Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fc8e461-28a9-3a31-bbf1-d7391b111eb2.roa
File: 2fc8e461-28a9-3a31-bbf1-d7391b111eb2.roa (raw, json)
Hash identifier: Sw3s1DW/UPWlzoNagEHcFPTqLcf153F7dWjxA0zqnuc=
Subject key identifier: D4:CB:1F:17:EC:01:94:7F:AD:A6:3B:80:2C:6F:B1:D3:41:F5:FB:60
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DEDD1E30A8741571592822300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fc8e461-28a9-3a31-bbf1-d7391b111eb2.roa
Signing time: Mon 16 May 2022 12:00:00 +0000
ROA not before: Mon 16 May 2022 12:00:00 +0000
ROA not after: Tue 21 Jun 2022 04:00:00 +0000
asID: 6167
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ed:d1:e3:0a:87:41:57:15:92:82:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 16 12:00:00 2022 GMT
Not After : Jun 21 04:00:00 2022 GMT
Subject: CN=1927e1b4-b1d5-48f9-9714-ff1ded31d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:ce:b9:b1:9d:25:c0:9a:af:c1:17:89:a6:
77:83:8e:8c:41:12:89:7c:c7:a9:47:d9:46:bc:4d:
6f:93:3d:05:e8:ef:81:4b:13:01:7c:8f:a7:37:a1:
90:da:e9:14:32:9d:df:98:45:ec:fd:a1:5e:9c:ce:
11:7b:5d:d8:91:75:39:f1:0f:cb:5c:20:da:e7:17:
50:76:f8:0e:c9:b3:44:c6:0a:b5:70:ba:e5:16:37:
79:a1:ca:69:f9:e0:f3:d6:74:cb:f6:f1:15:ee:73:
58:9f:0f:f5:cd:73:0f:85:01:6c:d2:db:21:4b:cc:
01:10:0c:bc:e6:cb:95:c7:23:53:93:d9:98:ec:5c:
e0:11:1a:10:a2:ab:11:fb:a5:50:da:b9:24:d7:53:
55:ca:6c:b0:39:a6:d5:ae:fd:ca:eb:3f:6b:01:a1:
b0:d3:03:2d:0c:e5:c6:48:e3:20:ee:15:95:9d:b6:
27:b9:21:a4:1c:0e:a4:f7:9a:6c:19:9e:03:42:a0:
a2:86:cc:76:72:2d:32:36:b0:e6:0d:6e:ff:97:28:
5c:a6:ce:61:28:52:d0:6b:f9:2a:3d:00:a5:48:65:
fb:d0:30:33:8b:db:04:5b:08:d2:79:6e:3f:6b:de:
54:2e:8a:ba:02:bd:5c:ca:00:84:1e:64:80:20:14:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:1F:17:EC:01:94:7F:AD:A6:3B:80:2C:6F:B1:D3:41:F5:FB:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fc8e461-28a9-3a31-bbf1-d7391b111eb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:d0:0e:8c:aa:7b:89:19:d7:aa:87:97:45:d4:e8:c9:55:f1:
e8:40:2b:f7:4b:f8:21:04:04:50:c9:ff:0d:49:13:10:57:b0:
56:95:20:a4:5d:e1:35:db:a7:2d:26:5e:15:5a:5e:db:2f:0a:
72:7d:ee:71:c5:5f:f5:9c:8a:a4:f5:6d:86:98:93:44:28:19:
39:bc:8b:e6:61:a7:c2:aa:28:1a:3f:4f:aa:41:ef:ee:9f:06:
03:ca:01:cc:a9:88:d1:60:34:91:18:59:45:a3:e2:fd:a8:f1:
6b:d7:1d:b5:c7:a2:f2:d2:58:f5:34:ae:a1:36:e4:32:cc:27:
e0:c5:37:f4:ca:d5:b8:22:05:84:28:71:4a:08:fc:d3:a8:7f:
f5:c1:ea:62:b0:85:a1:fb:73:fe:ce:45:14:02:f1:0f:2c:54:
0f:d9:88:09:0b:03:8d:fb:6a:71:df:51:77:07:89:ff:8e:48:
f3:74:e4:30:24:59:49:6e:15:0c:7a:ab:16:11:1e:5a:97:da:
cf:84:71:43:c3:24:7c:dc:99:03:2f:b9:b9:a6:fe:03:51:c6:
1d:db:a5:07:79:ed:3a:60:7e:0a:30:21:91:9b:01:cc:53:95:
ce:f4:60:aa:ad:83:e3:07:03:0f:a5:78:19:df:54:38:cb:2d:
f3:c3:d0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:08 2025 by rpki-client