Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a8dd6fa-4c81-3090-900e-fd7e13763971.roa
File: 8a8dd6fa-4c81-3090-900e-fd7e13763971.roa (raw, json)
Hash identifier: hg0r43jBB07vZlhxR8Mj0L3aSNlth4qWgda0VvzDZz0=
Subject key identifier: A6:2D:46:19:54:AA:25:B7:A2:57:D4:A6:89:27:01:A4:3D:E9:5C:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840860C93373240DCF680E7E460
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a8dd6fa-4c81-3090-900e-fd7e13763971.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 22394
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:0c:93:37:32:40:dc:f6:80:e7:e4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=d07317b9-365f-4e22-9fa9-d216d0ebcb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:2b:4c:b9:e6:e6:74:43:eb:84:d0:9c:bd:
60:ec:ee:b2:26:f2:63:62:4b:5e:76:5d:ce:51:5c:
20:97:68:d7:4d:96:21:7b:62:c3:ce:43:49:af:15:
60:c6:f0:fc:d5:b0:c7:1a:f6:dc:93:38:c8:14:05:
c1:23:cd:81:6b:06:87:c8:af:e5:4d:c9:aa:dd:f1:
31:c5:18:be:da:5f:04:dd:08:5b:4c:c1:97:f4:a9:
bb:02:c2:55:f5:e2:99:ce:66:b7:48:6f:1e:46:12:
ef:c0:f5:2a:a1:34:61:d5:1d:09:8e:33:ff:9b:3a:
74:c3:7c:3c:a8:30:ec:80:54:a2:db:59:23:22:c4:
e3:86:c1:6d:0a:ba:e3:a3:94:0b:e1:40:f4:c1:88:
3f:55:20:a6:88:f4:2a:be:80:a2:a1:99:60:b5:4f:
01:1a:f4:23:dd:77:07:f0:a9:19:3f:3f:bc:ed:ac:
db:fd:19:ff:56:02:0b:19:41:ee:b8:e8:d1:5c:eb:
26:6c:dc:3e:34:f5:cb:f7:f1:0c:5b:b1:88:88:40:
40:27:cf:7a:f3:b4:30:8f:ae:3b:6d:6a:17:38:50:
72:04:de:11:35:99:cb:db:53:66:51:f3:6f:dc:2b:
64:9f:cf:20:49:55:b6:8c:96:8e:30:27:dd:ef:cd:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:46:19:54:AA:25:B7:A2:57:D4:A6:89:27:01:A4:3D:E9:5C:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a8dd6fa-4c81-3090-900e-fd7e13763971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:1e:f3:e1:52:55:df:f1:36:41:0f:46:ad:f9:62:99:c8:c8:
e5:17:65:88:98:18:19:71:dd:2c:b3:32:2d:1f:7b:89:80:e9:
85:5e:0f:c7:47:52:8f:fd:a2:4b:f3:60:0e:f2:a8:90:04:43:
73:0c:29:5a:79:db:ea:90:90:44:d6:77:71:fe:78:ad:98:7b:
b5:5d:af:df:ff:57:d6:48:b7:57:58:88:f9:fd:d3:99:ca:bf:
3a:78:37:3c:20:f5:cd:e7:e7:9d:c6:e2:30:9a:cb:85:42:14:
af:d7:4d:15:d4:f7:17:30:30:cc:9e:e8:09:9d:19:92:43:c2:
e3:d9:cb:92:0b:0f:85:f1:ea:b7:ad:d8:1f:b2:d0:f4:6c:17:
4b:46:b3:f2:33:a8:5a:bc:24:37:ea:54:cb:99:b9:63:55:0a:
ad:75:1d:01:2f:eb:5a:4a:55:5f:07:7c:f9:97:7b:69:f8:47:
90:fa:c1:57:7e:2e:b0:72:29:31:c6:2d:e0:65:53:fa:f5:0a:
0d:50:cc:41:02:79:19:8b:32:25:b6:06:95:d1:cb:fe:b4:d5:
8f:46:24:ea:14:2e:b1:48:32:62:84:cf:91:0b:da:f8:63:1c:
87:33:22:28:2c:43:e4:57:8e:3b:56:8a:9e:b7:a9:50:9b:3d:
21:a1:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:18 2025 by rpki-client