Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fe77f46-db00-301a-bd25-ab2da1dc6437.roa
File: 2fe77f46-db00-301a-bd25-ab2da1dc6437.roa (raw, json)
Hash identifier: Ib4BjpCzwPVFImpAoxJr60wNvSpRwjgtWb6BVxbASE8=
Subject key identifier: 24:FF:99:B1:CE:FC:AB:9E:8F:3D:46:CD:90:F1:06:2B:EA:B9:8B:0B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E0A8CF5C16D41ECD4C24F2200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fe77f46-db00-301a-bd25-ab2da1dc6437.roa
Signing time: Thu 26 May 2022 12:00:00 +0000
ROA not before: Thu 26 May 2022 12:00:00 +0000
ROA not after: Fri 01 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 139.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:0a:8c:f5:c1:6d:41:ec:d4:c2:4f:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 26 12:00:00 2022 GMT
Not After : Jul 1 04:00:00 2022 GMT
Subject: CN=28ff8c10-c6b3-444f-89c3-ca6bc740f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:6f:9a:89:ee:4a:34:54:f2:e8:ab:a0:d5:
d7:39:ef:92:8e:75:7f:c9:0c:a2:41:5c:01:37:71:
0e:55:77:1b:a8:4b:19:4d:d4:c1:72:40:1f:39:5e:
c1:2b:8b:33:d6:39:56:f8:46:f2:4c:25:a2:9b:e0:
c0:65:be:14:78:a5:31:91:63:eb:7b:dc:53:51:91:
08:a6:2c:e0:b8:8e:e3:ed:be:6c:f6:85:05:69:46:
96:2e:fc:9a:8e:79:20:0a:02:5c:83:33:98:ac:99:
d1:2a:6c:b0:94:b4:a3:65:de:ce:f8:5f:87:3d:e7:
09:ce:19:8b:a5:ee:d4:54:6f:75:aa:b2:4e:d2:29:
e2:48:4b:fb:f3:64:cc:60:2d:26:ad:11:bc:3e:ea:
b6:5a:42:0c:c8:0b:5a:9e:7f:40:13:ed:2f:49:53:
b1:97:3b:b9:b0:7d:cb:72:43:d8:cb:57:f7:8a:3a:
6e:fb:0a:7a:03:d0:e1:02:0c:dd:96:ae:08:dd:32:
16:b5:33:3d:ed:05:b3:ac:a8:bc:4e:9a:8e:8e:77:
14:b4:70:4a:9e:fc:a4:b9:96:b5:d5:18:47:c8:5d:
74:91:7a:71:d6:51:b3:34:fe:34:a4:e5:4b:15:e7:
ae:b9:38:23:de:04:b9:1f:36:cf:c5:6c:44:ca:d8:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FF:99:B1:CE:FC:AB:9E:8F:3D:46:CD:90:F1:06:2B:EA:B9:8B:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fe77f46-db00-301a-bd25-ab2da1dc6437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e2:42:77:ef:0e:25:2a:7f:bf:a3:d2:09:b1:44:e0:c4:d3:
72:c9:7f:b4:58:5f:24:d7:af:06:a5:fd:2f:9d:6f:5f:5b:8e:
74:2b:db:af:d9:e9:f9:ab:fc:cf:7c:96:eb:a7:90:52:5f:cb:
66:e0:73:99:7a:ee:2e:43:e5:32:ed:02:3c:5c:16:e0:87:a0:
f8:e5:d0:ce:bc:ed:c7:23:d7:1a:f1:5d:ac:f5:d7:e3:37:e0:
6b:a2:a8:fa:4b:1a:b9:4e:3a:58:2f:b3:fb:20:d0:73:80:e7:
60:04:6d:09:30:16:01:9b:10:b1:8e:5a:ae:92:4f:bb:7d:a0:
ed:35:ab:28:be:d4:24:20:94:46:11:13:24:b6:6b:a2:a2:71:
e7:c4:29:29:d7:56:bc:da:d7:ae:c2:69:ae:7b:dd:e7:09:39:
b7:94:02:af:97:eb:34:17:20:b2:bf:c0:fd:fb:1d:1d:44:be:
fc:84:01:4e:c3:ef:d4:89:d1:1d:16:94:1b:e8:19:c6:b2:54:
ca:dd:a3:ec:e4:62:7d:d8:d4:43:d0:83:02:4c:e7:39:76:b8:
a0:e7:8b:e5:0d:c8:76:2b:50:e5:64:e4:e5:2e:9c:a5:f7:5b:
73:eb:bd:5e:cf:29:ec:cd:45:aa:18:39:ac:11:57:57:d7:3d:
fa:9e:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:45 2025 by rpki-client