Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/438114c1-0d12-34e7-98c0-0ad733f5f821.roa
File: 438114c1-0d12-34e7-98c0-0ad733f5f821.roa (raw, json)
Hash identifier: OsiiST4e2hRTP559rZBJG7xeqguSyw8DQBttc7O8Owg=
Subject key identifier: 32:77:B3:35:76:9A:E1:0E:49:00:13:EB:0B:D8:C2:06:76:C1:71:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9BDCC928076933F15140A280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/438114c1-0d12-34e7-98c0-0ad733f5f821.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 139.56.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:dc:c9:28:07:69:33:f1:51:40:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=2edc44a7-a998-4b10-b5f4-fe238e435600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:81:a4:0c:9d:5f:a2:d7:80:10:90:16:65:
9d:ea:7c:64:67:e5:87:39:7e:de:de:18:78:88:ac:
48:66:88:28:54:a9:9c:9d:50:68:af:98:43:34:10:
20:ea:ca:be:79:e8:22:af:a2:4c:07:fd:8e:25:92:
4f:68:f8:5b:83:89:6a:d0:f8:a0:a8:6a:7e:e4:ad:
d4:bf:7c:86:5a:ae:f2:5e:f4:53:56:5b:92:51:58:
e2:43:bc:6e:80:10:9b:dd:5b:59:6a:5a:88:5d:a4:
e9:f0:59:3e:c6:6d:bc:84:7d:96:21:3e:8c:15:6d:
83:58:5b:3a:a4:f1:90:71:84:55:e0:e1:d5:a8:db:
40:eb:f3:b0:c4:fc:9f:dc:26:d1:fa:e4:f4:10:f6:
d4:10:38:58:2d:1c:dd:4b:18:fd:7a:b6:0d:be:8e:
54:51:fe:75:fb:8f:b6:c3:76:a4:be:8b:51:51:05:
aa:60:99:7d:89:fb:ec:b8:59:12:44:7d:99:91:03:
97:d2:3e:fd:31:7d:97:e2:ce:f1:42:9f:d0:92:3e:
77:27:e9:b7:c8:af:66:d6:e1:01:f7:31:dc:a4:69:
e9:f8:1e:d1:59:60:88:97:37:c1:75:d6:3c:de:fa:
3b:b4:be:50:d2:cd:83:05:00:76:e6:c5:53:aa:bf:
0c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:B3:35:76:9A:E1:0E:49:00:13:EB:0B:D8:C2:06:76:C1:71:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/438114c1-0d12-34e7-98c0-0ad733f5f821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:c3:3e:9e:ed:ba:81:e2:44:11:94:0e:e3:3b:06:a4:5f:20:
5a:b9:81:fd:eb:00:48:6c:df:a2:3c:dc:a4:06:cd:e7:b0:91:
df:80:7c:df:2a:3e:b6:c0:47:90:7e:59:82:1c:72:da:4e:4d:
0e:7b:47:73:26:76:63:92:90:8e:ab:c0:29:ba:48:b0:e6:66:
e1:1a:ab:00:a7:bd:bd:41:75:9c:68:b7:f5:d6:19:d3:95:4b:
cb:b1:35:04:23:42:f0:76:9b:cc:e8:f8:df:3a:69:04:e6:35:
e3:80:b3:99:02:00:27:70:02:95:a0:de:fc:ba:39:68:fb:4c:
e2:85:b7:97:c8:33:3b:53:ac:f8:7b:da:1b:3e:9e:70:10:7f:
24:bf:79:54:5e:69:ee:0d:55:e9:01:40:fc:bf:d9:71:de:a3:
6f:76:c8:55:8f:8c:ec:b7:a5:c2:4c:d6:e9:27:08:54:7e:b1:
fa:54:0a:90:3c:76:f6:0b:b7:1c:17:e8:d2:7e:80:6c:c0:b3:
87:45:3a:9a:22:e4:dc:b4:11:8f:4f:3f:53:d3:b3:fe:73:87:
51:36:a1:e1:3b:77:cd:bc:0e:23:a2:b1:b3:0b:7b:11:8e:1d:
9a:d6:18:2d:f6:e6:a7:5e:dc:dd:64:04:18:19:7d:1b:1e:5d:
04:61:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:24 2025 by rpki-client