Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73b4ba1d-eac2-3d72-8093-17d3626f1640.roa
File: 73b4ba1d-eac2-3d72-8093-17d3626f1640.roa (raw, json)
Hash identifier: SBsaOq6VgyWITRMDdc8fHGllgr3jKbWYUcvTiNRnEdo=
Subject key identifier: CB:6F:DD:46:8C:07:6A:58:F1:DB:34:EC:D7:52:E4:71:55:AB:96:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D02EFD45BC118F30476383F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73b4ba1d-eac2-3d72-8093-17d3626f1640.roa
Signing time: Tue 22 Feb 2022 05:00:00 +0000
ROA not before: Tue 22 Feb 2022 05:00:00 +0000
ROA not after: Tue 29 Mar 2022 04:00:00 +0000
asID: 22394
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:02:ef:d4:5b:c1:18:f3:04:76:38:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 22 05:00:00 2022 GMT
Not After : Mar 29 04:00:00 2022 GMT
Subject: CN=a8311955-9f09-4500-893d-249719476dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:19:8d:d9:0a:23:73:c4:25:0f:eb:64:3e:
a2:1d:8e:ed:b9:fc:10:8a:18:62:b8:13:be:56:36:
1f:dc:4d:7e:cc:75:cd:a7:14:d1:cc:6e:3d:bf:d9:
09:d1:5a:4b:18:90:f6:ee:a1:f9:9d:31:18:84:f1:
fb:1c:12:70:c7:43:30:87:be:72:8c:6d:27:df:3c:
63:ec:5b:cb:ef:47:41:cc:d0:43:2e:b0:da:1f:a9:
48:66:9f:b0:67:b7:ea:bf:77:5b:48:45:a3:da:80:
9f:07:2b:d3:b3:2a:2a:25:ce:c4:bd:df:a4:0a:ca:
d0:93:0e:f4:26:55:18:5a:71:5a:e4:fe:ab:73:96:
30:0a:b4:aa:a0:45:bb:2e:88:d6:c8:c4:68:ee:18:
14:be:bd:f9:97:97:a0:5a:77:04:9b:b4:5d:e5:20:
8d:6f:b0:3f:50:35:da:6f:97:66:81:24:65:cc:bd:
17:a4:56:5a:47:2a:a7:3a:58:28:94:1f:d8:fd:e9:
f8:7a:d1:bb:db:b3:ec:f2:1d:e8:b0:05:d1:1c:d1:
49:2f:6f:b1:62:4e:15:5c:b8:56:99:d0:cc:7d:29:
2b:05:8b:71:6b:b4:4f:1e:37:3a:25:ac:a1:d7:eb:
bb:ff:c7:31:01:1b:bb:6f:99:4e:c5:65:3c:ae:10:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:DD:46:8C:07:6A:58:F1:DB:34:EC:D7:52:E4:71:55:AB:96:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73b4ba1d-eac2-3d72-8093-17d3626f1640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:4c:2a:60:a1:f9:29:f0:7f:85:c1:42:5a:a2:e0:fe:2f:28:
3a:30:7a:60:de:cf:b0:3e:ee:bd:ef:63:57:fe:1c:4d:74:22:
96:1f:cd:be:45:29:db:e2:7a:89:df:b8:f3:9e:d4:ec:4a:fe:
38:52:ce:65:aa:ba:bd:0f:01:43:4f:12:55:94:76:5d:7a:1e:
5f:28:70:ae:3f:7e:41:60:11:a7:18:31:81:f3:d5:a7:ed:f3:
83:48:d6:de:93:19:a8:e6:7e:bd:e8:01:3e:7d:83:4e:b5:f2:
57:5b:29:f5:15:aa:8c:bc:4c:03:ed:d7:51:cc:3a:2c:28:4f:
fc:ff:22:da:4a:47:9f:e9:eb:8d:d8:4a:9e:8e:61:c4:5d:a2:
bf:77:b0:da:73:ac:c2:d8:22:8b:cf:74:11:2e:7d:d0:87:43:
c9:7f:82:9f:74:c6:11:ac:f8:a4:3b:59:7b:35:f8:4f:aa:07:
fe:e7:f0:45:ca:3f:99:f3:bd:75:bc:cd:31:93:c7:d3:6c:48:
9e:63:fc:0a:5a:5c:bc:3e:41:db:8e:11:b8:f6:8b:4f:67:c9:
e2:d2:d7:88:71:4c:0f:75:16:96:7a:4f:a9:4c:91:cd:19:79:
c6:b6:0f:49:b5:39:9a:0a:b0:05:aa:41:f2:80:94:e4:22:43:
06:60:c4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 19:57:33 2025 by rpki-client