Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a924e545-62fe-3126-8f96-ebfdfb4bfd94.roa
File: a924e545-62fe-3126-8f96-ebfdfb4bfd94.roa (raw, json)
Hash identifier: JrCX9S9TDFnk+uTZm1ns6MTz+UHz0GkCYZqZSHcmqr0=
Subject key identifier: 94:B9:DC:1A:C2:23:D7:80:0E:B4:3A:AC:ED:E8:9B:C4:12:60:BF:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D444FAD8CD7332CBDA7E4F000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a924e545-62fe-3126-8f96-ebfdfb4bfd94.roa
Signing time: Thu 17 Mar 2022 04:00:00 +0000
ROA not before: Thu 17 Mar 2022 04:00:00 +0000
ROA not after: Thu 21 Apr 2022 04:00:00 +0000
asID: 22394
IP address blocks: 139.56.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:44:4f:ad:8c:d7:33:2c:bd:a7:e4:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 17 04:00:00 2022 GMT
Not After : Apr 21 04:00:00 2022 GMT
Subject: CN=987fb3e3-305b-4f8e-87e4-d133e24bf931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:b6:33:87:92:b5:6f:52:04:b5:ef:2d:5c:
8e:e3:d8:20:30:c9:fb:0d:31:dc:82:71:1f:0d:96:
08:83:a2:dd:33:de:19:56:96:4c:79:43:85:20:fb:
44:e6:97:66:59:79:00:b0:42:8c:eb:50:eb:ae:5f:
42:a5:af:f2:ce:96:0c:b9:af:20:19:0f:ac:5b:0b:
32:9b:c2:b5:8a:2d:0c:c7:6e:02:87:2a:6b:1b:78:
e9:21:c7:f5:96:47:13:84:42:20:ba:74:1a:9a:c4:
af:d3:c2:12:45:3c:71:48:40:90:8e:a4:2d:c5:81:
59:43:8f:72:42:80:18:f2:be:c2:e9:89:82:37:17:
20:9c:75:bb:e9:da:a9:27:a8:7d:15:cd:60:b4:b8:
6b:b8:7f:88:70:48:10:78:5c:13:90:a6:de:5e:ba:
0c:39:50:d2:0f:7a:81:32:6c:41:4a:70:dd:10:86:
dc:db:b1:70:32:1c:ef:c6:1e:e6:f3:ec:c8:c7:96:
96:78:dc:5e:07:09:6f:21:92:c2:4c:24:5d:1f:aa:
8a:1e:36:90:51:fa:4a:6f:e4:64:97:15:c3:1a:ec:
51:22:d4:38:a8:ef:d0:d9:e2:ef:87:db:58:f6:44:
6d:a9:69:7f:29:48:f9:9e:c6:db:a5:1c:66:36:4f:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:DC:1A:C2:23:D7:80:0E:B4:3A:AC:ED:E8:9B:C4:12:60:BF:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a924e545-62fe-3126-8f96-ebfdfb4bfd94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:8b:0f:f7:03:88:29:41:32:0b:0f:36:3c:55:3b:d2:a6:44:
62:56:04:1a:44:b1:dc:d4:cb:ea:d9:31:6b:f4:9c:7c:de:84:
f2:85:1d:97:6c:4d:a3:ca:0e:3d:61:cb:98:63:ac:30:c3:d7:
89:9d:71:2f:75:d9:00:a4:d0:aa:88:d4:d3:9a:c0:6d:b0:b7:
09:82:6c:4b:c3:8f:47:52:42:23:1c:86:e0:48:bf:6c:b6:db:
cb:00:22:95:27:cc:cd:df:81:fb:17:e6:56:e3:73:2e:fe:d7:
c4:d6:96:34:0a:bc:e3:7a:37:e1:ee:8a:e3:1e:68:f5:cc:dc:
ed:14:8c:91:4a:75:5f:cc:0b:f8:7a:17:a4:75:cf:e0:d1:4d:
a0:9f:8c:c3:40:2e:12:ae:80:0c:53:a4:a7:d9:2f:be:f6:1c:
de:a2:a1:32:2b:cf:6e:89:67:36:4d:f8:c6:26:10:87:d4:64:
f8:9f:1b:27:d2:14:37:5d:39:b1:24:b7:a9:b7:88:af:86:94:
07:88:cd:09:30:0c:81:ed:30:33:d9:2c:75:45:58:75:5f:c2:
27:68:02:a8:56:3f:8b:cf:7c:54:36:dc:ad:8c:43:5b:8d:f8:
b9:3e:f8:72:18:e9:73:ba:b8:5b:a7:ac:93:cb:9b:93:b0:37:
34:f6:12:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:54 2025 by rpki-client