Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f542010-5a39-36be-b1c4-fcc7151a6872.roa
File: 0f542010-5a39-36be-b1c4-fcc7151a6872.roa (raw, json)
Hash identifier: iXZwcAZyOl8pdw6Pk/4dJyjjsS0Suo5Ihv93lIPm9mE=
Subject key identifier: AB:52:A9:B0:65:1F:58:EA:84:9D:92:71:E1:2C:F6:3D:33:7F:CC:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D4302456840CAFD5DBF73700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f542010-5a39-36be-b1c4-fcc7151a6872.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:30:24:56:84:0c:af:d5:db:f7:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=02897667-7c01-4997-950f-33a23b314d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:cd:aa:47:0b:e0:54:5e:c8:21:52:2e:53:
80:a9:f8:93:b3:f7:69:c1:2e:64:63:f7:23:3f:6c:
d2:50:d4:a2:4b:72:d4:ba:27:f1:8e:9a:1c:12:87:
20:d6:d9:4e:0e:01:28:bb:2f:41:5e:57:08:21:84:
de:1f:6e:f4:ab:c0:23:e5:db:d1:69:2c:7c:b0:7d:
99:77:63:88:3f:d2:f8:99:90:60:2f:fc:89:d0:08:
51:1c:14:fc:e2:ac:b2:2a:ba:c2:75:09:ba:3b:10:
16:59:6e:08:ac:5d:54:ce:da:05:8b:16:39:88:0b:
19:ca:9f:f3:0a:43:17:d1:14:ee:13:db:cf:0a:59:
46:b8:aa:0c:db:e2:f9:f6:06:13:ef:dc:e2:78:31:
80:5a:ba:f0:a5:ed:b2:43:3e:11:3e:c3:8b:28:19:
b6:7f:bc:c0:85:20:06:a7:40:87:87:2d:c1:c4:2f:
51:5c:26:a0:83:a7:2f:dc:dd:9f:e1:9d:ef:6a:8c:
0f:d4:d0:82:dd:57:17:28:7a:96:d7:5b:2f:d7:f2:
e3:40:a7:a9:92:10:4e:da:75:5d:df:bf:02:b1:a0:
17:2b:0d:d8:d2:d8:e3:90:ca:d1:97:d8:1a:fd:74:
cd:fa:30:76:5a:ff:fd:4e:fc:1c:50:f9:d1:dd:78:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:A9:B0:65:1F:58:EA:84:9D:92:71:E1:2C:F6:3D:33:7F:CC:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f542010-5a39-36be-b1c4-fcc7151a6872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:09:c0:77:38:85:36:40:59:e5:07:f3:cb:97:99:ba:d6:58:
f2:ed:72:52:6d:90:b3:14:a6:23:97:60:10:96:1f:2c:9a:3e:
0c:90:f0:73:a7:de:0e:a2:ce:40:f2:f2:db:cb:1a:28:d9:55:
f0:a5:09:e1:65:1b:91:4c:2f:f3:5c:6a:3d:ab:43:e9:ee:e0:
2d:77:95:b9:d6:36:aa:ab:f2:e4:04:3e:06:8d:80:2d:22:32:
63:b3:8e:cc:af:b9:a1:59:d6:05:a9:b0:68:7e:37:f2:cc:b5:
ea:a8:c5:d8:4e:ae:11:b2:e0:a6:ca:6a:13:52:c7:c0:51:b6:
55:e4:be:92:d3:e5:1e:99:80:0f:25:47:a1:c1:a9:ad:f0:31:
4f:8a:47:53:53:51:fa:8e:15:42:1a:3b:8a:60:f5:5c:c3:5b:
34:30:fc:f8:7b:70:de:e9:24:47:d9:bc:bc:77:5f:84:2e:65:
07:19:9b:fd:3a:29:e8:a8:f7:ab:ac:b9:7d:81:b2:bb:8a:8e:
4c:9d:99:a1:d7:1c:b8:6c:03:c0:69:2e:74:d1:18:49:70:a6:
a7:0b:bf:8e:48:88:8c:9c:ba:60:82:b0:92:13:fd:bd:88:da:
a0:9e:8c:cc:f5:3f:b7:25:16:d9:29:01:4a:0b:ca:e9:70:8c:
98:36:08:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDUMCRWhAyv1dv3NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNjEyMDAwMFoXDTIzMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk
MDI4OTc2NjctN2MwMS00OTk3LTk1MGYtMzNhMjNiMzE0ZDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHnNqkcL4FReyCFSLlOAqfiTs/dpwS5kY/cj
P2zSUNSiS3LUuifxjpocEocg1tlODgEouy9BXlcIIYTeH270q8Aj5dvRaSx8sH2Z
d2OIP9L4mZBgL/yJ0AhRHBT84qyyKrrCdQm6OxAWWW4IrF1UztoFixY5iAsZyp/z
CkMX0RTuE9vPCllGuKoM2+L59gYT79zieDGAWrrwpe2yQz4RPsOLKBm2f7zAhSAG
p0CHhy3BxC9RXCagg6cv3N2f4Z3vaowP1NCC3VcXKHqW11sv1/LjQKepkhBO2nVd
378CsaAXKw3Y0tjjkMrRl9ga/XTN+jB2Wv/9TvwcUPnR3Xi4LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtSqbBlH1jqhJ2SceEs9j0zf8yxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGY1NDIwMTAtNWEzOS0z
NmJlLWIxYzQtZmNjNzE1MWE2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUJwHc4hTZAWeUH88uXmbrWWPLtclJtkLMUpiOXYBCWHyyaPgyQ8HOn
3g6izkDy8tvLGijZVfClCeFlG5FML/Ncaj2rQ+nu4C13lbnWNqqr8uQEPgaNgC0i
MmOzjsyvuaFZ1gWpsGh+N/LMteqoxdhOrhGy4KbKahNSx8BRtlXkvpLT5R6ZgA8l
R6HBqa3wMU+KR1NTUfqOFUIaO4pg9VzDWzQw/Ph7cN7pJEfZvLx3X4QuZQcZm/06
Keio96usuX2BsruKjkydmaHXHLhsA8BpLnTRGElwpqcLv45IiIycumCCsJIT/b2I
2qCejMz1P7clFtkpAUoLyulwjJg2CLI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:32 2025 by rpki-client