Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdf396a5-d269-30bd-a6b1-ceb5927cb7c4.roa
File: bdf396a5-d269-30bd-a6b1-ceb5927cb7c4.roa (raw, json)
Hash identifier: RuhMaNdLE5NukoSCI8SznisK2h2zDGzSUfYk9hESmO8=
Subject key identifier: BF:68:3D:A4:1E:FE:87:C1:87:5B:59:B5:63:27:9E:FA:DD:25:20:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E14C232E2F4FEC37487C40C60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdf396a5-d269-30bd-a6b1-ceb5927cb7c4.roa
Signing time: Mon 30 May 2022 12:00:00 +0000
ROA not before: Mon 30 May 2022 12:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 22394
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:14:c2:32:e2:f4:fe:c3:74:87:c4:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 30 12:00:00 2022 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=788aa4e8-ee6c-4136-aea8-bd852e7310ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:e2:34:27:94:5a:90:2d:c4:33:31:d4:39:
4e:e8:8e:a9:15:6c:d3:92:df:ae:e4:1e:aa:2e:3b:
7b:f0:2e:f9:69:5f:59:76:ef:fe:a3:6f:06:71:04:
ba:ae:3c:38:df:f4:cc:56:7a:36:23:5f:02:62:36:
51:5d:3d:88:22:fa:b2:e4:03:6d:3b:ee:55:4c:a9:
98:58:7b:ba:39:37:f4:10:a2:39:3f:26:3d:15:de:
33:84:b0:4b:31:07:68:d7:b9:46:ab:33:74:5e:5a:
3d:57:21:20:cd:88:bf:db:b2:3a:81:2a:d5:0d:b3:
36:35:00:98:36:44:a4:91:bf:4c:08:a0:fe:25:ed:
63:79:ae:90:63:d3:0b:34:95:fc:5a:f9:70:96:cf:
9e:b1:04:6f:e2:30:ad:8e:9c:3e:73:17:b6:e1:51:
6f:82:e3:76:6b:d8:f4:04:11:5a:cd:e3:2c:49:55:
6b:84:15:41:f3:38:69:64:c8:21:95:ef:9f:7b:c2:
14:54:cd:54:b1:bf:a0:2f:94:e5:84:3d:3d:70:a3:
ba:93:0d:90:f2:54:88:16:6b:f0:d6:fc:04:76:ce:
39:ab:6c:e3:f9:4b:e6:09:1e:8e:1d:9a:4c:09:5e:
26:77:a1:a2:6b:5a:b6:a3:41:fa:ec:43:82:44:85:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:3D:A4:1E:FE:87:C1:87:5B:59:B5:63:27:9E:FA:DD:25:20:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdf396a5-d269-30bd-a6b1-ceb5927cb7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:22:53:a8:31:65:de:7a:20:32:a9:fa:52:56:2f:95:d8:d7:
1e:cc:ff:3f:c7:3d:a4:8f:fa:78:be:52:a5:5a:c2:05:05:e9:
f8:10:05:c3:e9:aa:43:be:66:a4:50:68:5d:d5:dd:da:12:23:
b6:e6:e7:d7:62:d1:8f:8b:30:77:5d:96:a0:f7:cb:13:07:fe:
fc:cd:59:a9:c4:3a:99:63:7d:49:a9:ca:c2:f5:35:fb:d9:a5:
af:e5:f3:73:dc:76:d8:12:b7:72:29:bf:ae:df:79:45:76:dd:
07:61:2f:d8:6d:92:31:67:cd:a7:7d:35:e1:7f:9f:08:b9:f7:
3f:4d:dc:a7:c6:b0:e2:65:14:36:15:68:f3:46:3e:d8:cd:87:
73:37:88:f0:7a:10:79:be:5f:cb:0b:79:42:eb:8d:9c:0c:b8:
07:11:ec:b9:bc:84:a5:87:47:fe:4f:d2:32:07:95:04:5f:43:
5b:e4:fb:b4:57:0b:55:b1:f6:a3:d9:6e:bc:07:68:8c:46:83:
19:0c:da:e9:e6:ba:db:3e:41:21:65:66:d4:d2:13:3d:bc:34:
54:62:e2:f2:e1:7b:6d:8a:a2:81:10:71:2d:79:2f:2f:58:70:
de:2d:c3:3f:b1:75:39:41:6e:04:a4:e4:37:1a:24:51:cf:c8:
01:84:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:38 2025 by rpki-client