Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38854146-56a2-3881-948c-c2e2b86eaefc.roa
File: 38854146-56a2-3881-948c-c2e2b86eaefc.roa (raw, json)
Hash identifier: U0LA19uKhwgsGzYJHY352UlNtcmhS3vJNH7icTKbjzE=
Subject key identifier: CF:83:E1:C5:1D:CB:FB:CD:9F:62:00:87:B0:F0:3F:CF:54:A0:1C:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584037CB35BE9376F2C7521BB300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38854146-56a2-3881-948c-c2e2b86eaefc.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:cb:35:be:93:76:f2:c7:52:1b:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=2b8b0ceb-11e7-4c38-a166-73247da8593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:6b:09:8d:60:90:83:0c:19:f3:6f:56:27:
93:e3:47:3a:02:70:10:5a:4b:07:71:c2:a1:5f:34:
68:02:31:08:85:ce:db:ac:2c:d3:a8:c8:05:45:15:
24:d3:0d:55:77:a9:0c:fe:55:e0:42:23:e6:05:53:
bd:87:f6:cf:32:f0:d8:ad:aa:3f:f6:23:b6:8c:82:
3b:3a:74:12:ed:5e:e9:20:4c:d3:b6:d6:4e:2b:d2:
1b:aa:40:31:c0:59:37:73:1d:50:8a:9c:8f:92:63:
6d:20:82:75:b0:12:8a:e8:e5:3c:08:e1:11:b9:0c:
ef:e9:59:05:b6:25:d5:5c:39:9b:b5:a5:3d:04:09:
fe:2b:3c:e4:c9:9d:c7:6a:7a:fb:1d:1a:1e:16:63:
bf:aa:b6:72:98:8c:2a:1b:90:d1:91:5b:20:84:19:
7e:57:21:04:da:83:c1:e7:a6:48:08:c0:64:99:02:
0b:e2:a2:58:1b:2d:9a:c6:94:6c:66:c2:7f:c8:ac:
a6:46:58:76:82:a2:1a:41:ba:f3:60:0f:d6:a4:f6:
b6:6e:cc:e8:f5:57:59:ce:93:24:dc:80:c6:d0:c5:
3e:1c:56:f6:da:9c:5f:7c:d1:6f:b7:fe:fc:79:30:
68:38:b2:d4:f3:ec:ff:b7:b4:b3:42:4b:7e:0b:73:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:E1:C5:1D:CB:FB:CD:9F:62:00:87:B0:F0:3F:CF:54:A0:1C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38854146-56a2-3881-948c-c2e2b86eaefc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cf:f2:ea:41:d7:ae:f1:8d:31:8c:af:ee:15:91:5e:ec:ca:
88:9e:91:82:12:0c:9b:c7:86:b4:62:fc:d6:d9:85:ac:58:12:
9c:be:8b:fd:7b:b5:70:ea:d0:aa:80:3a:07:32:1b:6e:4b:73:
b5:44:b2:73:fb:9f:f9:88:b4:9a:3a:47:5a:ef:15:fe:09:02:
0a:0c:02:7a:d2:d9:5b:b9:81:fe:34:1c:93:db:dc:a2:28:84:
77:d5:3c:9d:17:11:38:90:92:45:94:c0:13:e4:c3:c9:0a:8f:
5c:67:ba:f3:15:f8:97:92:64:4d:05:bf:f2:ab:fc:3e:a0:26:
65:eb:c7:81:33:d7:fa:b1:cf:9a:e7:b7:23:ac:03:b6:bd:ed:
97:ac:ca:0a:14:a1:a4:7d:99:48:5d:b0:65:f2:79:d1:b6:bf:
cf:fe:77:b3:97:84:34:80:08:08:a6:be:1e:cb:15:e0:4f:72:
45:10:e2:fd:9d:22:e4:ee:3c:54:19:32:8a:7d:76:06:c1:77:
e4:bd:d7:ae:04:c7:d9:82:88:28:c5:70:2a:ea:13:99:d3:70:
79:99:73:f2:8d:77:c7:88:79:c7:b0:bd:9b:bb:41:64:44:58:
1a:da:34:87:b3:59:31:3a:8a:68:a1:36:8d:f0:db:5a:70:23:
fb:7e:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:45 2025 by rpki-client