Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: LCAja1+OhMxsfDd63eL4R/84CUYsQsfbT2b1nhk4flk=
Subject key identifier: 59:4A:8E:EF:51:D0:FC:40:88:B4:11:E3:5B:9E:5E:33:36:27:D2:28
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 19501B9D7940BF936D72369B77A1E97CB6530D4B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61138.roa
Signing time: Thu 23 Jan 2025 22:11:31 +0000
ROA not before: Thu 23 Jan 2025 22:06:31 +0000
ROA not after: Thu 22 Jan 2026 22:11:31 +0000
asID: 61138
IP address blocks: 5.253.84.0/22 maxlen: 24
5.253.86.0/24 maxlen: 24
27.0.232.0/22 maxlen: 24
81.31.208.0/21 maxlen: 24
83.142.30.0/23 maxlen: 24
85.90.220.0/23 maxlen: 24
89.39.210.0/23 maxlen: 24
94.24.108.0/23 maxlen: 24
94.26.24.0/23 maxlen: 24
103.204.192.0/22 maxlen: 24
103.214.68.0/22 maxlen: 24
103.230.140.0/22 maxlen: 24
104.167.16.0/23 maxlen: 24
118.91.184.0/22 maxlen: 24
144.48.80.0/22 maxlen: 24
160.202.132.0/22 maxlen: 24
185.90.62.0/23 maxlen: 24
185.99.132.0/22 maxlen: 24
185.121.160.0/22 maxlen: 24
185.121.168.0/22 maxlen: 24
185.121.168.0/24 maxlen: 24
185.121.176.0/22 maxlen: 24
185.147.32.0/22 maxlen: 24
185.195.238.0/23 maxlen: 24
185.214.172.0/22 maxlen: 24
185.236.212.0/22 maxlen: 24
194.58.64.0/23 maxlen: 24
195.184.246.0/23 maxlen: 24
202.50.52.0/22 maxlen: 24
2a06:1280::/32 maxlen: 48
2a06:9f45::/32 maxlen: 48
2a06:9f46::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a006::/32 maxlen: 48
2a09:54c1::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
2a0d:d903::/32 maxlen: 48
2a0d:d904::/32 maxlen: 48
2a0d:d906::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:50:1b:9d:79:40:bf:93:6d:72:36:9b:77:a1:e9:7c:b6:53:0d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 23 22:06:31 2025 GMT
Not After : Jan 22 22:11:31 2026 GMT
Subject: CN=594A8EEF51D0FC4088B411E35B9E5E333627D228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:ca:1a:fe:0f:07:f5:5e:9d:ae:46:70:2e:
c3:0e:b9:32:49:e8:8d:23:cb:22:c2:40:e8:b9:01:
4e:5e:1e:38:c9:fa:74:f6:71:be:43:bb:9f:59:47:
28:f3:32:52:06:83:b5:f9:ff:99:12:89:5a:7c:3b:
7c:60:fa:ff:63:14:2f:8c:08:f1:aa:ae:53:d6:2e:
59:57:9a:41:8e:33:16:27:5c:3d:4b:1f:3e:97:6d:
e9:cd:cd:7d:91:47:e2:a9:d4:94:76:e4:4e:26:9b:
d7:f3:e4:0d:79:15:27:73:84:6c:5d:07:2c:a7:ad:
08:6e:b3:ec:04:47:34:2a:68:71:a4:2f:f7:91:81:
59:c0:35:e8:eb:7f:e3:98:c6:7b:2e:2d:1a:45:11:
cb:8e:90:9e:87:ac:dc:54:4a:56:bf:2a:38:91:d8:
cc:cf:5a:77:3c:af:87:85:f9:b1:f1:e6:97:aa:e1:
8e:16:7d:9a:ab:48:75:65:5c:26:83:6e:a0:73:ef:
9f:cf:3b:37:ee:21:95:fa:3a:6a:e5:f2:de:be:34:
8c:74:d6:06:66:be:ff:6e:08:08:96:10:0a:f8:ad:
b4:f1:b4:16:b0:16:5b:05:6e:60:43:31:d7:b6:9e:
23:41:99:3a:a9:d8:1c:1f:dd:b4:5f:53:47:32:ba:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:8E:EF:51:D0:FC:40:88:B4:11:E3:5B:9E:5E:33:36:27:D2:28
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
27.0.232.0/22
81.31.208.0/21
83.142.30.0/23
85.90.220.0/23
89.39.210.0/23
94.24.108.0/23
94.26.24.0/23
103.204.192.0/22
