Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/129c8485-8ab5-31c0-9366-5a70d6efe872.roa
File: 129c8485-8ab5-31c0-9366-5a70d6efe872.roa (raw, json)
Hash identifier: iKCcLyYLUyr4zIm7aEEZooPu8c/gQRlip0ecSCeXPsc=
Subject key identifier: A5:E4:78:D7:4D:60:C0:EF:D2:5A:83:A6:C1:28:43:ED:6F:C5:83:E2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AD21FA880CCA17588344FD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/129c8485-8ab5-31c0-9366-5a70d6efe872.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:21:fa:88:0c:ca:17:58:83:44:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=61e26e37-d470-4fdb-8d42-808d2402ff03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:63:2b:c6:82:85:15:dd:a0:74:c6:7e:f6:
bb:53:fc:8f:7e:c7:b6:ef:41:37:be:4d:55:3e:e1:
df:bc:bc:16:19:94:c5:85:5d:72:00:22:90:c1:31:
01:b6:8a:2f:bc:b9:1f:94:40:10:77:ca:ff:f5:54:
f8:af:50:6f:bf:4a:25:98:ba:17:b6:8b:8a:0b:e2:
31:73:89:90:0e:66:e8:86:d7:3f:be:47:5b:8e:83:
a3:93:b7:0f:cd:16:b7:66:fd:d7:02:32:38:6e:68:
d7:c5:5e:3e:7e:14:29:f2:d5:d9:15:fd:21:0b:95:
92:cb:c7:9b:d0:71:d9:6e:e3:1a:25:b0:22:00:03:
29:44:ef:84:ca:32:81:0a:76:c8:d2:2a:95:e6:3a:
88:65:4c:7d:2b:95:be:20:2f:5e:7e:ac:9c:c2:a0:
c9:82:b6:dc:5f:8f:29:46:b1:88:92:ba:07:9d:87:
be:c7:90:49:b0:a6:92:1f:a3:c7:28:0f:d2:65:e5:
76:d7:09:3d:e2:48:85:4c:0c:c6:83:ad:52:5f:84:
f8:0a:06:64:68:63:be:f1:78:60:2f:20:ef:91:df:
79:89:d1:fb:c1:9a:28:28:62:83:b5:40:b1:24:bd:
98:0b:8e:bf:19:37:31:6a:4b:8a:1b:1c:94:a5:26:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E4:78:D7:4D:60:C0:EF:D2:5A:83:A6:C1:28:43:ED:6F:C5:83:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/129c8485-8ab5-31c0-9366-5a70d6efe872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a1:42:f2:dd:49:42:a6:86:fb:bf:06:3c:04:13:39:e0:70:
20:57:39:fb:d2:8a:b6:cd:f9:17:8f:b2:6a:99:d1:a8:a6:3c:
23:68:c3:b3:ee:75:fb:fb:9e:7a:04:8e:16:d2:ab:76:55:56:
c8:9d:8b:7e:08:a8:30:a3:f4:e2:cb:4d:02:b9:df:a9:9e:24:
9e:8a:94:28:a6:9c:2a:31:7e:17:d8:63:35:c5:91:9a:29:34:
a0:9d:ed:04:5e:70:fd:39:83:f3:35:5a:97:49:b0:a6:25:09:
69:71:ca:34:99:35:79:12:e5:53:f8:ce:6e:96:01:a9:1a:97:
39:c4:5b:80:62:c5:27:9d:37:ba:6f:7b:23:5a:d1:ba:32:98:
4d:15:fd:90:40:b1:65:f7:a8:c9:05:ec:2c:f5:5e:15:c4:6f:
e4:f5:b8:27:27:6e:99:e2:f0:5d:9b:cd:30:f6:5e:4c:7c:61:
8e:e1:ff:a5:b6:f9:41:82:7e:f3:87:a5:b1:e8:3a:c0:7b:ad:
a5:c8:45:a8:d7:56:95:05:2f:12:8a:2a:7f:65:01:84:b5:fd:
6d:ff:e9:e1:45:88:b3:22:d7:0d:d4:d4:a4:b6:33:fe:c9:c0:
7e:23:e5:91:2b:e0:b9:09:21:b3:a4:29:39:84:a2:19:00:ea:
04:d8:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:25 2025 by rpki-client