Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b546009a-cd09-33f2-819f-b5d46531b1a1.roa
File: b546009a-cd09-33f2-819f-b5d46531b1a1.roa (raw, json)
Hash identifier: 4YC7rLXXg4hNv2169czmK0PgHweFxvVlqs1lPBIx3FE=
Subject key identifier: 9E:7B:1C:85:21:2E:8C:37:69:CD:28:0F:07:DD:CF:65:DB:96:A6:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405EE0B6B6EB85445B1A9A90C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b546009a-cd09-33f2-819f-b5d46531b1a1.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5e:e0:b6:b6:eb:85:44:5b:1a:9a:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=d6fe9e00-5a62-4142-87e0-014ed4828c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:46:53:59:81:8e:f6:9d:4d:e9:00:08:32:
04:71:16:78:5f:66:09:b8:8f:3d:18:10:2b:9b:77:
78:0e:cd:02:c3:6d:d0:d4:7b:dc:b2:b9:10:fb:52:
34:ad:0b:c6:be:e8:7c:e0:ec:52:9c:e0:19:86:15:
02:a8:de:14:30:5e:da:89:18:b8:c8:99:40:19:4b:
87:c2:e4:49:5a:cd:41:b7:1a:82:60:d2:8d:3a:2e:
20:21:c3:54:66:da:99:d3:da:67:de:34:b7:cb:bc:
e7:b5:ff:96:be:ad:97:bf:f2:09:63:63:f6:cc:3b:
dd:fe:4a:e4:ad:ed:f4:05:2c:b0:e5:55:51:86:03:
3b:74:d5:4f:64:30:5c:f1:65:b1:04:f7:38:31:67:
74:f9:b7:da:df:46:31:63:8e:db:5b:93:13:21:b5:
b7:98:50:17:a7:71:cb:db:ae:0c:17:ed:9e:b9:e9:
a5:b4:eb:2d:ac:61:95:5a:66:c5:c1:d4:d7:93:28:
a0:24:24:c6:c3:dd:78:b9:f5:ef:18:51:6b:1b:6a:
5b:2c:08:90:e2:ff:c1:38:97:ca:a1:d7:72:55:0b:
f5:2f:78:3f:40:d4:9e:89:09:5e:4b:c1:4f:80:fb:
23:b5:9d:a4:63:b0:a7:37:34:33:92:96:92:67:a0:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:1C:85:21:2E:8C:37:69:CD:28:0F:07:DD:CF:65:DB:96:A6:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b546009a-cd09-33f2-819f-b5d46531b1a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:8c:e6:c2:24:53:fa:65:57:28:13:37:55:b6:a8:d5:58:60:
9e:91:e0:09:71:80:61:66:50:c5:b8:8d:b9:cf:99:40:39:40:
c7:61:7d:a3:ac:e5:e9:98:2a:b4:10:27:54:7e:44:e1:68:5e:
db:48:7a:a5:dd:e9:de:e1:a7:bd:e8:98:3b:12:9c:ef:17:1d:
c7:4e:55:d1:4d:bd:47:ee:e1:9b:b8:ca:46:f4:02:6d:66:03:
44:72:9d:23:a4:a6:42:48:56:0b:57:3d:75:f7:0e:a0:b8:de:
4d:dc:b7:b1:10:cb:2d:95:e1:b6:28:e9:c3:30:97:f9:fd:e7:
3e:58:57:74:6c:a9:02:1a:b8:5d:18:be:79:e8:a7:16:5c:d9:
56:5c:c2:b7:ea:7a:a0:a7:94:61:b4:d3:53:89:9f:a6:74:d5:
df:52:2d:ed:38:fc:ce:78:1d:c8:fa:c1:d5:fc:79:fe:d4:e5:
6e:14:c4:99:90:6d:57:5d:ff:5f:16:24:1c:80:58:66:b6:f5:
92:4d:3f:c8:da:f3:68:ba:43:c1:7c:eb:6a:2d:e0:d5:b1:45:
5f:47:b2:9a:02:09:b3:64:33:10:a1:07:f7:57:fe:fe:41:01:
a2:e0:19:b2:0a:eb:3a:c4:f3:3b:aa:fd:9f:db:78:3b:4b:65:
34:20:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:36 2025 by rpki-client