Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3270245-b2b4-3ace-a29f-02da9d601fa3.roa
File: a3270245-b2b4-3ace-a29f-02da9d601fa3.roa (raw, json)
Hash identifier: i0nVfheYwF2m86CMtjBk++05WnYSDPafIU/tYjJFlO4=
Subject key identifier: 7B:84:43:22:6F:86:41:6B:FA:31:0B:A3:A1:59:8B:66:88:46:C1:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A1E890068847DFDC45A59E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3270245-b2b4-3ace-a29f-02da9d601fa3.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Fri 24 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 139.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a1:e8:90:06:88:47:df:dc:45:a5:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Feb 24 05:00:00 2023 GMT
Subject: CN=1e2e8ba5-7014-4adc-ac8b-96586c7283b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:3c:f7:b7:eb:c7:a9:fa:4d:41:8b:9d:3b:
fe:d3:ef:ac:d1:a6:68:5e:78:55:f1:8a:c7:8c:0f:
2f:f2:a5:32:37:30:9b:ae:78:25:63:1a:ec:e7:23:
86:68:69:8d:87:bb:ff:30:06:6d:a1:4b:5c:24:36:
7c:20:ed:71:55:1a:8e:4c:25:ba:3e:9b:16:3f:5a:
c2:1d:95:da:d6:7f:c5:5d:63:0a:b5:a8:68:b5:fc:
bc:64:b6:f1:0b:88:0c:77:1a:ad:16:2f:0a:37:d1:
2b:c2:e9:e5:a3:7a:b4:c7:b2:a6:9f:e9:d1:7a:61:
39:7e:1e:a9:fd:c4:da:f5:a5:1f:79:f4:18:ab:84:
63:9d:79:17:e5:23:1e:e7:00:39:f7:61:93:78:1e:
1b:52:71:fd:d9:7b:12:78:00:e4:55:5e:d2:f4:23:
b7:2b:55:c1:10:29:d7:30:3e:f1:4b:45:28:a8:bd:
54:ef:5a:e8:16:ef:15:59:cb:01:f3:bd:eb:05:0e:
07:62:19:71:ec:84:3a:3e:fb:2b:f2:00:8e:e9:f4:
d7:46:63:95:33:55:73:b8:9d:96:0a:dd:03:4d:9f:
e3:fe:0b:c0:44:1b:90:12:80:e3:29:b5:52:e0:61:
ca:80:e4:6f:ff:22:2d:73:60:84:a9:5b:90:8d:6c:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:43:22:6F:86:41:6B:FA:31:0B:A3:A1:59:8B:66:88:46:C1:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3270245-b2b4-3ace-a29f-02da9d601fa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:4e:f6:61:d9:32:82:d9:98:c3:0f:5e:6b:1d:c2:1c:cb:f8:
61:53:95:15:7d:c8:72:4a:79:da:f2:60:9f:e3:36:05:bd:e4:
15:ab:fb:d0:8e:0b:22:77:d2:35:f8:1b:0c:04:a5:fd:69:a2:
6a:1d:31:8f:c2:6f:d9:2a:f0:1f:1d:1d:83:07:27:56:03:51:
bd:66:75:88:bd:13:f6:16:02:fb:9c:79:e2:fd:a7:4d:47:97:
cd:f5:52:be:44:1d:41:f7:db:28:d4:5a:1f:91:b9:ef:77:20:
e8:df:d7:c8:56:85:b0:7b:0c:94:b8:03:e8:ff:89:16:de:4e:
3d:ec:5c:28:2e:9d:b3:18:58:d8:0d:25:25:1b:c7:29:71:c3:
38:ae:6d:69:61:44:fd:0a:cd:db:f0:b0:45:aa:53:dc:45:c9:
d8:d9:c0:a6:b7:4e:a6:c9:db:ab:ce:93:e1:34:0b:0a:73:21:
7a:4d:ec:02:b8:08:f6:30:3a:ac:4b:c9:88:9e:f5:6e:58:00:
bb:c8:27:95:2e:6d:f6:88:a0:bc:20:a1:0f:42:45:71:df:6d:
bb:f4:da:14:64:83:87:8b:99:dc:8a:35:14:98:da:66:f4:03:
6c:5b:d9:05:11:ae:7e:a5:f6:22:fe:16:46:30:03:ff:08:08:
c1:d4:f1:4f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECh6JAGiEff3EWlnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExOTEyMDAwMFoXDTIzMDIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
MWUyZThiYTUtNzAxNC00YWRjLWFjOGItOTY1ODZjNzI4M2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI0897frx6n6TUGLnTv+0++s0aZoXnhV8YrH
jA8v8qUyNzCbrnglYxrs5yOGaGmNh7v/MAZtoUtcJDZ8IO1xVRqOTCW6PpsWP1rC
HZXa1n/FXWMKtahotfy8ZLbxC4gMdxqtFi8KN9Erwunlo3q0x7Kmn+nRemE5fh6p
/cTa9aUfefQYq4RjnXkX5SMe5wA592GTeB4bUnH92XsSeADkVV7S9CO3K1XBECnX
MD7xS0UoqL1U71roFu8VWcsB873rBQ4HYhlx7IQ6Pvsr8gCO6fTXRmOVM1VzuJ2W
Ct0DTZ/j/gvARBuQEoDjKbVS4GHKgORv/yItc2CEqVuQjWx67wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHuEQyJvhkFr+jELo6FZi2aIRsHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTMyNzAyNDUtYjJiNC0z
YWNlLWEyOWYtMDJkYTlkNjAxZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi1kwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhU72YdkygtmYww9eax3CHMv4YVOVFX3Ickp52vJgn+M2Bb3kFav70I4L
InfSNfgbDASl/Wmiah0xj8Jv2SrwHx0dgwcnVgNRvWZ1iL0T9hYC+5x54v2nTUeX
zfVSvkQdQffbKNRaH5G573cg6N/XyFaFsHsMlLgD6P+JFt5OPexcKC6dsxhY2A0l
JRvHKXHDOK5taWFE/QrN2/CwRapT3EXJ2NnAprdOpsnbq86T4TQLCnMhek3sArgI
9jA6rEvJiJ71blgAu8gnlS5t9oigvCChD0JFcd9tu/TaFGSDh4uZ3Io1FJjaZvQD
bFvZBRGufqX2Iv4WRjAD/wgIwdTxTw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:42 2025 by rpki-client