Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa
File: 840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa (raw, json)
Hash identifier: yYg3W5Fa4+nePJPHTIhudgqeHA0yE72F0p+izS40cHs=
Subject key identifier: 90:F6:EE:EE:29:2F:EB:E2:A7:C1:EE:3E:81:FE:A8:00:A0:CA:9F:CA
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848960B58A7A2864CFB8E8A7740
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 16417
IP address blocks: 139.138.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:58:a7:a2:86:4c:fb:8e:8a:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=d86dde9b-09fb-473f-b2d3-28e45d47e767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:f4:ec:79:00:5d:f7:84:27:f6:72:b8:0f:
eb:4e:fd:af:9f:e5:62:2c:6c:f9:8a:93:53:25:5f:
c7:6e:b9:cc:b1:19:c4:ee:4e:cc:ff:94:bf:2b:aa:
35:71:a5:15:22:b4:b0:bc:f0:73:0e:56:ef:f6:f1:
f8:57:79:01:0f:18:7f:dc:6a:8b:6a:fb:30:fb:6f:
e8:59:16:3d:c9:7f:5e:ab:83:15:f1:60:1c:34:42:
77:94:7c:c6:37:86:4a:0c:60:eb:92:36:3e:30:5b:
09:9b:eb:fc:eb:16:02:64:23:db:78:29:fe:c0:22:
7e:bf:f7:db:1b:06:c4:f6:9b:b7:72:0a:c7:4f:44:
36:ed:cf:72:ee:9e:1a:bd:ac:85:23:a2:78:b7:24:
04:a5:81:d0:91:9a:63:82:c5:5e:b8:65:76:1a:50:
02:bd:93:21:40:28:27:2e:39:ff:69:58:19:1a:40:
e5:8d:47:4e:d5:ac:61:ef:8f:6a:71:00:02:03:3e:
0a:34:2d:cc:00:41:1e:c0:0a:29:aa:ed:e3:5f:c4:
92:c8:e8:5c:df:dd:43:a3:a8:e6:c7:37:fd:2f:89:
4e:ac:0a:ee:9a:a0:12:84:e6:64:b9:8f:98:cb:24:
35:b5:33:dc:9d:0e:4b:82:df:c1:a6:93:cb:90:42:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:EE:EE:29:2F:EB:E2:A7:C1:EE:3E:81:FE:A8:00:A0:CA:9F:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/840eebe7-dd14-3e7e-b8f3-fb4c5cdbcd3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:2c:b8:59:be:8b:0e:37:5e:6b:e5:04:25:02:41:03:ac:84:
44:44:bc:10:13:c2:03:87:f4:8d:65:a0:39:e0:77:09:38:3d:
40:35:ff:8e:4c:51:4a:e1:fe:72:29:dd:47:ae:75:05:8f:32:
f1:d5:f2:ed:93:1f:48:6f:74:bd:00:b9:86:25:ba:04:3b:85:
88:f3:ff:bc:fd:85:13:92:02:b7:c7:23:71:ca:3a:28:69:f6:
89:df:a8:fb:57:55:f0:21:26:62:8d:44:c4:2f:4f:d4:79:fa:
14:51:cf:c3:bc:91:6c:65:5e:50:71:c5:13:8b:41:c7:f5:a7:
1d:e0:56:fa:74:71:97:85:b3:54:37:2b:42:f5:49:81:b4:e5:
2e:11:00:8d:48:b6:e0:0b:e4:45:75:3d:9c:a8:3f:1c:2f:0a:
fa:33:d0:2f:19:32:35:23:ce:7e:bb:73:88:cf:81:6d:4e:b6:
ea:98:2e:85:e1:16:2d:d6:e3:a7:75:01:5f:d9:bc:da:1f:38:
85:a1:ae:45:92:0c:cc:e9:ee:db:d1:4c:d3:b1:e8:ed:2e:67:
e2:97:c1:c5:1a:2a:ed:1c:8c:c2:5d:42:0d:a0:d9:86:f9:ac:
7b:8d:a9:1c:e3:6c:5a:81:13:28:d7:8a:c9:fd:6c:91:00:5a:
9b:81:38:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1inooZM+46Kd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZDg2ZGRlOWItMDlmYi00NzNmLWIyZDMtMjhlNDVkNDdlNzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmej07HkAXfeEJ/ZyuA/rTv2vn+ViLGz5ipNT
JV/HbrnMsRnE7k7M/5S/K6o1caUVIrSwvPBzDlbv9vH4V3kBDxh/3GqLavsw+2/o
WRY9yX9eq4MV8WAcNEJ3lHzGN4ZKDGDrkjY+MFsJm+v86xYCZCPbeCn+wCJ+v/fb
GwbE9pu3cgrHT0Q27c9y7p4avayFI6J4tyQEpYHQkZpjgsVeuGV2GlACvZMhQCgn
Ljn/aVgZGkDljUdO1axh749qcQACAz4KNC3MAEEewAopqu3jX8SSyOhc391Do6jm
xzf9L4lOrArumqAShOZkuY+YyyQ1tTPcnQ5Lgt/BppPLkEJg0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJD27u4pL+vip8HuPoH+qACgyp/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODQwZWViZTctZGQxNC0z
ZTdlLWI4ZjMtZmI0YzVjZGJjZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4oZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0suFm+iw43XmvlBCUCQQOshEREvBATwgOH9I1loDngdwk4PUA1/45M
UUrh/nIp3UeudQWPMvHV8u2TH0hvdL0AuYYlugQ7hYjz/7z9hROSArfHI3HKOihp
9onfqPtXVfAhJmKNRMQvT9R5+hRRz8O8kWxlXlBxxROLQcf1px3gVvp0cZeFs1Q3
K0L1SYG05S4RAI1ItuAL5EV1PZyoPxwvCvoz0C8ZMjUjzn67c4jPgW1OtuqYLoXh
Fi3W46d1AV/ZvNofOIWhrkWSDMzp7tvRTNOx6O0uZ+KXwcUaKu0cjMJdQg2g2Yb5
rHuNqRzjbFqBEyjXisn9bJEAWpuBONg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:47:38 2025 by rpki-client