Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3eddd1-e995-358e-93d8-42ee1750c519.roa
File: 9d3eddd1-e995-358e-93d8-42ee1750c519.roa (raw, json)
Hash identifier: u6QU4PjmEW0NrdkHFj9Vu4jry+1mr72z9B/yerLFm3M=
Subject key identifier: 32:28:E1:EA:7E:DE:66:31:BB:03:64:DB:A6:81:55:47:07:56:89:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E7FDC9F06DA4AC472CE7A16A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3eddd1-e995-358e-93d8-42ee1750c519.roa
Signing time: Thu 07 Jul 2022 12:00:00 +0000
ROA not before: Thu 07 Jul 2022 12:00:00 +0000
ROA not after: Fri 12 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 139.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7f:dc:9f:06:da:4a:c4:72:ce:7a:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 7 12:00:00 2022 GMT
Not After : Aug 12 04:00:00 2022 GMT
Subject: CN=4b9ecfbd-9527-4b71-9587-9ca527135bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:70:98:4c:88:91:f9:ac:9c:fd:c2:3d:f5:
6d:01:ca:3d:fc:f8:02:eb:93:36:9c:6a:03:7d:af:
16:76:0d:56:58:2d:4c:45:0f:31:c8:06:eb:2e:6d:
47:ed:f2:ca:8a:c1:91:41:c2:ea:d1:9b:60:76:ee:
73:d5:e1:04:73:d8:5c:2b:05:4a:d0:89:d3:bf:51:
a4:7f:2b:87:6e:fb:a6:b1:e8:c4:8b:cf:22:97:d6:
d7:b6:e4:a8:15:e1:50:ca:e0:1b:ff:92:08:44:9f:
95:7a:ed:05:d0:d4:9b:49:a6:9e:4e:83:c2:f8:7a:
50:bb:ff:e4:80:87:1c:8c:6b:3f:9a:8d:18:a2:ff:
ef:e0:58:ac:18:27:79:3d:2e:34:96:53:b3:67:bf:
8c:65:f7:13:87:08:37:ff:88:25:17:2b:ab:8a:c7:
c0:02:82:6b:fc:1d:af:a6:ad:9b:3c:9f:1a:b3:2e:
e8:70:f1:9e:dd:67:cf:46:58:b4:ad:83:73:d9:33:
c4:c3:42:9e:cb:da:59:49:ec:e6:8c:ad:4e:38:cc:
ed:17:53:2f:3c:17:f5:c3:e9:c6:00:c4:1a:b6:05:
eb:49:9c:b1:c0:66:b6:d1:6a:eb:4c:72:15:97:b8:
6f:46:52:95:5c:60:e7:48:bd:df:63:6a:03:67:c0:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:E1:EA:7E:DE:66:31:BB:03:64:DB:A6:81:55:47:07:56:89:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d3eddd1-e995-358e-93d8-42ee1750c519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:89:9f:26:49:b6:dc:83:58:53:0a:18:8b:b7:dd:13:b1:e9:
de:d9:98:4f:f8:6e:2f:91:8c:50:09:7b:ff:94:9a:00:25:89:
7c:0e:d9:e5:f4:cc:de:ca:24:a3:8e:47:15:5f:fb:79:0c:52:
2e:df:f4:23:77:9c:a8:44:96:7f:98:cb:c8:5d:aa:96:5a:8f:
0b:21:74:00:c8:c8:0f:72:d1:63:e5:80:27:b2:00:8c:b6:5f:
7b:68:ce:02:1a:65:81:85:c7:97:04:6d:94:35:23:3f:e8:06:
91:38:33:37:4d:94:2d:83:26:ca:5c:75:3a:68:d8:2c:20:12:
a8:90:8d:d4:29:56:fe:17:4a:3f:3e:b7:bb:a0:b7:de:e4:0a:
38:c0:85:fd:c4:1b:c4:49:19:17:fe:b8:18:83:3d:87:8a:e0:
54:39:80:d8:6d:0e:5a:19:ff:b9:47:7c:8f:57:fc:1a:75:d0:
c4:45:7d:6c:71:73:d6:f8:29:12:e7:c5:fa:37:f6:7c:81:bd:
af:ee:a4:d6:1d:2e:02:92:02:52:2c:60:b4:a8:54:0b:66:e3:
8a:dd:8e:0e:f4:63:ff:dc:1a:2c:38:1d:c5:2e:e7:08:54:f8:
ad:96:79:a8:99:1b:11:92:f8:78:88:76:c9:65:f8:d0:06:2b:
3f:ef:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:11 2025 by rpki-client