b39119f223bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:66:d4:53:88:b9:e0:a7:dc:86:8c:96:7c:
c4:b8:ad:a6:1b:b2:11:f2:8c:0f:49:71:63:b4:16:
ea:ad:34:22:19:76:ed:f7:fc:23:c9:fe:af:29:2d:
02:71:74:ad:35:24:da:b5:06:97:d2:af:6c:50:68:
08:f2:8f:fa:b3:cd:6d:1e:5f:a2:38:b7:e1:70:d9:
34:9c:e0:d3:97:43:95:c6:85:44:10:4e:23:14:03:
6f:48:35:10:03:c9:50:33:8e:b1:69:12:6b:ef:ef:
0c:dc:f8:39:be:56:8c:6b:a0:e9:12:2a:9e:5a:dc:
81:92:92:1e:ba:89:d4:d5:fd:c3:80:c3:7e:dc:bd:
ac:d7:28:2f:b2:11:a4:1e:13:2b:ea:e2:d9:22:13:
62:f6:02:e6:eb:6a:56:75:e7:53:4e:fd:5e:3a:8e:
3c:fd:b5:22:d3:e8:c8:42:da:d7:dc:37:50:59:ae:
f6:ca:44:43:09:9f:71:d2:e0:32:cd:a1:5a:4b:26:
cb:b6:15:a7:27:c0:c3:f1:b7:56:c0:63:db:e4:af:
9f:1f:c4:0f:cd:92:c0:38:5d:3d:47:73:08:e7:f8:
a0:ec:ed:9d:cc:b2:6e:36:f6:66:17:4c:c5:77:00:
9c:2f:03:75:13:eb:b3:45:fc:d0:92:08:b2:59:2b:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:88:15:97:4E:B4:E1:01:D3:2D:7B:0A:47:94:3D:5D:8D:8E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1b660a09-b407-345f-b8ef-dcd2ae71cd9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:bf:3f:7e:d1:e7:ce:37:dd:45:7e:c3:41:53:df:da:f7:8b:
03:55:4d:48:a6:32:00:76:44:ac:0e:3b:9b:d5:cf:f1:eb:9c:
2c:d0:ae:f6:d3:5c:1d:91:56:8d:51:2d:2b:0a:0d:9e:df:3c:
f2:24:27:a2:20:83:9a:e5:e2:1a:e0:c3:84:35:28:6a:c4:e8:
e6:89:0d:62:d5:82:79:69:c9:21:0e:1f:af:fd:e1:a8:ca:8c:
7a:fd:e4:57:69:98:20:a0:c0:8c:e5:55:d1:0e:61:8c:20:70:
66:28:6c:1e:28:51:e1:30:dc:a1:45:0a:b9:ac:0d:86:20:c3:
d9:4a:19:92:12:70:89:cd:42:87:ee:62:91:75:02:93:a6:45:
93:77:a6:73:d8:67:94:ca:cb:34:0f:8d:35:4f:7d:7c:ea:b3:
27:5d:d4:ec:56:e2:7e:4c:f5:37:1e:75:c2:66:74:6d:4e:ca:
21:44:36:3a:f9:49:8e:63:df:e7:c9:07:2e:fa:72:3b:db:24:
52:b9:b1:d8:90:10:6d:87:22:fa:d6:58:ff:04:6d:29:8e:f4:
d1:ee:2a:b9:44:0d:d8:45:8c:04:11:00:fc:33:0b:23:53:4e:
63:ff:f9:d1:f4:93:02:72:2b:70:09:4e:01:e8:ba:1a:68:3d:
41:61:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:43 2025 by rpki-client