Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cb57a58-f91b-3381-af90-cbe0756a5c13.roa
File: 4cb57a58-f91b-3381-af90-cbe0756a5c13.roa (raw, json)
Hash identifier: XCNhdSznGoeAZjhW51a1D4zKnPZ0MBXS1X6b/AUXNjo=
Subject key identifier: 8E:CA:24:43:C8:3F:1A:6D:14:DD:8C:76:A1:67:1D:81:1F:F7:A3:E4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C8F6C2FF2EF7832BE8FCF480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cb57a58-f91b-3381-af90-cbe0756a5c13.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 139.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c8:f6:c2:ff:2e:f7:83:2b:e8:fc:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=b15142d5-aedd-479b-a81c-dac2c5a02155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:5f:0b:c7:4a:3b:60:f8:59:cf:f7:12:f5:
0a:df:ae:85:a6:2d:71:2d:bc:ad:69:e8:74:8b:9b:
f5:05:86:a5:7d:41:2b:6a:7f:28:43:48:ef:d5:94:
c1:9f:96:ec:da:89:fc:55:be:8b:4c:c5:a8:fe:de:
11:20:4b:7f:a0:ea:71:96:cb:8b:82:8b:dc:3d:7e:
85:01:e2:ee:79:2f:f7:8a:65:9d:0d:7f:30:56:25:
a6:d4:5f:24:59:c8:91:cd:f0:1c:21:ca:73:57:13:
49:5e:60:92:c3:63:9b:b3:f5:86:04:98:e5:a5:72:
b6:80:df:55:85:9d:68:30:5b:28:38:01:05:2f:27:
30:0a:79:af:d1:ed:81:e2:f3:d6:9d:32:af:00:cb:
c1:ed:1a:2b:f4:57:e3:1e:93:4c:9d:f3:e6:0c:60:
b2:17:06:0c:f8:03:42:8b:65:fb:9d:5e:2a:f6:9d:
3f:0a:ce:cd:4d:b7:7c:62:9d:06:b1:b2:08:8d:9d:
7a:d4:9f:c9:db:93:72:5e:8b:bf:cc:a6:36:e3:4c:
5e:a0:fb:12:e3:47:6d:6e:c0:7d:88:26:02:d9:9a:
f2:24:65:fb:38:81:0c:79:27:5e:4b:e2:79:21:bb:
0e:e3:a3:95:15:b7:19:ec:11:a5:e0:ac:75:b5:84:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CA:24:43:C8:3F:1A:6D:14:DD:8C:76:A1:67:1D:81:1F:F7:A3:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4cb57a58-f91b-3381-af90-cbe0756a5c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:84:5b:c8:be:0e:ab:19:ec:45:03:3f:58:27:b3:bf:f4:36:
e9:5f:9c:fa:28:78:ae:d6:5b:13:da:cb:94:c5:70:ce:27:93:
8b:d1:cb:f6:3c:83:01:39:12:b2:27:0b:41:23:bd:4d:22:21:
ef:3a:7d:cb:a6:b6:21:df:8e:e8:18:01:56:08:fb:7c:4f:f6:
7f:e1:4e:d2:b3:0c:42:68:fb:32:05:e9:b9:dc:00:db:71:b5:
40:6d:f7:4e:ad:15:1d:f3:0e:96:9a:50:9e:a2:7a:ff:f2:a6:
7a:96:fc:a8:3c:e0:f0:11:b0:0d:e7:ab:53:f5:19:19:93:34:
6d:5d:78:c1:db:25:7d:04:02:d2:f1:13:bd:e5:7b:62:7e:6a:
2a:4b:02:74:04:c5:05:c1:08:85:3b:80:e7:91:7a:a7:84:27:
ae:72:93:27:c5:31:36:a7:6f:5e:02:41:a6:47:1c:45:f9:a3:
46:eb:b7:db:a0:0a:37:e1:f4:a1:24:36:5a:81:b9:66:2d:ba:
bf:f2:af:af:7e:05:a3:69:dd:30:bb:d5:71:16:cd:2f:c9:54:
a1:09:2a:85:f0:5f:62:5f:83:02:6c:cc:61:b4:94:1e:49:d0:
11:6f:79:f4:12:fd:b5:84:d6:c9:b5:21:78:a4:6b:f5:84:a1:
65:e2:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:11 2025 by rpki-client