Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/424c915d-c0a4-3245-b797-ceb9c3b7a9b7.roa
File: 424c915d-c0a4-3245-b797-ceb9c3b7a9b7.roa (raw, json)
Hash identifier: KlsZtTFjbvlVswcvZ5Y0CLd0xKNujfpbqjw8h2YVMyI=
Subject key identifier: 9A:EB:0E:69:46:47:27:05:82:DB:11:E6:24:2F:13:FE:BB:9E:91:06
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402AF7EF17A7ADBB2B44D9B760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/424c915d-c0a4-3245-b797-ceb9c3b7a9b7.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 139.56.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:f7:ef:17:a7:ad:bb:2b:44:d9:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=32f4e619-3fe4-4b21-b1e7-78989a57b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:d4:22:2d:4b:40:50:1c:fc:be:c7:0d:73:
09:ff:0f:33:dc:ec:07:55:76:3d:a1:1c:00:50:92:
ce:5c:0e:30:9d:9e:27:20:57:a5:9d:ef:7b:6d:c8:
7f:ee:12:b2:38:37:8a:72:91:28:05:6d:78:91:64:
c3:10:9c:3c:14:7b:8b:45:17:11:da:a9:c0:b6:10:
5c:fd:a1:f7:c2:7e:fe:d0:57:a9:69:e6:c5:60:ef:
c8:3a:71:29:2b:f8:79:5e:24:e4:c7:e5:68:7f:da:
23:df:cc:cb:15:7e:e2:a2:a0:73:69:18:a2:2d:2c:
45:24:30:fa:2c:c1:35:7d:6d:80:cd:8b:d3:fe:af:
00:eb:66:8a:17:b2:7e:93:9b:1a:cd:88:c8:62:66:
cd:d4:25:02:03:f8:4b:95:75:9c:f6:c0:19:c3:55:
78:ea:c8:71:ef:ad:ed:1c:45:a8:f3:9f:d4:99:ed:
e6:36:96:85:08:4a:ff:07:f4:c9:99:90:6a:89:1b:
a1:07:8d:24:7f:61:5f:4d:e8:79:8c:6a:03:12:e0:
5b:1a:71:d1:6e:b9:5b:53:f6:b9:85:4f:37:ce:8c:
23:7c:74:5e:73:ce:1e:78:50:c7:b7:bd:b2:f9:5c:
5b:5f:80:b3:7a:18:00:70:d3:ab:d8:40:9d:2b:cb:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:0E:69:46:47:27:05:82:DB:11:E6:24:2F:13:FE:BB:9E:91:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/424c915d-c0a4-3245-b797-ceb9c3b7a9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:41:30:36:bb:c3:73:49:e4:05:0e:51:84:ba:4e:1d:bf:f1:
be:31:e8:6a:95:08:23:46:e2:1a:79:e4:eb:d9:63:19:ec:ea:
d0:8d:03:e1:1b:f5:d2:94:37:74:04:a5:af:f2:db:50:04:ad:
0d:e7:a2:c5:15:33:d4:dc:2a:7b:a1:db:59:09:9a:e8:e4:a3:
f8:90:54:08:63:6a:d9:57:0a:c0:e2:e0:63:03:da:84:0d:39:
3b:e2:74:68:17:e0:22:34:be:06:3f:c7:b2:f3:6e:b9:34:c5:
49:97:5e:35:0a:50:26:ec:a4:3f:44:4e:a1:94:1a:d3:3c:8a:
a2:60:47:1a:31:ed:12:20:20:22:3f:e6:7a:f3:6c:c9:28:48:
7f:51:05:b3:0a:07:58:71:0d:16:fe:71:98:26:cb:86:bc:f2:
39:53:4c:01:4a:69:66:47:d8:3b:61:bd:c4:4f:24:6b:78:43:
d3:2c:64:b8:85:29:ff:cd:7e:06:78:df:94:96:60:e2:fe:1b:
81:d0:db:04:78:92:e1:67:06:4d:f2:0a:84:9b:99:e8:0a:8c:
a4:6f:38:47:de:2e:1f:e5:57:c2:cc:92:d4:a3:02:26:ea:fb:
10:1c:7b:5e:e7:ce:ed:78:66:9a:c2:98:36:1c:16:cf:ac:74:
83:84:99:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAq9+8Xp627K0TZt2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNzEyMDAwMFoXDTIzMDExMjA1MDAwMFowLzEtMCsGA1UEAxMk
MzJmNGU2MTktM2ZlNC00YjIxLWIxZTctNzg5ODlhNTdiN2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDHUIi1LQFAc/L7HDXMJ/w8z3OwHVXY9oRwA
UJLOXA4wnZ4nIFelne97bch/7hKyODeKcpEoBW14kWTDEJw8FHuLRRcR2qnAthBc
/aH3wn7+0FepaebFYO/IOnEpK/h5XiTkx+Vof9oj38zLFX7ioqBzaRiiLSxFJDD6
LME1fW2AzYvT/q8A62aKF7J+k5sazYjIYmbN1CUCA/hLlXWc9sAZw1V46shx763t
HEWo85/Ume3mNpaFCEr/B/TJmZBqiRuhB40kf2FfTeh5jGoDEuBbGnHRbrlbU/a5
hU83zowjfHRec84eeFDHt72y+VxbX4CzehgAcNOr2ECdK8t2HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrrDmlGRycFgtsR5iQvE/67npEGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDI0YzkxNWQtYzBhNC0z
MjQ1LWI3OTctY2ViOWMzYjdhOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizgMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFBMDa7w3NJ5AUOUYS6Th2/8b4x6GqVCCNG4hp55OvZYxns6tCNA+Eb
9dKUN3QEpa/y21AErQ3nosUVM9TcKnuh21kJmujko/iQVAhjatlXCsDi4GMD2oQN
OTvidGgX4CI0vgY/x7Lzbrk0xUmXXjUKUCbspD9ETqGUGtM8iqJgRxox7RIgICI/
5nrzbMkoSH9RBbMKB1hxDRb+cZgmy4a88jlTTAFKaWZH2DthvcRPJGt4Q9MsZLiF
Kf/NfgZ435SWYOL+G4HQ2wR4kuFnBk3yCoSbmegKjKRvOEfeLh/lV8LMktSjAibq
+xAce17nzu14ZprCmDYcFs+sdIOEmUE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:57 2025 by rpki-client