Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31015b80-23b9-3424-8a49-9a9aba1874d5.roa
File: 31015b80-23b9-3424-8a49-9a9aba1874d5.roa (raw, json)
Hash identifier: 9UIIBZwQrxLIPvjTZRpasoF41R6pSldcEMtC1tftS6w=
Subject key identifier: 41:4D:9A:FF:C8:F5:16:0B:8C:91:D5:A6:56:7C:2D:F5:E4:C8:E9:2A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2A2B7A59A2E5542F1F1496C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31015b80-23b9-3424-8a49-9a9aba1874d5.roa
Signing time: Tue 08 Mar 2022 05:00:00 +0000
ROA not before: Tue 08 Mar 2022 05:00:00 +0000
ROA not after: Tue 12 Apr 2022 04:00:00 +0000
asID: 701
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2a:2b:7a:59:a2:e5:54:2f:1f:14:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 8 05:00:00 2022 GMT
Not After : Apr 12 04:00:00 2022 GMT
Subject: CN=e2639fde-b487-477d-a854-a54d94b9bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:21:f5:38:a7:16:90:ae:eb:24:6c:1b:70:
1b:c0:24:4a:9d:ae:38:3e:1b:82:08:d0:fe:ea:13:
c6:fc:e1:b2:f8:a1:64:ea:1a:7e:ac:43:60:38:f1:
41:4b:d9:0a:10:b6:11:6a:c0:3d:59:b3:2f:8c:98:
6a:7c:c1:a9:36:99:ad:e3:53:8d:16:c2:36:a8:15:
bc:6e:11:29:35:f6:a2:aa:2e:d5:66:bf:65:82:a8:
8e:e3:12:ea:43:d8:ed:93:b1:0a:4d:73:eb:f2:7a:
6f:c3:78:98:50:ec:a2:44:45:7a:68:0e:66:6a:04:
32:38:60:a6:85:75:56:c7:54:5e:89:6a:6b:db:e1:
2b:bc:4a:2f:42:3d:61:1e:bd:b0:d8:3b:2b:e6:fd:
42:be:49:c4:70:37:e4:20:fc:7d:c0:79:f3:11:c3:
4b:1f:fb:ef:af:a8:b4:c1:74:9d:fb:cf:b1:b1:d5:
00:36:f3:d7:92:b5:2c:86:c8:5f:ab:10:b1:2e:27:
05:62:0b:6a:be:fb:2e:5d:10:90:13:38:52:1c:88:
30:9a:06:59:c7:91:37:36:eb:89:9f:4f:d9:3e:6b:
70:c3:19:75:00:a0:52:21:d3:29:af:e0:1b:fa:83:
0b:4a:6a:f2:6d:16:16:ee:d1:93:1a:6b:95:e2:0c:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:9A:FF:C8:F5:16:0B:8C:91:D5:A6:56:7C:2D:F5:E4:C8:E9:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31015b80-23b9-3424-8a49-9a9aba1874d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:fa:59:23:2a:0f:6b:a7:c2:b6:1d:91:cb:9e:ff:b1:99:65:
95:b4:f5:86:ce:1b:ba:10:4b:44:43:2c:b0:58:fd:24:b4:d8:
a9:92:78:12:cc:f4:97:1d:f1:1e:82:82:76:70:86:cf:04:cd:
1e:1d:84:df:6e:c8:a8:78:68:48:18:f4:ff:69:b0:05:83:f2:
e2:1c:4d:bf:70:aa:05:5f:08:b1:7b:5b:22:f9:1b:7f:ae:67:
d3:53:bf:80:9b:45:35:3b:8f:81:5c:9c:c4:36:be:0e:e9:06:
2c:7b:ae:fd:ce:4f:1e:ae:e1:6d:39:0a:2c:f4:c8:87:f5:fe:
9f:1e:d3:32:0d:e0:c3:eb:c9:13:61:cb:78:c9:1a:68:60:38:
5f:40:88:22:ee:ac:07:b8:42:57:4f:75:db:37:ac:7d:b7:68:
21:78:19:8a:d1:d1:5a:cc:b7:c1:85:ee:ad:95:cb:ee:6b:ea:
bb:00:a9:47:68:af:c0:8d:4a:02:99:03:96:91:6c:29:36:4c:
07:15:ea:61:8e:70:ed:c4:ec:fa:cc:eb:93:33:ee:3b:73:2c:
73:a5:4f:39:bc:e6:ee:4e:f2:e7:f1:4d:f0:ad:a9:10:81:ca:
b8:9d:2e:89:fe:25:ef:41:bc:76:fc:2e:26:d5:3b:4c:fe:3e:
21:e2:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:11 2025 by rpki-client