Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a66ac4c3-a01a-3880-b439-730af1f220c3.roa
File: a66ac4c3-a01a-3880-b439-730af1f220c3.roa (raw, json)
Hash identifier: NXt0+nJL06sWc4sG3PY+h/XD9XgNOeCp/XIhWJekCVw=
Subject key identifier: 05:5F:F2:E8:BE:BA:0B:09:AA:36:46:00:0A:59:1A:4B:CC:69:4A:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D51223FAFC2A7E0AFFE85C800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a66ac4c3-a01a-3880-b439-730af1f220c3.roa
Signing time: Tue 22 Mar 2022 04:00:00 +0000
ROA not before: Tue 22 Mar 2022 04:00:00 +0000
ROA not after: Tue 26 Apr 2022 04:00:00 +0000
asID: 22394
IP address blocks: 139.56.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:51:22:3f:af:c2:a7:e0:af:fe:85:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 22 04:00:00 2022 GMT
Not After : Apr 26 04:00:00 2022 GMT
Subject: CN=47d7a736-8a8a-49ae-b800-b958b18741ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:36:5a:70:32:0e:81:10:3e:12:1e:6c:88:
d8:b4:48:a4:4d:24:96:36:28:d5:9d:a8:c5:7d:e0:
77:6b:ee:04:ef:ca:f7:52:0a:25:69:a8:1f:8f:e4:
f9:68:55:8e:d1:58:d6:28:34:e3:05:fa:9e:da:58:
ae:b0:25:76:7d:31:47:df:8d:d4:c8:9a:41:d1:6f:
50:70:4d:2a:dc:8f:16:4f:15:24:47:a1:5c:a2:25:
40:29:87:61:2a:88:62:33:d7:2b:2f:b2:cd:16:5b:
04:3a:c6:f5:bf:e9:cf:b0:43:20:37:b3:a4:0c:fd:
35:7b:ed:40:37:74:cc:58:02:77:9b:65:9b:09:99:
44:f9:f1:76:08:10:fa:79:f2:a8:65:bb:10:61:a2:
57:a9:36:82:e0:33:a3:16:80:3c:4a:7b:ec:1f:8b:
17:f4:11:83:a1:e9:ad:b7:5f:07:17:4c:ca:35:ca:
76:0d:bc:bd:8f:80:3a:63:08:a1:32:d2:be:0a:94:
20:39:fe:a6:b9:e9:af:96:f2:e3:74:6d:63:f1:0b:
79:4c:60:da:54:59:73:ac:a6:51:19:38:ff:46:bd:
ed:83:13:fa:d7:59:c4:d0:db:bd:6e:fc:16:08:1b:
2e:2f:c9:34:ec:d0:9e:0e:04:a8:77:f2:a9:e0:46:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:F2:E8:BE:BA:0B:09:AA:36:46:00:0A:59:1A:4B:CC:69:4A:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a66ac4c3-a01a-3880-b439-730af1f220c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:7d:65:c8:f6:34:77:2f:ed:ad:7a:2e:43:7b:02:fe:8a:e0:
89:2b:82:70:87:0a:f7:d6:bf:ee:ac:25:b7:a9:83:5b:8c:61:
72:d7:b9:e1:2c:4f:fd:76:27:73:4a:5c:49:8e:bc:b2:ab:35:
0a:40:fe:69:53:af:30:64:b4:a6:78:37:fe:7e:9b:84:57:3d:
94:18:31:af:fa:7e:0f:d7:67:ab:73:fa:d4:ca:f9:7e:02:93:
0c:f4:a3:03:84:38:86:84:c4:6d:38:ef:dc:a9:19:ad:3f:8c:
f5:33:12:50:3f:55:bf:e1:48:e3:67:2d:99:be:f4:c0:fd:ac:
2b:d3:1d:7c:0e:d9:c9:b6:f7:8b:fe:96:24:91:da:cf:09:23:
2d:a4:32:5e:0f:0d:e5:7c:76:03:e7:82:d9:71:f4:12:95:45:
48:b8:cf:61:8d:8c:d7:b8:99:09:d6:ab:77:e4:48:45:61:57:
5c:e2:71:48:e9:81:d4:84:d2:14:77:65:40:c8:3a:0f:3e:15:
eb:43:f5:e3:1f:07:91:47:df:09:53:51:12:8d:07:96:ce:eb:
e2:2c:49:59:0c:05:ba:39:39:66:d8:10:23:a1:bb:af:da:ab:
13:9a:7c:8f:86:47:9f:ca:b1:67:51:c5:93:dc:ec:8e:f8:6b:
40:22:ad:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1RIj+vwqfgr/6FyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyMjA0MDAwMFoXDTIyMDQyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDdkN2E3MzYtOGE4YS00OWFlLWI4MDAtYjk1OGIxODc0MWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNs2WnAyDoEQPhIebIjYtEikTSSWNijVnajF
feB3a+4E78r3Ugolaagfj+T5aFWO0VjWKDTjBfqe2liusCV2fTFH343UyJpB0W9Q
cE0q3I8WTxUkR6FcoiVAKYdhKohiM9crL7LNFlsEOsb1v+nPsEMgN7OkDP01e+1A
N3TMWAJ3m2WbCZlE+fF2CBD6efKoZbsQYaJXqTaC4DOjFoA8SnvsH4sX9BGDoemt
t18HF0zKNcp2Dby9j4A6YwihMtK+CpQgOf6muemvlvLjdG1j8Qt5TGDaVFlzrKZR
GTj/Rr3tgxP611nE0Nu9bvwWCBsuL8k07NCeDgSod/Kp4Eb7GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVf8ui+ugsJqjZGAApZGkvMaUrYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTY2YWM0YzMtYTAxYS0z
ODgwLWI0MzktNzMwYWYxZjIyMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAizgBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACF9Zcj2NHcv7a16LkN7Av6K4IkrgnCHCvfWv+6sJbepg1uMYXLXueEs
T/12J3NKXEmOvLKrNQpA/mlTrzBktKZ4N/5+m4RXPZQYMa/6fg/XZ6tz+tTK+X4C
kwz0owOEOIaExG0479ypGa0/jPUzElA/Vb/hSONnLZm+9MD9rCvTHXwO2cm294v+
liSR2s8JIy2kMl4PDeV8dgPngtlx9BKVRUi4z2GNjNe4mQnWq3fkSEVhV1zicUjp
gdSE0hR3ZUDIOg8+FetD9eMfB5FH3wlTURKNB5bO6+IsSVkMBbo5OWbYECOhu6/a
qxOafI+GR5/KsWdRxZPc7I74a0AirbE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:09 2025 by rpki-client