Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3a9400a-2a3c-388e-90a2-c7477ffb2b4c.roa
File: f3a9400a-2a3c-388e-90a2-c7477ffb2b4c.roa (raw, json)
Hash identifier: NnpeNIXXFMgBfzqa8Em3K+qmzLc8Tzw9+RFpsPc/Jj0=
Subject key identifier: 4B:09:7E:3C:55:C1:55:15:CB:D8:87:C4:8F:6E:2F:FF:23:BC:6A:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDE5EB008D2FD1409210EBC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3a9400a-2a3c-388e-90a2-c7477ffb2b4c.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 139.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:5e:b0:08:d2:fd:14:09:21:0e:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=3530d4d5-67bb-4ea2-abf6-48c13cde892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:e1:5e:82:1e:b8:c9:22:b0:d4:7f:fd:46:
02:6b:a6:6f:25:01:60:5d:d9:08:56:5f:d6:01:bb:
da:0c:29:d4:e0:2a:55:43:9e:d0:58:51:a2:df:32:
09:f4:ce:7b:09:d7:06:b8:c0:51:13:7a:b4:a4:ff:
21:e4:1a:a5:1c:69:9c:44:7e:24:ff:a7:82:1c:59:
b4:f5:c1:af:66:e6:08:41:a9:d6:71:54:b5:6a:93:
23:8f:63:1f:c2:33:68:44:98:15:b8:32:e8:dd:b7:
e0:e4:bd:ec:87:4f:7b:c9:0d:b7:5c:e8:5f:71:c6:
ce:16:02:1e:b0:cc:83:bb:3f:34:ac:4b:0c:bb:f1:
82:59:63:39:46:8b:e4:0a:e3:7b:b5:a3:3b:46:d7:
c8:68:4c:95:b6:22:49:f3:79:be:85:79:32:34:2d:
3f:1d:d6:ba:3a:92:5c:cb:89:0b:95:0e:fe:5b:0d:
5b:b3:ca:78:f5:aa:99:d6:f6:81:7f:48:1d:89:7d:
3c:03:07:1d:e7:1b:aa:9a:d2:a0:6e:78:11:12:a9:
8d:60:4f:39:69:1e:09:c3:02:59:38:2f:e1:69:a2:
eb:1c:db:1e:90:2a:bc:b1:7d:12:cd:83:71:15:f1:
38:77:11:87:77:1c:30:0d:b8:cf:c2:d5:29:a6:29:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:09:7E:3C:55:C1:55:15:CB:D8:87:C4:8F:6E:2F:FF:23:BC:6A:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3a9400a-2a3c-388e-90a2-c7477ffb2b4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:19:ee:8e:8f:1d:fd:48:53:f5:48:8d:be:2a:7f:2e:a2:56:
ac:f7:cc:95:41:7c:4d:b2:83:62:78:98:0c:0c:31:1d:e3:45:
d4:6a:4e:25:d5:0f:87:27:4f:61:47:21:cc:26:70:93:4e:99:
d3:d6:bb:d2:97:83:95:2c:2b:b4:17:57:51:8e:1c:07:1c:f4:
6b:bc:7f:10:7b:91:a9:ee:10:33:6c:6a:75:cb:45:54:95:38:
66:ff:d0:f4:9c:8b:b8:2d:2a:3e:ff:9f:23:e3:3c:8c:19:6e:
b4:15:69:db:bf:43:af:12:72:da:78:4c:78:4b:57:f4:ec:99:
ab:f7:7f:f9:cb:d3:06:ef:be:8d:04:ab:df:20:36:7d:c8:86:
77:50:e8:a8:c5:16:12:45:04:2a:3d:53:ca:fd:31:aa:a7:02:
8d:2c:62:c4:a9:ac:40:07:d9:4a:e7:b2:ac:c5:d2:51:7d:72:
37:04:6e:5f:e8:b2:25:25:e2:84:05:24:5d:ec:18:f4:db:23:
c6:17:13:da:d0:6a:8d:34:c8:31:81:29:44:d7:1c:1b:13:31:
95:99:d1:ee:69:cc:eb:9d:74:5b:5e:97:a0:99:27:10:a1:b5:
71:c7:56:a7:37:86:fc:cc:3e:cc:27:37:d4:4a:ba:56:9a:bf:
b5:a8:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:21 2025 by rpki-client