Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24437c36-2dce-3e18-aa48-e2a61272956e.roa
File: 24437c36-2dce-3e18-aa48-e2a61272956e.roa (raw, json)
Hash identifier: iQO8BGZWxAW9BWBNG3a06wOo0VPApOAiYkyLrbRyqlE=
Subject key identifier: BB:F2:82:4E:73:43:14:30:D4:8D:2B:7D:EE:EE:CA:86:7C:BB:4E:1D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584086A8F75668C6599FC44CA940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24437c36-2dce-3e18-aa48-e2a61272956e.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 22394
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:a8:f7:56:68:c6:59:9f:c4:4c:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=16a409d1-4081-4a8d-b16f-70dbb1da64ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:2c:cd:c2:d6:9a:21:ee:4d:0f:82:95:8d:
b7:65:db:53:1b:8c:a3:24:54:00:eb:76:fd:ee:1b:
52:f3:9b:3b:10:2d:9a:bb:15:33:5c:45:15:28:43:
04:5c:c3:48:e7:7f:db:27:ae:fc:43:24:c8:80:bb:
4e:38:af:85:88:2f:9d:cd:a4:67:fc:0a:fe:a2:e3:
dd:76:b6:f0:a3:57:b6:08:60:50:8e:51:66:63:f1:
32:3f:28:3e:89:1d:9e:5f:59:18:01:d5:2b:2b:fb:
cc:7f:4f:59:d0:ba:4d:55:6e:4a:0f:06:17:9f:28:
f9:4a:4b:d2:d4:33:f3:90:0a:23:2f:5b:fa:13:cd:
83:d8:a7:3e:2f:a2:6c:8f:dd:91:d6:6a:de:6a:3e:
76:16:ca:ca:26:80:0c:6c:49:a0:20:e5:21:29:1b:
28:9f:9e:3f:54:df:d4:4a:7a:8c:37:83:68:c0:35:
63:a3:00:76:7d:08:d6:9f:f3:2c:ec:3c:08:51:de:
62:09:d0:f1:b3:51:f5:b2:0f:04:25:2d:32:78:c4:
ee:e1:8c:1b:d5:6a:c4:56:b1:a8:b6:a6:69:38:24:
04:89:1c:39:43:e0:41:26:ca:b2:a7:6e:68:b6:0c:
20:43:9d:df:ad:e3:9b:a1:f8:12:43:2c:4c:fc:1c:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:82:4E:73:43:14:30:D4:8D:2B:7D:EE:EE:CA:86:7C:BB:4E:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24437c36-2dce-3e18-aa48-e2a61272956e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:35:9c:4f:68:92:c8:3d:9c:7b:53:ce:35:7a:db:68:92:e1:
7d:54:68:c3:ef:4a:24:f3:16:67:6c:e0:12:18:6f:db:e2:16:
c7:6a:30:bd:00:1c:4f:43:dd:4d:4d:2a:65:1c:ed:8b:b5:a4:
50:3f:ce:5b:6d:63:f3:c9:af:15:c5:35:df:9d:00:3e:4e:75:
02:28:80:f5:3a:19:cf:e3:4b:ac:0f:c3:84:65:9a:a2:3f:0a:
ce:21:e7:67:13:1a:62:c7:c5:ac:b7:02:4c:77:5a:a5:74:6d:
4f:6e:83:b7:b8:1e:ea:ba:44:07:af:20:50:07:e6:93:02:bc:
60:5c:07:3c:e6:be:fa:12:d0:89:7e:16:20:3d:eb:06:4f:dc:
72:19:43:f1:f2:63:19:28:fd:7f:1e:c6:9f:d9:75:d6:cf:14:
c6:00:98:2f:23:6d:9d:77:17:d0:75:84:f2:f8:e6:06:af:c9:
2d:15:46:91:03:9d:0c:15:3c:ce:7b:c0:a5:65:ff:34:ce:e9:
15:5a:8f:b2:96:fb:1f:52:1f:c6:7d:7e:0b:16:0e:8d:42:ff:
e9:ca:08:73:35:b3:36:b6:30:7a:92:08:0a:7c:ad:17:26:d2:
d1:6d:92:12:db:c3:f9:69:f7:a8:72:6e:df:a4:82:5e:ca:10:
05:e2:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:15:15 2025 by rpki-client