Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b515a86c-cc7a-3cfe-a68d-44f926886469.roa
File: b515a86c-cc7a-3cfe-a68d-44f926886469.roa (raw, json)
Hash identifier: BxBirrKPjioXZEfmafQi+pGixZPhvjU79IPo5HaPAcw=
Subject key identifier: 29:2E:56:7A:FC:68:11:F7:8B:A8:E8:FB:22:17:F1:F4:63:05:84:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E632928E73BCCBD3CF7A7AB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b515a86c-cc7a-3cfe-a68d-44f926886469.roa
Signing time: Mon 27 Jun 2022 12:00:00 +0000
ROA not before: Mon 27 Jun 2022 12:00:00 +0000
ROA not after: Tue 02 Aug 2022 04:00:00 +0000
asID: 6167
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:63:29:28:e7:3b:cc:bd:3c:f7:a7:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 27 12:00:00 2022 GMT
Not After : Aug 2 04:00:00 2022 GMT
Subject: CN=239570e9-d57c-446c-af99-18533db686bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:1c:5b:83:56:29:13:74:72:bf:d3:7f:1e:
35:a3:8b:0b:a0:d3:c5:66:45:44:16:75:a5:9f:a7:
f5:cf:35:e3:19:df:6b:13:4a:6a:2c:5e:c7:03:f1:
01:be:11:dc:50:f3:e1:3e:d0:2c:d2:64:3e:91:77:
a2:f8:19:28:0e:2d:d8:f7:62:5a:2b:4c:88:13:64:
7c:fa:1b:cc:8f:dc:f9:4f:7d:da:43:d9:2e:8f:71:
04:f2:66:30:dd:79:02:56:12:cb:c3:89:be:51:da:
1d:59:5a:26:43:f8:2d:e0:1e:b9:3e:f5:03:cc:46:
b1:e9:45:dc:8a:bb:9a:e3:07:2b:c3:1c:e6:2d:04:
ce:64:23:d8:bb:1d:f6:f8:14:b8:36:09:aa:91:d3:
01:09:d0:28:e6:dd:e9:e9:96:4d:af:10:60:1f:4e:
a6:52:8d:9b:aa:d0:52:9d:e7:14:c9:93:bf:cf:18:
a5:f1:11:fe:10:d3:1d:0e:e3:c2:98:4f:3a:c1:cd:
cc:71:3f:82:5d:2f:ee:00:d7:06:45:f9:34:be:ef:
f4:c8:48:14:67:fe:e7:e6:29:66:89:9e:c0:cb:69:
9f:fa:86:a2:fa:0e:df:e0:6c:aa:22:3b:45:8a:1d:
ac:6a:da:a1:01:bd:c2:44:32:6c:a8:45:da:c8:9f:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2E:56:7A:FC:68:11:F7:8B:A8:E8:FB:22:17:F1:F4:63:05:84:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b515a86c-cc7a-3cfe-a68d-44f926886469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e4:74:39:b8:50:7f:94:f1:32:56:6c:d4:68:09:19:8d:23:
32:76:2f:9c:7f:f4:f0:03:af:44:76:c8:22:c3:07:b2:3a:46:
70:2d:90:fb:fd:d9:a5:f9:96:e9:9a:71:fa:bd:95:34:02:3b:
29:03:a7:bf:21:ce:b0:47:0f:bd:af:f1:56:e9:4c:4b:ac:68:
7a:13:0e:cc:fe:8b:c4:f8:6c:4c:ce:18:f9:4c:fa:7e:6a:32:
eb:18:30:b9:2c:21:34:b0:97:b1:49:6c:b5:55:a9:0c:00:b7:
f6:9e:cd:79:5a:9c:a7:0d:ff:b3:63:85:89:08:6a:71:df:19:
9a:14:f6:b9:c5:ad:fe:7f:f9:2e:72:ba:0a:42:77:50:f6:b8:
96:8d:2f:6c:f6:5b:f8:76:f0:38:5b:58:b2:b6:47:6d:81:b2:
0c:bb:2d:90:df:1d:79:ad:a1:09:86:e8:49:be:c3:2b:ae:22:
eb:1c:3f:f2:6a:e1:5c:4e:15:ec:b5:9a:bc:74:40:d1:8d:f6:
30:ca:9e:9c:b0:b8:b7:76:44:84:9f:0e:40:2c:f7:af:87:c1:
36:3e:c1:22:94:45:d3:02:0d:5b:b5:bb:56:9b:0d:09:7c:1b:
10:ef:6e:c2:88:c4:d6:de:47:5c:6a:19:33:18:eb:bf:fc:5b:
dd:76:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:27 2025 by rpki-client