Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cec23f8-d401-3684-b9b4-74806fd606ac.roa
File: 0cec23f8-d401-3684-b9b4-74806fd606ac.roa (raw, json)
Hash identifier: HYE/IGidTWlME/PbX9RGLe3sYb12n2eCJwl5OmYf0EY=
Subject key identifier: E0:DF:44:5F:AA:47:8A:FF:DF:A8:8C:27:69:22:79:D2:CA:94:48:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584037CB462CBE59F31BA5BA0480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cec23f8-d401-3684-b9b4-74806fd606ac.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:cb:46:2c:be:59:f3:1b:a5:ba:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=70632858-d57a-40ee-906a-38295d1e9b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:40:c8:77:ca:d8:1c:79:fc:16:00:6f:52:
f5:68:24:8c:c9:db:0b:7f:99:ef:e1:19:9a:92:c0:
60:69:4c:5e:10:48:f7:12:5d:05:d1:57:26:60:d7:
9f:d3:32:1f:a3:f8:3d:dc:3f:7d:7c:fc:c5:1b:c7:
78:a2:44:92:ac:d7:46:9d:a2:35:a7:29:1e:f3:bb:
8e:43:06:6f:a8:e6:73:86:7e:79:16:45:87:ef:2c:
e9:ab:8d:fa:2f:75:57:b2:63:e3:50:22:34:0b:d2:
00:8a:12:67:9f:61:3b:9f:f9:e7:ef:5d:0d:fe:db:
21:f2:db:af:2d:ba:eb:d3:0d:27:ee:9b:76:a9:c6:
2e:95:e0:a0:f4:de:8d:36:ce:1f:57:1a:cc:30:c6:
0e:7a:38:73:29:c6:7d:de:9f:08:d0:ad:f0:73:85:
18:db:1f:ab:2e:cf:b5:84:53:26:3f:db:4e:16:a0:
dd:3b:81:f8:e9:87:89:78:53:89:84:9f:b0:96:ae:
4c:4c:77:5f:f8:52:ca:22:c3:0d:c0:da:2b:45:26:
a3:0c:3f:e3:37:8e:85:3a:11:43:33:c4:f5:74:dc:
ad:44:e4:e0:67:35:2f:93:d9:95:fe:85:24:8d:93:
cc:e2:7e:e9:7f:13:29:65:7c:12:69:55:78:31:7e:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:44:5F:AA:47:8A:FF:DF:A8:8C:27:69:22:79:D2:CA:94:48:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cec23f8-d401-3684-b9b4-74806fd606ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:56:37:9b:a1:8a:59:ae:37:93:db:ac:95:d6:be:b6:f6:23:
c6:67:cf:c0:50:7f:6c:97:69:a1:32:2f:92:c5:63:45:17:d0:
29:2f:1f:d3:d2:55:59:d8:ee:ff:04:49:95:73:3a:51:39:56:
e3:b9:34:9c:b6:81:17:83:43:da:ec:a3:b5:da:a4:c7:c5:51:
b0:b1:43:2d:99:43:65:b6:0c:66:82:ce:01:70:9b:3f:c5:4d:
09:03:26:9b:09:55:77:92:c6:3e:95:b2:64:be:70:04:f8:f7:
ce:4e:42:ff:e0:2f:f2:89:59:ef:e9:49:7d:b2:59:9c:60:0b:
f1:82:c8:ea:a1:3b:a6:57:de:a1:99:b9:2a:fe:90:48:fb:59:
b0:53:fb:e1:4f:82:de:4d:c1:99:4c:fc:26:77:95:3d:62:4d:
13:68:e2:63:38:22:b7:d9:8b:96:55:e7:4a:16:d7:7f:0c:a3:
e9:c4:0c:05:fe:42:3b:66:98:19:2d:a0:ce:a5:f2:21:a8:b0:
da:7a:fe:cf:e8:b2:e8:c3:0d:dd:1a:6c:17:da:0c:0e:4c:87:
46:f8:29:02:a4:7e:6d:3b:ef:9c:a3:18:e7:3e:2a:a2:97:4b:
58:88:29:15:e9:01:81:10:d5:ff:61:f5:cc:85:ff:da:1b:12:
69:25:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:50 2025 by rpki-client