Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/321c561d-51a0-3a76-8a68-30bdda1dc325.roa
File: 321c561d-51a0-3a76-8a68-30bdda1dc325.roa (raw, json)
Hash identifier: rTOFjtT4EpGSjW+RqmiKr0OMxjdjNGwVxbw/0MOOwjE=
Subject key identifier: BC:77:64:03:F9:81:9D:4F:BE:3B:22:F0:90:63:2F:D6:AC:DC:51:28
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8E5EC3E3DE9251A3C9D43000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/321c561d-51a0-3a76-8a68-30bdda1dc325.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 139.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8e:5e:c3:e3:de:92:51:a3:c9:d4:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=aa8df09c-7b04-4023-ac90-08976f29d02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:f5:2b:0f:45:d9:46:cd:aa:af:31:3e:c4:
48:bd:99:3f:98:64:28:0c:1b:8f:cd:8f:2c:01:21:
67:65:28:c6:9b:6b:b6:3c:a6:ad:aa:ed:f5:1e:3b:
ab:d4:d4:4d:8e:8c:14:16:bf:00:3e:2a:0f:77:01:
28:74:83:ee:c9:60:61:b5:ee:a5:d6:e6:f7:1a:08:
79:f5:6d:d6:79:54:bb:47:df:9b:16:7b:f1:be:ec:
c2:30:23:51:57:49:16:6c:5d:00:80:bf:6f:33:ff:
fc:ea:7f:d3:c8:8b:96:c8:51:ef:7b:61:ee:3f:d2:
26:2f:87:68:a1:24:87:c6:de:67:83:d0:cd:79:a5:
63:14:fc:d2:dc:f6:f0:8b:00:75:3d:a0:0f:67:fb:
3e:c1:dc:aa:a8:e3:70:93:0d:9e:01:f3:bd:58:f1:
8e:4b:89:cc:d7:88:a8:0f:47:2c:41:41:27:9b:35:
61:e3:2e:bc:53:4b:be:92:53:44:6a:4a:90:db:a4:
f7:21:e8:53:31:11:b6:23:e8:6a:3d:b8:1a:47:3f:
56:ee:0a:84:80:3d:f3:fc:2a:d7:ca:46:06:ff:b3:
b5:db:ba:7b:e8:46:6d:ae:67:c7:f9:d3:19:b8:08:
b4:19:f2:99:00:b9:9f:f2:74:8d:51:7c:7b:d6:36:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:64:03:F9:81:9D:4F:BE:3B:22:F0:90:63:2F:D6:AC:DC:51:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/321c561d-51a0-3a76-8a68-30bdda1dc325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.73.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:45:e4:e4:b3:47:de:a0:1b:78:c6:87:b1:a6:9a:6f:43:ca:
48:c5:56:5b:e0:23:e7:96:4a:34:18:03:77:a3:1a:11:9e:06:
7d:87:3d:1e:74:bf:be:b9:a5:af:23:dc:5e:4c:67:ee:77:a4:
25:d2:45:4d:e7:a5:a1:99:b6:b0:e0:76:d0:cf:f3:26:e6:6e:
54:22:f6:4f:75:9f:a2:4c:63:0b:b1:18:b9:b1:76:7e:46:6a:
32:99:97:28:f7:fc:2b:88:04:6c:0f:88:a2:98:4f:36:70:7d:
4f:76:34:90:1c:8a:74:39:de:1d:c2:16:37:82:8a:3f:e8:87:
03:91:42:c0:9b:bf:6e:14:bd:05:d9:b8:52:73:cd:8e:5c:71:
7e:bc:0e:45:eb:3d:4c:5f:6b:14:ee:41:9c:3f:d4:af:63:cc:
38:c8:c9:dd:51:a1:bd:8f:c8:4a:02:65:3f:ed:aa:e0:bd:e9:
6c:87:ff:c5:2b:55:b2:ae:ab:a4:28:84:c5:4e:f2:1f:81:ab:
1f:cb:81:67:d9:4c:40:05:f8:9c:f1:56:e6:7c:7c:e1:8c:38:
a2:6f:8f:a4:cb:03:30:c3:52:6e:2e:88:e1:ce:b3:e7:5d:c0:
e0:e3:95:39:af:13:c8:28:07:1d:34:f5:33:81:0d:c9:10:2e:
46:6c:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:13 2025 by rpki-client