Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33defc1c-6ce8-362f-9fd2-e626ca1d9d3c.roa
File: 33defc1c-6ce8-362f-9fd2-e626ca1d9d3c.roa (raw, json)
Hash identifier: IMvGBwu8nIl3GXCjPE7TfmHn0nVlmELR176leuUQdD4=
Subject key identifier: E2:A7:A0:41:71:A9:7F:1C:88:EF:D1:2A:43:5F:6A:AD:EA:B0:71:CF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D92898A1F4C5C021BE6B0DC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33defc1c-6ce8-362f-9fd2-e626ca1d9d3c.roa
Signing time: Thu 14 Apr 2022 04:00:00 +0000
ROA not before: Thu 14 Apr 2022 04:00:00 +0000
ROA not after: Thu 19 May 2022 04:00:00 +0000
asID: 22394
IP address blocks: 139.56.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:92:89:8a:1f:4c:5c:02:1b:e6:b0:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 14 04:00:00 2022 GMT
Not After : May 19 04:00:00 2022 GMT
Subject: CN=4b4ab145-91c8-4b50-8a82-9937921de96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:de:24:ea:0c:d3:8b:af:dc:1f:81:c8:b8:
71:69:8e:ab:ab:d6:cf:23:26:b2:33:aa:70:c5:56:
66:f2:d9:a2:11:80:b3:77:d5:75:49:2f:9a:35:cf:
96:6a:60:88:fd:37:b7:30:6d:65:b5:cf:13:08:78:
42:ac:2d:1d:60:14:b6:7a:60:54:7c:31:61:96:19:
fe:81:a8:6c:88:e4:08:83:51:37:23:e2:95:7a:a2:
d9:e4:88:75:c3:ff:41:74:fc:81:ee:f9:72:f9:29:
34:72:ac:86:b0:f1:88:b5:dc:95:a0:ca:b2:01:d9:
23:3d:db:f2:40:f4:49:2a:ee:2f:11:3e:31:ab:80:
6f:91:d3:d2:ce:54:62:47:69:bd:8e:8c:68:5b:14:
3d:16:36:3f:90:4c:4f:dc:f0:3e:a5:c3:77:88:e1:
1c:84:f5:b4:00:68:99:e4:a8:55:42:f2:39:29:78:
c5:b4:df:04:3e:90:f1:80:95:d6:f5:dd:60:3c:b8:
68:27:cf:08:37:be:f2:d6:ee:36:23:a4:2c:9d:8b:
44:3f:be:8c:0e:72:09:a8:99:48:13:89:bf:6d:19:
09:1b:87:ec:69:af:15:5f:e8:4e:8e:45:23:84:c4:
01:6f:c2:a2:db:5b:3f:63:72:93:f5:f4:97:60:c5:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:A0:41:71:A9:7F:1C:88:EF:D1:2A:43:5F:6A:AD:EA:B0:71:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33defc1c-6ce8-362f-9fd2-e626ca1d9d3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c1:22:b0:7d:dc:b8:b3:ff:d9:61:54:d0:17:05:72:41:fb:
54:4f:77:79:5b:2e:a6:25:ad:97:c8:4b:33:b6:af:df:29:22:
17:8a:ff:cb:78:a1:7f:5f:01:f3:c6:77:81:5b:94:07:96:d7:
82:f2:54:1b:1a:96:93:35:b8:0c:41:b5:77:ad:dc:0b:cb:b7:
c4:af:c5:a4:a8:f8:3b:f2:93:02:cf:f1:5f:19:64:f5:39:b7:
58:62:6a:ed:0d:6e:04:47:4c:c9:07:bc:de:bd:cb:22:c5:ac:
f2:e7:5c:aa:d0:3c:19:2c:43:24:d3:7f:7a:34:a5:0c:39:e2:
dd:89:91:e5:e4:d1:2b:75:86:a4:9f:fa:cc:3d:4c:88:f5:bd:
af:d6:04:f8:aa:c8:4a:fd:4f:bd:ab:be:3a:ad:f6:f2:bf:d0:
8c:3e:ca:ae:65:98:2e:25:e7:16:11:2e:6b:29:f9:4d:4f:2a:
34:75:8c:93:52:60:34:d9:c1:70:b9:b1:bb:62:ea:bd:19:ed:
32:dd:b3:fe:d2:8d:a7:c2:92:95:85:0d:aa:47:d2:b7:00:ce:
08:07:db:a1:f4:e4:bc:0f:fc:0a:b7:da:af:41:98:51:39:05:
f0:8d:b7:27:6b:80:3f:9a:01:cc:84:77:ed:03:db:32:8f:b2:
da:b8:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:42 2025 by rpki-client