Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa
File: ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa (raw, json)
Hash identifier: 2hZyMmtc2hZ7uTbqOEKRpLNo+Uz4RksYd9QOT0nO2Rc=
Subject key identifier: D3:D1:3B:46:40:45:8E:DD:0F:6D:88:86:2F:D7:89:99:25:4A:7B:89
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD073BD082A1504CD6200
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 139.138.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d0:73:bd:08:2a:15:04:cd:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=55819cf3-21ec-4745-a2d1-a234f8cf6806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:8f:91:31:49:72:f9:e8:c5:e8:ba:03:0b:
d3:83:8c:a3:6f:01:73:ee:98:4e:62:26:c2:af:a0:
a1:a1:47:5e:8e:19:2b:6f:d6:3c:51:af:83:df:c9:
0a:94:cc:6d:e3:6e:37:19:84:0a:f0:11:26:b5:a7:
53:7f:55:3a:78:56:6f:03:1e:30:05:18:3f:b4:1a:
8a:2e:e4:58:df:f8:69:9e:fd:94:55:74:2d:da:5e:
5b:e7:22:9b:f3:d1:b1:aa:0f:37:0c:b0:f2:e0:de:
cf:78:cf:35:4c:16:c0:7a:2b:b9:d2:1d:1a:a4:9b:
25:a3:0e:96:0f:dc:97:dd:1c:2e:c1:95:34:a8:e1:
57:30:93:e4:f3:f0:6a:fe:6f:22:69:2d:71:33:b9:
49:e7:92:86:62:14:b9:67:f6:14:9c:79:c5:c6:52:
96:33:af:7a:ac:bc:de:03:82:a4:9f:47:14:8c:e3:
1b:c0:23:71:b8:95:62:61:a6:87:02:9a:85:d3:a7:
13:e5:31:e0:ad:3f:8b:ef:28:7f:95:48:20:a9:1a:
7a:c0:0a:f4:87:04:4f:c1:ab:1e:af:60:0c:7c:f0:
c8:8b:a1:a7:3b:7e:20:1e:3a:1f:09:b3:7f:1e:a8:
62:14:7e:4e:93:e5:8e:11:67:f9:17:bf:ca:15:c7:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:3B:46:40:45:8E:DD:0F:6D:88:86:2F:D7:89:99:25:4A:7B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba1959ca-c556-3a0c-941b-13e8b5f9aaa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:02:2c:60:3f:3f:8f:48:4c:16:c4:86:44:c3:0b:f7:81:fd:
32:61:4c:98:ed:09:b7:76:a8:6f:a3:1c:a0:ae:51:04:17:dd:
e4:42:ea:ec:39:d1:c5:2e:40:55:94:a6:25:2e:ee:2b:15:4a:
af:cf:9d:f4:ec:fc:43:7d:29:29:cc:0e:bb:8e:30:d6:e0:a5:
74:fb:8a:ab:82:32:80:b2:d0:c2:c4:0e:15:fb:1a:9a:b4:68:
f9:3e:46:0a:ad:bc:c2:f2:ee:56:39:12:59:44:f3:36:f5:8b:
30:49:c4:cb:1a:22:d4:f5:e1:87:24:6a:e4:47:63:64:85:e1:
59:9e:b3:0c:9f:34:cd:8a:cc:a9:3f:de:ef:dd:4c:68:06:b4:
a4:f4:a7:cd:cf:bf:45:f6:55:be:2d:e2:53:b4:4e:67:22:fc:
a8:2b:56:e1:e8:dd:6f:35:45:a4:30:35:3f:5e:21:66:81:f6:
ff:c1:a4:68:6e:fe:2d:e7:c8:b4:29:29:85:c5:05:9e:b9:33:
31:39:cc:df:15:2d:5f:92:30:b1:10:63:fd:10:8c:a9:aa:02:
55:d7:7f:94:48:c0:93:fb:04:7b:f2:ae:74:91:4f:e6:92:e1:
05:12:21:ab:f0:f0:3f:4d:7e:e9:28:77:24:64:1a:ce:a4:8c:
01:5f:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:10 2025 by rpki-client