Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3298bfc4-90b4-3352-8e95-3a3700dac472.roa
File: 3298bfc4-90b4-3352-8e95-3a3700dac472.roa (raw, json)
Hash identifier: RZ2/LitSjlFnxLxrYLw0gJp4DsteQDA7/P6NipHw6Ss=
Subject key identifier: 26:AA:0B:FA:53:14:E7:9C:86:A8:CE:2D:39:2D:D6:35:D7:46:CB:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC2FA0380FD14846C62832D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3298bfc4-90b4-3352-8e95-3a3700dac472.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 22394
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c2:fa:03:80:fd:14:84:6c:62:83:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=ef5bd6ab-2a32-4204-8d63-1889f04ba389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c0:d1:57:e3:4d:7c:83:e8:31:c7:f6:2c:82:
44:01:40:04:ec:46:07:b0:bf:02:fa:26:39:3f:5f:
d0:6f:c8:ae:2d:43:06:63:0a:ba:5a:67:be:74:94:
9b:2d:fb:55:a8:f6:aa:1c:09:28:86:ff:e1:30:ec:
61:2c:8c:82:8d:7a:fa:31:da:88:e3:3c:72:a5:b9:
97:f5:26:86:d3:45:9f:6b:5f:f5:51:08:2f:62:95:
4f:25:ce:dd:03:4a:3f:ac:b6:18:da:3b:d0:4a:ba:
83:04:24:c7:80:fa:e6:35:5b:58:8d:b5:b3:43:e7:
bf:ff:f7:41:f8:2e:ad:68:79:46:0c:56:f9:40:08:
ab:69:f8:84:b6:99:2f:4f:8e:0f:02:4c:3f:98:5b:
ba:b8:bb:17:72:b9:41:c2:3f:7d:7f:f8:c9:15:83:
68:09:1a:6d:7f:4d:b0:1b:a9:80:c3:49:fa:81:94:
73:78:02:21:2b:d0:ba:02:a6:be:97:b7:da:11:72:
b0:a6:d3:09:5e:dc:8a:76:6c:7d:34:79:6d:21:08:
ac:2b:3e:1b:eb:d0:4f:79:52:da:fa:bb:4c:84:97:
5c:ef:11:fa:45:d4:7f:7b:a7:66:0b:9b:65:ea:6d:
83:9e:9a:e0:d9:67:40:d1:f5:52:60:06:3d:5e:61:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:0B:FA:53:14:E7:9C:86:A8:CE:2D:39:2D:D6:35:D7:46:CB:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3298bfc4-90b4-3352-8e95-3a3700dac472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:67:85:3b:3a:6e:b4:89:01:71:c1:8e:76:86:68:5e:a4:4f:
98:c3:57:aa:a3:84:eb:fb:ea:2f:a5:61:00:09:11:c1:ce:dd:
ea:57:c1:22:8e:f0:e7:ad:ab:72:cf:60:ac:ee:92:80:47:b4:
d1:d9:18:69:c2:a8:4f:7a:b3:64:df:b5:b3:b6:6a:75:5a:d7:
ca:ea:4a:57:af:ed:7d:3c:3b:85:69:84:d3:2a:b6:28:ef:0c:
38:94:6b:6d:d3:26:72:4c:4e:76:44:27:bf:3c:9d:42:91:3f:
6e:03:8e:cf:e4:45:4e:b8:5b:ae:db:96:34:9e:a4:42:ba:ac:
93:ca:f7:d2:0b:fc:b8:56:00:f8:94:13:b8:fc:10:61:61:f2:
86:34:bb:8f:ab:63:d2:08:6f:cf:52:f1:71:bf:7d:65:46:45:
a8:98:67:50:01:4a:d5:30:5a:b7:f1:2d:5c:4f:a8:b2:23:11:
ae:80:69:d3:3f:d1:cc:e9:47:a5:45:4f:9d:3d:31:71:3b:e7:
6e:e5:19:e7:5d:a0:fb:39:ae:2e:73:46:95:05:34:66:85:e2:
9c:b0:85:24:42:45:b1:cc:0a:98:73:34:14:51:3a:e0:0e:ed:
0c:82:39:c4:a6:de:85:c9:cd:0f:fc:c1:06:cd:57:a2:ac:82:
72:92:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:44 2025 by rpki-client