Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa
File: 32a203ee-55ea-3425-bf43-24b1958aa53b.roa (raw, json)
Hash identifier: IGSVQqYEVBOnESrXgn/nsdghJnFvmvJu2RePDuzWQPs=
Subject key identifier: 50:E7:EB:0E:E3:07:46:2A:70:78:D6:41:60:61:C3:9D:07:0F:D8:31
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE9883AEEB19D41B583EA0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 139.138.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:83:ae:eb:19:d4:1b:58:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=904ac9af-af89-47be-b20e-33f815afb1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:66:09:2e:93:f3:5c:ff:25:90:8b:07:70:
6c:6e:87:a1:3b:43:5a:3b:b7:5c:d9:bb:c2:07:5d:
b0:3b:94:9b:dc:b3:c4:ec:dc:31:24:63:15:a8:2a:
31:5f:f9:b8:dd:d1:8c:88:d4:f1:59:7d:44:42:85:
b2:cd:94:24:e4:3b:b6:f1:b2:53:33:92:93:dc:17:
71:67:cc:3e:a4:39:41:3a:79:f1:2b:34:27:7f:4f:
69:73:18:14:13:f7:76:6d:a4:7e:42:f8:c5:4c:a3:
ad:59:c5:30:36:37:2a:7c:37:42:7c:11:9f:f0:f2:
ea:84:13:ae:47:7a:93:a8:ec:c7:21:b3:a2:d7:c9:
24:cb:9d:82:63:23:2c:41:f7:e9:73:a3:30:ed:e4:
fc:83:1e:c5:04:9f:a2:85:dc:4b:1d:36:b3:d8:c2:
bd:20:ae:70:6a:54:55:82:af:a4:73:2f:b9:eb:71:
97:53:35:2a:78:fa:ad:a8:5a:10:92:51:b2:e6:b4:
15:ab:2d:3d:a1:8a:a2:1e:51:ad:fc:0d:51:41:e7:
9a:51:99:b1:9d:5b:2c:fc:d8:f7:ea:57:5f:8c:2c:
8a:80:e2:6d:7a:73:c9:44:5a:ad:b9:b0:da:83:39:
07:d4:fa:93:7b:73:09:85:9f:71:05:38:0c:c2:d9:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:EB:0E:E3:07:46:2A:70:78:D6:41:60:61:C3:9D:07:0F:D8:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/32a203ee-55ea-3425-bf43-24b1958aa53b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:6a:79:84:cf:f6:bd:c6:26:f4:0f:f6:58:b5:00:bc:6d:70:
25:10:68:8f:dc:fb:e5:6c:46:dd:0b:39:52:f1:dc:14:b6:de:
fa:ef:5c:b0:75:da:24:43:51:38:57:2a:f6:35:a6:43:26:7f:
ba:a8:12:71:ad:42:93:88:8b:92:aa:c5:9b:0d:bb:fa:90:ea:
22:7e:d5:6d:dc:96:f8:9a:18:67:44:02:3f:9a:48:98:f5:62:
66:3f:0e:28:c2:02:bc:82:89:af:10:40:9d:47:25:16:51:46:
b8:65:d0:42:fe:ab:1f:4b:70:14:44:0e:fe:1d:ad:17:c6:76:
69:48:3e:54:fc:d7:1d:d8:7c:0c:b1:01:e8:17:e7:82:ce:54:
b6:e1:f6:cf:dc:8a:85:6b:78:7f:51:12:7d:7c:5b:86:15:18:
e4:b3:2f:f0:88:fc:23:65:37:92:ea:c5:4f:b3:43:4b:50:e5:
d9:d8:ec:ad:93:d4:05:91:53:65:67:71:80:61:5c:b3:04:a5:
b5:76:2f:1c:80:c8:5c:6b:13:18:b2:a3:4e:f9:f3:6b:2d:84:
24:b5:12:e8:7d:06:2d:e1:b5:80:fc:3a:be:b9:e1:3a:a9:5c:
44:38:ad:1e:02:31:e2:8a:65:ce:23:19:0a:98:29:3b:7c:56:
d1:13:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:42 2025 by rpki-client