Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2398e1a3-7564-3aa1-a294-49bf62fc05dc.roa
File: 2398e1a3-7564-3aa1-a294-49bf62fc05dc.roa (raw, json)
Hash identifier: PMSiXpcD1ZnReyppFYeUgSxEnHhU1sF9swIo1/XkYVk=
Subject key identifier: CD:D6:89:51:AF:EF:2B:C0:22:FB:03:C4:0B:9B:19:E4:90:85:9D:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9B5722E8F9BC3F690BEAF180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2398e1a3-7564-3aa1-a294-49bf62fc05dc.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 6167
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:57:22:e8:f9:bc:3f:69:0b:ea:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=929780b1-9f88-478c-b40f-eca41841208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:e1:de:02:34:2f:37:50:dc:63:84:1c:9f:
81:85:61:6e:28:a9:21:9e:37:4d:74:6c:9e:37:c5:
c6:b0:ff:05:d4:9b:98:10:3c:d7:10:1c:91:20:98:
e7:c7:50:4d:bd:ea:83:a2:14:48:33:ae:d5:67:41:
1b:bb:52:b6:0a:7c:71:c6:f8:62:f4:06:53:f5:16:
ef:24:af:c1:50:3a:cd:bb:47:2b:fd:cb:cb:0f:35:
97:75:3b:9e:c5:32:a0:60:d7:1e:f8:41:b8:49:31:
de:0f:ab:e9:2f:d8:d6:21:c4:14:c1:08:53:af:df:
8c:e4:4b:08:1e:3e:ee:d6:6f:bf:17:d9:fe:6d:75:
ab:61:8b:45:32:7c:d4:32:f4:fa:db:c0:d6:0e:e1:
af:52:03:d2:e1:28:6f:c5:d3:23:ad:26:81:1c:60:
f2:7f:01:42:fe:d5:6e:20:d0:45:50:7b:73:0a:ec:
70:68:49:ca:19:49:6b:fd:32:a1:33:61:2d:a3:38:
34:31:5f:6a:42:4a:bc:1d:9b:30:59:76:fd:33:54:
92:8f:94:9f:45:79:22:f8:df:aa:b4:29:cb:cb:62:
59:0a:2f:a9:55:49:cd:73:52:22:96:9e:dd:49:71:
19:2e:2c:3d:89:2b:3b:7c:fa:29:c4:01:d2:43:57:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:89:51:AF:EF:2B:C0:22:FB:03:C4:0B:9B:19:E4:90:85:9D:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2398e1a3-7564-3aa1-a294-49bf62fc05dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:68:dd:05:12:09:c8:a7:b3:35:af:8a:31:fc:ea:31:58:ea:
36:93:75:da:72:2b:dd:30:33:61:9f:e5:11:bb:a7:56:38:25:
33:45:c1:7d:d0:24:83:dc:c4:20:69:8e:af:bf:c4:fc:18:bf:
50:f7:74:c9:67:de:b6:bb:3b:f7:fc:ce:45:96:77:c9:a8:71:
3c:25:b7:8d:49:fd:50:c1:db:f8:74:42:a3:ff:f2:48:91:aa:
88:f3:76:8d:17:36:4e:7e:6e:d2:cd:be:1f:0b:57:36:aa:dd:
9f:cb:bf:8e:25:7b:3f:d5:26:8a:a9:b4:6a:13:36:11:c4:cc:
95:7c:98:14:47:84:6b:6f:29:29:78:dc:fd:ac:d3:62:40:a8:
90:11:99:77:d4:55:d9:b1:73:3c:ad:5c:29:5d:d3:04:1f:b8:
f5:86:97:38:4a:e1:71:28:e7:13:60:1e:f6:d8:6e:5a:a4:3b:
ec:cc:f4:e4:e6:93:00:45:e1:07:6a:54:e7:96:e1:2b:16:17:
21:85:ce:07:04:8a:d9:42:c7:47:ad:66:9a:16:e4:7d:a6:30:
a8:7f:b7:50:39:e4:22:a0:4c:11:76:7c:50:ef:af:e3:ec:78:
00:1f:b0:db:0f:c9:ae:54:46:15:e0:e0:3d:0a:71:1a:07:eb:
01:20:d1:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+bVyLo+bw/aQvq8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
OTI5NzgwYjEtOWY4OC00NzhjLWI0MGYtZWNhNDE4NDEyMDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlADh3gI0LzdQ3GOEHJ+BhWFuKKkhnjdNdGye
N8XGsP8F1JuYEDzXEByRIJjnx1BNveqDohRIM67VZ0Ebu1K2Cnxxxvhi9AZT9Rbv
JK/BUDrNu0cr/cvLDzWXdTuexTKgYNce+EG4STHeD6vpL9jWIcQUwQhTr9+M5EsI
Hj7u1m+/F9n+bXWrYYtFMnzUMvT628DWDuGvUgPS4ShvxdMjrSaBHGDyfwFC/tVu
INBFUHtzCuxwaEnKGUlr/TKhM2Etozg0MV9qQkq8HZswWXb9M1SSj5SfRXki+N+q
tCnLy2JZCi+pVUnNc1Iilp7dSXEZLiw9iSs7fPopxAHSQ1eRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3WiVGv7yvAIvsDxAubGeSQhZ2eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjM5OGUxYTMtNzU2NC0z
YWExLWEyOTQtNDliZjYyZmMwNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpo3QUSCcinszWvijH86jFY6jaTddpyK90wM2Gf5RG7p1Y4JTNFwX3Q
JIPcxCBpjq+/xPwYv1D3dMln3ra7O/f8zkWWd8mocTwlt41J/VDB2/h0QqP/8kiR
qojzdo0XNk5+btLNvh8LVzaq3Z/Lv44lez/VJoqptGoTNhHEzJV8mBRHhGtvKSl4
3P2s02JAqJARmXfUVdmxczytXCld0wQfuPWGlzhK4XEo5xNgHvbYblqkO+zM9OTm
kwBF4QdqVOeW4SsWFyGFzgcEitlCx0etZpoW5H2mMKh/t1A55CKgTBF2fFDvr+Ps
eAAfsNsPya5URhXg4D0KcRoH6wEg0ew=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:04 2025 by rpki-client