Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af159e67-af05-3d3a-9435-bca12128b242.roa
File: af159e67-af05-3d3a-9435-bca12128b242.roa (raw, json)
Hash identifier: jYZb4+lIrrnG4w3ruC5fJP8l+mpYEiHe8IlCM1QjrDo=
Subject key identifier: C3:FD:9D:2F:65:A1:1C:C3:F9:14:54:F2:FB:FB:52:4D:53:D0:FA:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584029FAF3E54B1AD9243DB85280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af159e67-af05-3d3a-9435-bca12128b242.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 139.56.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:29:fa:f3:e5:4b:1a:d9:24:3d:b8:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=aff57898-0c08-4504-a4dc-0d9dabeba2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6f:f1:ba:26:29:60:23:9f:a9:59:f0:6e:09:
4b:d8:a9:72:09:fd:92:10:e0:4b:da:31:0a:db:90:
4e:7a:2e:de:91:8b:06:cb:55:0f:d0:76:25:34:c5:
79:6a:11:5b:8b:5d:13:36:76:f6:7d:9c:44:1c:82:
5f:27:ab:bc:d9:80:0d:18:c7:11:19:26:09:a8:ac:
60:aa:3a:5e:00:f5:ad:a1:f5:ff:d9:5e:33:da:ca:
a8:09:53:c7:be:12:42:fb:38:bc:46:8b:bf:bb:b4:
a3:61:03:68:88:f3:d1:00:80:de:fe:fc:87:86:4e:
ca:ae:84:37:1b:c8:6f:fb:2c:81:e8:91:01:42:5f:
b3:b3:55:30:46:3d:44:8b:fb:62:8f:be:d5:01:f3:
0f:be:3a:54:3e:f2:ee:89:af:d6:68:0b:e6:22:0e:
ba:f0:48:97:ad:40:51:fb:4a:a7:0c:25:32:c7:fd:
29:1e:2a:30:0b:7a:2f:a9:3f:e4:40:c5:f6:c6:46:
ef:6d:20:54:84:6f:b5:cc:a2:01:14:43:a4:ed:a7:
90:cf:75:00:ae:0c:ad:4c:62:90:cd:3c:8d:ba:99:
13:d8:61:ed:b1:9f:ed:48:2f:1e:48:4e:89:d0:25:
7d:1b:91:81:97:c4:e2:5f:c6:f6:c4:f9:1a:5f:29:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:9D:2F:65:A1:1C:C3:F9:14:54:F2:FB:FB:52:4D:53:D0:FA:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af159e67-af05-3d3a-9435-bca12128b242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:8c:49:59:a9:60:16:00:af:90:2a:7a:0a:62:f5:65:60:00:
9a:a5:44:0e:17:97:06:0f:4d:47:03:b5:3b:ab:d1:1d:ce:b3:
11:c5:86:b2:e8:19:a2:ea:0a:17:a4:95:44:9c:8c:de:42:35:
df:fb:59:11:e9:33:ed:d5:b1:2e:5e:b4:8f:30:48:cc:7e:69:
57:35:46:da:1b:fe:f2:a2:59:91:09:2a:8d:f0:70:e7:d3:2f:
4a:ad:bc:93:1d:d5:21:d1:09:7f:fa:01:cc:d4:dc:a9:c0:0f:
7d:9a:24:3f:a1:5f:74:c1:0f:b8:97:13:1d:bf:fa:df:b4:c8:
76:84:c1:bc:01:d6:a8:03:0e:a3:59:5c:3b:10:a6:03:59:55:
8a:0e:85:07:92:f6:48:4a:ae:5e:99:56:c1:ee:d0:c8:1f:02:
3b:f4:89:3f:88:f5:b1:21:10:0d:a2:da:63:36:ed:e9:ae:7e:
c2:a9:1d:25:98:55:15:1f:37:a5:09:79:c9:c6:78:f9:d3:12:
31:8e:40:7f:cf:30:09:27:1d:fd:42:af:5f:1a:b4:a4:1e:46:
d4:f2:52:3f:73:3c:ef:b2:7b:34:49:7a:db:d3:0a:02:1d:69:
a3:3e:66:63:63:e8:b1:74:9d:2c:54:cd:8d:8f:9d:0d:6d:d1:
7d:57:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:51 2025 by rpki-client