Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/406de307-96fa-34d1-8886-cf3d2322ecab.roa
File: 406de307-96fa-34d1-8886-cf3d2322ecab.roa (raw, json)
Hash identifier: o3g+Agg0KnTV+8D9xQ38olAiKgYrfSeztxiVcCbGEkU=
Subject key identifier: 85:C5:5F:7F:A9:75:F6:62:5A:FF:E3:CA:5D:72:62:BA:8E:C6:AD:43
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584010C4804D16156BBEE6F59180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/406de307-96fa-34d1-8886-cf3d2322ecab.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:c4:80:4d:16:15:6b:be:e6:f5:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=c08aaa2f-1ac3-4a04-b4a0-1e52a0bd054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:39:bc:a6:24:b3:fb:50:6f:3a:2d:0c:09:
2f:06:9b:28:18:f0:4e:57:66:df:14:f0:81:60:62:
ff:38:7f:06:b1:ed:91:90:83:23:6e:f8:68:06:bd:
b5:8e:5d:5a:74:b1:0c:15:a8:0c:c1:cc:da:5c:25:
83:ea:bb:cd:5c:89:72:ea:40:bb:3b:3f:44:79:86:
ea:44:a2:2d:e6:68:db:94:d9:58:a6:38:55:a0:03:
88:56:c0:ff:94:1c:88:0e:e0:87:56:61:06:0e:cd:
cc:73:36:38:86:c2:cc:f2:21:cb:47:c3:80:3f:94:
9c:92:c5:8d:a2:56:a2:7d:6d:ad:5c:7b:55:52:5b:
d4:87:20:ad:57:48:3b:81:89:b0:18:98:25:9f:85:
38:45:e1:16:9e:5b:18:12:48:23:77:bd:1c:a0:6d:
f5:46:85:e6:cd:44:3b:47:a7:14:c0:fd:e7:3e:2d:
95:38:f4:05:94:7a:99:f1:ed:78:33:54:b5:22:f7:
9d:8c:ef:2d:8b:30:5d:64:17:6a:a5:8a:f7:57:a5:
2e:5c:78:4e:84:47:17:41:d5:c5:2b:88:da:3b:54:
ab:ea:25:96:41:cb:44:40:fb:78:61:d5:8b:54:ee:
ca:95:d8:c9:7a:c6:0e:a3:0d:c4:a8:f7:b9:ef:b2:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:5F:7F:A9:75:F6:62:5A:FF:E3:CA:5D:72:62:BA:8E:C6:AD:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/406de307-96fa-34d1-8886-cf3d2322ecab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:50:42:f6:d4:07:b2:e7:e1:dc:b1:1d:fa:ee:dc:81:9a:a0:
56:b7:59:7a:91:64:ed:89:2f:30:9e:18:15:d7:08:43:85:e2:
f1:3e:2a:3e:1c:49:67:0b:93:7d:21:c6:33:dd:b0:83:eb:73:
c2:1f:7f:51:8d:19:ea:04:66:85:b9:55:1f:60:47:e6:27:cc:
c1:28:20:3b:96:9f:55:4d:53:39:a6:1d:4d:17:da:01:4e:90:
f8:65:ec:81:12:b9:3f:d3:c1:70:d3:be:7c:19:eb:ea:78:73:
f1:a0:e2:e9:cb:83:12:53:c1:21:08:10:1b:66:77:fa:40:ce:
81:83:95:ec:9d:d7:64:e9:af:73:18:22:fb:cb:34:8c:25:34:
5c:23:fc:bb:38:80:33:32:01:01:bc:e0:4b:14:46:e3:d4:fa:
5f:15:eb:8b:5e:9f:45:73:58:2c:5a:5b:65:fd:db:10:13:18:
ff:21:27:16:81:7c:dc:b7:d5:52:dc:48:81:54:fe:cf:5d:cb:
02:4e:81:62:1f:6f:16:d1:d7:30:67:e5:bf:48:f1:9b:6e:b1:
b9:8e:80:d2:38:95:0e:ae:31:2c:1f:03:80:c4:95:41:d3:64:
ba:4e:b8:0d:04:e1:26:47:15:3a:5f:99:c9:a0:64:61:c9:d2:
21:7f:a1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:58 2025 by rpki-client