Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa
File: ba7363a2-8649-3b98-93b5-6f704982a180.roa (raw, json)
Hash identifier: 4AB/eL+sdq8SHK/H/LIy+ee6UZr2kwDjNUpqRz95zhU=
Subject key identifier: 9E:97:3C:90:71:D0:7F:B0:A6:CE:73:66:53:01:1B:3D:AA:7E:64:1D
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848960B58FF7CC0D47B3729DD80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 16417
IP address blocks: 139.138.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:58:ff:7c:c0:d4:7b:37:29:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=22267387-5be8-409e-ba1d-6899702325a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:fd:01:25:a8:15:f2:6a:3f:21:dd:d7:cb:
47:12:98:e6:f1:58:e6:1f:e9:f1:7e:24:a0:d2:eb:
e7:1e:86:e7:83:19:17:ae:9b:77:3c:a0:08:4b:72:
a0:d6:01:69:a4:10:50:93:28:e3:9e:9d:ee:4b:6f:
c5:80:95:b2:d2:e3:38:cf:e1:2a:11:0d:3d:ea:3f:
ee:d9:cc:d4:cb:4f:62:97:16:db:33:73:9f:2e:45:
9e:eb:79:7a:f1:bd:06:e0:26:3a:9e:9c:30:c3:2a:
58:cf:13:08:a7:60:fe:58:07:8c:8c:c4:f8:b4:fb:
8d:51:aa:3a:08:e9:72:db:67:a7:91:1f:67:4d:cd:
d2:bc:1a:dd:c6:9a:e2:64:e1:a3:60:89:66:83:37:
ce:86:24:01:75:4a:d3:24:b6:19:1c:62:ac:55:c1:
81:8b:ef:fb:e5:7e:40:c3:6a:39:01:c1:7f:c2:42:
49:51:8e:6a:9e:b9:bb:5c:82:5c:62:e6:2a:7f:db:
17:e7:88:83:13:71:21:0d:a3:75:e4:eb:e6:28:d5:
c2:f3:4b:86:fc:c7:1b:68:e8:0a:83:28:d9:71:41:
43:04:c4:d5:65:61:1f:ab:21:02:25:8c:16:bf:37:
04:df:22:6e:60:2a:ac:e2:c8:f6:cb:16:f8:f6:4f:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:3C:90:71:D0:7F:B0:A6:CE:73:66:53:01:1B:3D:AA:7E:64:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ba7363a2-8649-3b98-93b5-6f704982a180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
139.138.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a3:39:98:b1:36:ce:66:de:97:58:62:cc:39:d2:d6:1a:7c:
da:b8:fc:b6:bf:0e:c9:11:39:a8:3c:46:2a:53:93:15:5f:02:
e2:1d:2d:41:77:f2:ae:7e:f8:7d:d6:07:98:1a:75:1f:8e:d8:
bb:a1:80:c0:8c:57:7b:d4:4f:f1:d4:d7:fb:de:b5:0b:c8:f0:
3a:a7:94:f3:04:42:64:7a:14:eb:4d:5c:2b:e8:70:a8:68:27:
85:32:2e:92:95:ee:a8:05:6d:33:13:84:4c:b3:d8:d5:de:6a:
d6:16:f8:4a:62:1d:35:a3:cf:65:75:81:a2:61:99:0d:74:8a:
ee:2b:09:94:93:83:03:07:f6:e2:82:cc:ae:75:d8:f0:76:a0:
e7:97:67:95:36:34:10:40:4b:09:9f:ac:70:ca:58:02:85:db:
98:b8:24:96:3d:63:78:04:92:ef:2c:ed:a5:b6:26:78:fd:b0:
1a:fa:c1:29:21:99:4a:02:47:06:5a:62:31:0f:ee:12:9c:53:
56:d0:b5:f1:07:34:c4:6d:e0:09:e4:c2:03:a1:dd:07:8b:c4:
5e:75:db:fe:dd:76:3c:e0:de:a0:85:38:64:77:12:f4:7e:47:
12:3f:42:c1:55:0e:d2:ae:c4:89:fd:bd:d5:7d:c1:69:3d:35:
e1:08:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:30 2025 by rpki-client