Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa
File: 3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa (raw, json)
Hash identifier: dn3xaM0+9IBay2hRefdacXT3trcWIXxZimIy2UNi0HU=
Subject key identifier: 46:93:5F:83:BB:39:42:E7:CC:5F:67:3E:90:BE:F7:1F:43:EE:80:74
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584917DC2E151884D39A06BB2580
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 30238
IP address blocks: 139.138.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:2e:15:18:84:d3:9a:06:bb:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=70eee223-b2a8-4067-aa53-45f25b2be873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:43:0e:49:2b:83:de:c1:4b:81:fd:bf:4e:
15:49:f3:03:0e:11:b2:6e:3f:f4:c6:5f:87:2e:f5:
e8:76:cd:85:ef:da:c9:ee:ee:32:1c:e1:be:ef:51:
9a:b0:e3:b3:57:a9:29:d2:d3:2c:e3:8b:86:4e:77:
11:33:b8:42:c6:6c:b5:bf:17:cd:7f:2e:1a:46:e8:
15:74:02:26:ed:2d:de:f0:04:26:be:c0:09:b8:3a:
0f:a8:d4:9f:17:bb:91:19:ff:c6:68:3d:c2:02:9c:
c9:ec:ef:c5:c3:d7:f6:c9:53:3b:f1:d6:b1:12:0e:
f4:98:e9:2e:bf:b4:a2:56:40:d5:66:16:09:b4:cf:
09:d8:6b:d8:71:16:29:37:b2:0c:a1:d8:8d:5a:d9:
9c:ca:b8:4a:70:fd:18:b6:ba:a9:0f:a6:72:cf:13:
d0:b5:74:07:46:fd:41:72:b7:33:5d:08:42:43:23:
b1:99:72:a5:c5:81:28:e6:65:dd:21:55:11:99:2c:
7d:25:30:12:f9:91:91:c4:6e:29:45:4f:43:47:de:
86:21:46:a3:62:a5:e6:4b:6a:d5:80:9a:a0:2b:6a:
4f:75:2b:2b:3c:09:09:e1:0f:89:53:a0:b3:72:01:
d1:b2:d1:e7:54:2b:31:98:7e:a2:70:9d:c1:fb:a5:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:93:5F:83:BB:39:42:E7:CC:5F:67:3E:90:BE:F7:1F:43:EE:80:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3e5e62b8-f45b-306d-9ae2-0aae3f66163a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:89:fc:64:28:07:9c:cd:8e:c0:c5:e2:e4:ec:6e:7d:4a:9a:
7f:87:f1:90:ae:ca:f1:68:f5:98:40:cf:68:5a:2f:47:54:21:
f0:f5:9d:43:88:7a:bd:60:63:c8:9b:50:8b:a7:2f:3c:10:f8:
c7:a2:0c:3b:4d:e2:ed:18:96:07:d0:6c:1f:70:61:c0:af:f3:
0c:2c:bd:c4:7b:c1:76:d5:3d:82:cc:fa:24:12:fe:14:60:c5:
f6:23:46:34:14:88:a3:e4:ac:b9:f9:a3:f3:a1:b1:5f:a3:e2:
df:e4:b8:df:cb:27:c2:0c:58:65:12:fb:e9:a7:3f:a5:71:21:
f8:2f:48:22:17:99:30:a7:b9:f7:cf:fe:b4:91:97:51:f4:5e:
ca:96:89:b3:e5:b5:4a:50:a6:17:07:0f:3a:4d:db:9f:92:f5:
1c:f2:18:89:8c:b4:c8:8b:0f:c5:98:93:1c:5b:31:de:f5:a9:
88:20:44:2a:5b:cc:a3:db:a6:dc:0d:58:ea:b5:48:46:b1:04:
e3:99:c9:27:e7:37:2a:7a:04:9e:27:f1:84:35:34:85:62:69:
50:fa:3d:62:d7:28:b6:49:26:f9:69:ee:07:e2:ee:7d:aa:a3:
e1:6d:01:06:25:d3:eb:38:95:91:42:c3:cf:f6:7f:77:97:31:
c4:86:a0:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3C4VGITTmga7JYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzBlZWUyMjMtYjJhOC00MDY3LWFhNTMtNDVmMjViMmJlODczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/9DDkkrg97BS4H9v04VSfMDDhGybj/0xl+H
LvXods2F79rJ7u4yHOG+71GasOOzV6kp0tMs44uGTncRM7hCxmy1vxfNfy4aRugV
dAIm7S3e8AQmvsAJuDoPqNSfF7uRGf/GaD3CApzJ7O/Fw9f2yVM78daxEg70mOku
v7SiVkDVZhYJtM8J2GvYcRYpN7IModiNWtmcyrhKcP0YtrqpD6ZyzxPQtXQHRv1B
crczXQhCQyOxmXKlxYEo5mXdIVURmSx9JTAS+ZGRxG4pRU9DR96GIUajYqXmS2rV
gJqgK2pPdSsrPAkJ4Q+JU6CzcgHRstHnVCsxmH6icJ3B+6XgUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaTX4O7OULnzF9nPpC+9x9D7oB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2U1ZTYyYjgtZjQ1Yi0z
MDZkLTlhZTItMGFhZTNmNjYxNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4okMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuJ/GQoB5zNjsDF4uTsbn1Kmn+H8ZCuyvFo9ZhAz2haL0dUIfD1nUOI
er1gY8ibUIunLzwQ+MeiDDtN4u0YlgfQbB9wYcCv8wwsvcR7wXbVPYLM+iQS/hRg
xfYjRjQUiKPkrLn5o/OhsV+j4t/kuN/LJ8IMWGUS++mnP6VxIfgvSCIXmTCnuffP
/rSRl1H0XsqWibPltUpQphcHDzpN25+S9RzyGImMtMiLD8WYkxxbMd71qYggRCpb
zKPbptwNWOq1SEaxBOOZySfnNyp6BJ4n8YQ1NIViaVD6PWLXKLZJJvlp7gfi7n2q
o+FtAQYl0+s4lZFCw8/2f3eXMcSGoPg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:45 2025 by rpki-client