103.214.68.0/22
103.230.140.0/22
104.167.16.0/23
118.91.184.0/22
144.48.80.0/22
160.202.132.0/22
185.90.62.0/23
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.238.0/23
185.214.172.0/22
185.236.212.0/22
194.58.64.0/23
195.184.246.0/23
202.50.52.0/22
IPv6:
2a06:1280::/32
2a06:9f45::-2a06:9f46:ffff:ffff:ffff:ffff:ffff:ffff
2a06:a004::/32
2a06:a006::/32
2a09:54c1::/32
2a0a:6046::/32
2a0d:d903::-2a0d:d904:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:d906::/32
Signature Algorithm: sha256WithRSAEncryption
20:c5:69:72:1e:62:25:27:5d:e8:84:c1:77:74:d4:4c:a4:a3:
89:b1:26:fd:32:a8:3e:0b:c4:02:02:aa:fb:fd:33:5b:63:3f:
22:3b:f1:aa:c4:6b:cb:d1:4a:69:18:ce:87:d4:aa:b3:8d:19:
66:f4:6c:bd:53:56:b4:a1:42:83:f4:0a:0a:b1:ad:c5:ef:8e:
f3:51:8b:d0:cf:10:30:f1:9f:e7:8b:f6:f2:0b:6a:72:c0:9b:
d4:34:8d:a5:bb:cf:46:4f:a7:19:a6:0f:93:f6:69:2d:10:44:
ce:91:ab:c9:cf:e6:9b:ac:66:a2:01:07:8e:a5:33:bc:99:14:
a6:c9:9d:ad:1a:95:ef:8f:02:b2:cc:1b:da:a1:e2:29:41:55:
cc:44:f3:8b:66:c2:fb:f0:29:6f:6a:a9:72:8f:87:06:69:c6:
ef:b9:8c:73:b2:96:c6:7a:05:a3:14:cf:eb:ad:cd:3e:d7:a2:
d5:34:a2:a3:41:0c:af:5c:3c:7b:5f:b1:92:0a:e2:dc:62:8b:
2f:48:94:21:40:44:77:ad:c6:a7:56:10:e1:fa:b4:c2:33:6b:
57:61:66:9c:9a:11:28:df:c7:72:ef:0b:69:7f:58:bf:9a:24:
36:87:4a:81:6c:62:f2:d3:f5:27:b3:dd:dc:cc:cd:90:d1:9d:
95:e9:95:72
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUGVAbnXlAv5Ntcjabd6HpfLZTDUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAxMjMyMjA2MzFaFw0yNjAxMjIyMjExMzFaMDMxMTAvBgNV
BAMTKDU5NEE4RUVGNTFEMEZDNDA4OEI0MTFFMzVCOUU1RTMzMzYyN0QyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzMoa/g8H9V6drkZwLsMOuTJJ
6I0jyyLCQOi5AU5eHjjJ+nT2cb5Du59ZRyjzMlIGg7X5/5kSiVp8O3xg+v9jFC+M
CPGqrlPWLllXmkGOMxYnXD1LHz6XbenNzX2RR+Kp1JR25E4mm9fz5A15FSdzhGxd
ByynrQhus+wERzQqaHGkL/eRgVnANejrf+OYxnsuLRpFEcuOkJ6HrNxUSla/KjiR
2MzPWnc8r4eF+bHx5peq4Y4WfZqrSHVlXCaDbqBz75/POzfuIZX6Omrl8t6+NIx0
1gZmvv9uCAiWEAr4rbTxtBawFlsFbmBDMde2niNBmTqp2Bwf3bRfU0cyum2HAgMB
AAGjggLjMIIC3zAdBgNVHQ4EFgQUWUqO71HQ/ECItBHjW55eMzYn0igwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NjExMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggESBggrBgEFBQcB
BwEB/wSCAQEwgf4wgakEAgABMIGiAwQCBf1UAwQCGwDoAwQDUR/QAwQBU44eAwQB
VVrcAwQBWSfSAwQBXhhsAwQBXhoYAwQCZ8zAAwQCZ9ZEAwQCZ+aMAwQBaKcQAwQC
dlu4AwQCkDBQAwQCoMqEAwQBuVo+AwQCuWOEAwQCuXmgAwQCuXmoAwQCuXmwAwQC
uZMgAwQBucPuAwQCudasAwQCuezUAwQBwjpAAwQBw7j2AwQCyjI0MFAEAgACMEoD
BQAqBhKAMA4DBQAqBp9FAwUAKgafRgMFACoGoAQDBQAqBqAGAwUAKglUwQMFACoK
YEYwDgMFACoN2QMDBQAqDdkEAwUAKg3ZBjANBgkqhkiG9w0BAQsFAAOCAQEAIMVp
ch5iJSdd6ITBd3TUTKSjibEm/TKoPgvEAgKq+/0zW2M/IjvxqsRry9FKaRjOh9Sq
s40ZZvRsvVNWtKFCg/QKCrGtxe+O81GL0M8QMPGf54v28gtqcsCb1DSNpbvPRk+n
GaYPk/ZpLRBEzpGryc/mm6xmogEHjqUzvJkUpsmdrRqV748Csswb2qHiKUFVzETz
i2bC+/Apb2qpco+HBmnG77mMc7KWxnoFoxTP663NPtei1TSio0EMr1w8e1+xkgri
3GKLL0iUIUBEd63Gp1YQ4fq0wjNrV2FmnJoRKN/Hcu8LaX9Yv5okNodKgWxi8tP1
J7Pd3MzNkNGdlemVcg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:41 2025 by rpki-client