Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
File: 3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (raw, json)
Hash identifier: ZDaVP7GCD/XZq8+qEm1duU7HstXXa1mQp4IoKB7T6Wk=
Subject key identifier: 85:77:F2:B5:7A:6E:E7:5C:6A:52:5E:7D:26:A5:23:86:64:AC:2D:BB
Certificate issuer: /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial: 5BA837F2A73B4753643C0BC0FD11A7CBCD603678
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
Signing time: Sun 01 Jan 2023 03:43:39 +0000
ROA not before: Sun 01 Jan 2023 03:38:39 +0000
ROA not after: Sun 31 Dec 2023 03:43:39 +0000
asID: 54110
IP address blocks: 199.182.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a8:37:f2:a7:3b:47:53:64:3c:0b:c0:fd:11:a7:cb:cd:60:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Validity
Not Before: Jan 1 03:38:39 2023 GMT
Not After : Dec 31 03:43:39 2023 GMT
Subject: CN=8577F2B57A6EE75C6A525E7D26A5238664AC2DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:ba:6d:d6:ca:3d:89:f6:07:ce:7a:be:06:
40:ae:4d:1d:1a:f5:80:77:e8:45:ef:b3:9d:3c:3a:
c5:30:77:d3:f0:91:19:b7:00:22:46:6e:bf:27:f6:
88:b8:09:eb:50:11:52:35:e6:c6:a0:76:dd:c1:3c:
92:d7:de:e1:c2:3c:8c:ed:65:6d:95:96:90:3d:b5:
7d:a6:f6:56:fa:b5:f9:a9:58:9a:2e:fc:4b:84:49:
d9:7c:ae:4a:c0:94:19:5c:86:e3:b8:88:00:f3:69:
36:1e:1f:c0:92:32:78:d9:30:5f:9f:86:44:ff:9a:
6c:7d:4f:c3:b8:32:62:6b:fa:95:41:b4:2f:39:86:
9d:ef:68:07:10:f3:0c:35:d2:d3:44:55:0d:24:1d:
ac:05:ef:42:b6:79:77:59:88:09:73:c2:2b:59:e2:
f9:f4:b1:c5:d6:ea:0b:fa:87:c3:52:fd:87:41:2e:
fb:d4:c0:a4:57:40:b3:75:b5:c1:0d:dc:34:9e:ec:
18:2b:a5:a2:fe:24:d1:72:bd:f9:45:60:63:ab:02:
09:95:41:0c:08:45:af:82:e2:6c:69:cd:68:a8:d0:
33:ac:9f:3c:b8:04:91:e1:fe:2d:ed:c6:4e:1d:13:
8b:77:71:7a:ce:7b:f4:ff:5a:6b:93:07:65:47:b0:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:F2:B5:7A:6E:E7:5C:6A:52:5E:7D:26:A5:23:86:64:AC:2D:BB
X509v3 Authority Key Identifier:
keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.182.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:94:3f:10:32:00:03:16:ad:d7:8b:7e:46:9c:12:b7:1e:53:
94:50:30:2b:82:ac:20:79:13:e5:32:02:53:d4:a2:bf:44:3d:
f5:20:15:af:27:2a:9a:53:eb:6b:b3:37:8a:1b:b6:cc:24:15:
94:7f:46:65:22:16:29:c5:44:b8:6f:1b:a1:14:e2:a9:f1:58:
a6:c7:bb:62:0c:ef:21:a2:34:57:f0:91:a5:aa:f4:bc:18:db:
e9:99:60:39:60:aa:57:3d:7a:cd:0d:e6:dd:00:12:a4:10:31:
7a:15:1d:4d:d2:e9:72:f8:3b:10:0b:44:80:eb:6d:12:18:98:
7b:29:6a:dc:83:b7:b7:91:9e:98:02:d0:52:85:66:fa:48:73:
f1:e3:ab:ac:5f:3d:c9:86:93:e2:44:65:03:9d:e1:d7:a2:d6:
0e:98:dc:e9:2a:6f:62:35:84:3e:fe:ae:a3:89:71:92:1d:92:
89:c6:d2:80:28:72:38:30:3b:8d:18:08:82:02:db:a4:0b:0b:
94:a5:60:05:46:4d:c8:4d:ad:c4:99:c8:75:1d:9f:58:4c:7e:
1b:01:8a:3f:5f:3a:56:80:81:fc:c3:c7:8e:90:fd:40:13:29:
89:f4:a3:27:e4:ab:23:3c:cb:6a:2e:8b:d7:ef:c6:b3:8e:f0:
90:42:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:26 2025 by rpki-client