Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9a4af3c-3c47-3e37-894a-2e98dea9c577.roa
File: b9a4af3c-3c47-3e37-894a-2e98dea9c577.roa (raw, json)
Hash identifier: 2DSG4zkihlvMcduiaiRZtxuxgfPzzQqoXLhOq1rJY+Q=
Subject key identifier: 3E:62:6B:78:65:E4:AB:77:BD:D3:A9:32:F2:27:CA:B6:8B:2B:28:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F436DBF975EB4659D040F3200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9a4af3c-3c47-3e37-894a-2e98dea9c577.roa
Signing time: Thu 15 Sep 2022 12:00:00 +0000
ROA not before: Thu 15 Sep 2022 12:00:00 +0000
ROA not after: Fri 21 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 139.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:43:6d:bf:97:5e:b4:65:9d:04:0f:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 15 12:00:00 2022 GMT
Not After : Oct 21 04:00:00 2022 GMT
Subject: CN=61770033-dcb9-4be6-8ace-4f77f3b01f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:42:bf:a0:ad:39:99:88:ac:48:58:0b:f8:
5a:8b:38:8d:5d:88:6e:8d:c9:34:4b:63:c4:69:86:
0d:5e:15:c3:58:b4:ee:61:56:4f:75:0b:d3:7a:09:
1c:3c:d1:2c:e2:1f:03:b2:c6:8b:6d:b4:7e:e5:6e:
87:aa:ab:a8:3e:ac:f1:6b:70:70:31:bd:82:1c:15:
08:01:45:cc:06:39:37:b4:bc:c3:e9:3e:f9:a4:9d:
79:5f:b8:9e:4a:eb:9c:af:b0:16:5e:ef:ae:25:b5:
ff:16:3e:4c:c0:d7:09:7f:fd:31:1a:b8:65:a4:16:
82:3d:ef:7c:d7:e7:e7:08:4e:54:e7:1c:f6:a1:91:
0d:19:9a:78:7b:0a:59:f7:8e:ba:04:f1:69:29:9a:
4d:24:5d:64:1d:67:87:80:00:04:ce:7b:1d:a5:da:
08:59:46:df:20:fa:0b:d2:b7:63:4a:ec:c1:0b:c5:
83:e4:f9:6c:1c:43:41:8e:c9:6f:a6:5c:c1:ac:f3:
f1:62:4f:87:3c:fc:8e:c0:9b:13:97:ec:d1:29:52:
db:d4:25:34:21:80:eb:0b:64:ad:c1:4c:01:b0:ef:
0a:40:73:3e:7b:40:2d:81:ed:ae:10:8a:5a:69:61:
5f:14:06:e8:09:c3:6f:eb:a7:06:0a:61:36:fc:99:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:62:6B:78:65:E4:AB:77:BD:D3:A9:32:F2:27:CA:B6:8B:2B:28:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9a4af3c-3c47-3e37-894a-2e98dea9c577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c5:b3:6f:3a:3e:1e:30:d3:c8:65:b4:71:dc:c9:34:44:23:
20:32:09:10:9f:40:77:1d:d8:45:f6:cc:87:8b:d3:97:f4:b9:
aa:57:b9:e5:45:2d:42:5e:eb:b2:91:1c:03:b3:42:5b:5d:b4:
8c:03:27:3c:78:42:15:7f:ec:4a:bb:aa:eb:61:ed:f8:f3:35:
f9:cc:5d:65:4b:a4:1b:6e:a0:87:3c:7a:3a:23:f9:5f:7b:32:
b4:ca:6e:99:37:f9:d3:95:a6:dc:0e:34:17:bb:58:a2:3a:f2:
3f:48:53:0a:1b:2d:0a:17:5f:48:6e:00:7a:9a:1e:4d:5b:d1:
0c:4f:95:cc:11:f4:0e:81:6e:5f:c3:39:d4:33:fd:82:5c:89:
1c:5e:34:9d:ea:3e:b8:39:4a:ed:81:d6:91:17:4a:3c:d2:cf:
c1:9d:5a:38:d8:83:e1:b9:97:69:6f:64:0c:4d:f6:9e:57:6b:
0e:dc:f3:c2:ae:26:46:22:8d:3a:7b:6a:de:4e:13:eb:5a:9d:
14:46:6a:94:3d:97:87:b5:b6:0d:9c:7d:c3:42:41:c7:77:14:
65:d6:8d:94:b5:19:74:b0:16:3c:01:45:02:2b:b3:81:57:1a:
63:f0:f4:70:e3:9c:96:cb:c8:d3:ab:05:c4:eb:a9:83:10:c2:
ce:b7:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:00 2025 by rpki-client