Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa
File: ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa (raw, json)
Hash identifier: 9HXxjAFmsB0AfzcpPdQFhffdNFCuFlOAOKaXkR69s9k=
Subject key identifier: EE:20:FD:81:39:13:76:E9:94:D6:58:8C:04:3E:38:D5:49:0D:A9:DB
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD04CAAFCC518662C22B8
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 139.138.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d0:4c:aa:fc:c5:18:66:2c:22:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=d3cebf00-ba05-43ea-9029-94d5295fa823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:f7:b8:e1:e0:71:c0:ad:08:b8:8d:95:33:
62:d2:7f:93:9b:bc:8b:d9:be:de:19:ba:0c:a4:42:
b6:51:13:45:48:d1:b5:c4:12:0d:39:cd:05:6c:11:
91:1f:ca:60:f3:8c:9e:d1:db:87:f9:41:d0:2e:fe:
a8:1d:88:e3:09:18:b7:47:81:c6:1c:21:a3:19:39:
be:ef:26:73:8d:5d:16:4b:2d:8b:10:7c:87:11:e3:
a3:a7:ad:45:8c:1f:34:23:ee:05:f2:5b:c3:75:9a:
84:bd:99:81:8a:2c:44:35:bb:3d:a4:82:c0:80:26:
be:bd:2a:f7:90:a5:6a:ff:3c:41:af:16:d7:64:69:
6e:64:bd:2f:c5:2c:14:0f:4b:37:50:4f:9f:66:b7:
b1:9f:6e:3e:49:3e:5b:7e:06:09:20:a2:30:68:76:
20:f9:3f:99:36:20:a6:a6:01:d7:9f:f3:b3:b8:fe:
a4:b1:76:b6:55:c2:d4:e4:e4:0b:a2:9d:5e:da:d0:
72:8c:c4:c0:9f:64:17:ea:f2:a1:c3:12:c0:91:2c:
9a:d3:6c:bb:ec:99:93:54:8b:c4:97:9c:bd:da:ed:
5b:cc:de:63:ab:0c:86:4f:0f:9a:53:ac:f6:40:2c:
3b:3d:12:7e:44:6e:81:00:24:5f:cb:9f:93:67:bb:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:FD:81:39:13:76:E9:94:D6:58:8C:04:3E:38:D5:49:0D:A9:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ab43cf20-b0da-39b7-92a9-9b5821633c2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:cb:f6:f4:6c:ec:eb:a7:23:dd:37:1c:eb:05:29:62:05:fb:
c6:43:ca:d7:62:81:70:95:93:1b:a3:9e:2e:1a:8d:5a:ad:1c:
4a:cb:f9:07:51:2d:1e:8d:18:87:2e:4e:1f:0c:93:d3:35:74:
05:e9:89:80:85:53:d5:39:08:5f:f9:e6:46:b2:c1:76:c3:b2:
c8:04:f3:e9:a4:e8:5c:b0:5f:0d:61:38:13:99:8e:a3:91:7b:
79:0e:6b:8c:65:82:3b:6a:38:c0:ae:7d:1d:4b:7c:f6:63:65:
65:bd:98:92:81:46:fd:54:a1:a7:f4:2e:c4:c1:2c:9d:39:47:
1a:2b:d7:af:28:43:33:57:33:85:7d:20:c7:fb:5e:4e:d7:2c:
73:5a:31:79:dd:69:aa:a8:81:a4:b5:5f:3e:12:9a:61:87:de:
99:08:1c:26:32:93:53:e0:2c:2b:7c:dc:88:fd:91:aa:ab:64:
74:c8:5a:a7:e0:6d:c4:2f:86:50:84:65:af:93:89:5e:73:d7:
21:80:02:98:68:b0:d2:22:d6:1d:cf:71:37:d6:90:88:5b:4e:
79:8e:82:1e:1d:7a:e1:1e:fd:26:e7:11:e9:fd:61:7c:ed:3a:
41:b3:ec:72:ce:4b:ec:be:27:c7:67:f1:ae:71:bf:68:61:ab:
62:2b:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:55 2025 by rpki-client