Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d21c983f-55a3-3215-aa62-1fc10ade228b.roa
File: d21c983f-55a3-3215-aa62-1fc10ade228b.roa (raw, json)
Hash identifier: iGHqPuAls3sgJUN7dIBiE5VlyMYXFLhrvdDc2BErsEQ=
Subject key identifier: 4B:16:AF:EE:D0:12:17:96:26:CC:97:47:4E:80:64:D1:DF:74:3A:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5129CBB7C6BC93764A362090
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d21c983f-55a3-3215-aa62-1fc10ade228b.roa
Signing time: Tue 22 Mar 2022 04:00:00 +0000
ROA not before: Tue 22 Mar 2022 04:00:00 +0000
ROA not after: Tue 26 Apr 2022 04:00:00 +0000
asID: 22394
IP address blocks: 139.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:51:29:cb:b7:c6:bc:93:76:4a:36:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 22 04:00:00 2022 GMT
Not After : Apr 26 04:00:00 2022 GMT
Subject: CN=5a6b5727-7c30-467f-adbd-ecdcfe219ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:50:18:b6:8e:5c:60:c9:76:90:50:b1:bc:
42:cc:ee:73:56:00:b2:b0:d5:41:cd:4b:79:98:92:
1c:ba:fe:4f:45:bd:d2:21:81:77:de:2f:3c:16:65:
11:90:a4:90:80:0a:53:3e:e9:36:85:a6:75:93:69:
79:af:0c:c8:84:bf:0d:61:92:eb:e6:1f:ec:e4:2d:
bd:ce:c0:61:a8:0d:2b:06:97:93:b8:5f:65:03:e8:
af:af:4a:e3:6d:71:3a:e7:b0:85:eb:cc:26:dd:58:
f6:f9:97:52:c8:a4:0f:52:fc:ac:06:16:c9:bf:4a:
46:56:b1:69:b9:f4:a2:c4:17:aa:a1:c6:ee:85:66:
90:61:47:69:e3:10:b5:2d:64:16:33:92:fa:f2:c2:
a2:02:2a:65:17:56:4e:3d:54:0a:f8:db:a4:54:ee:
7b:d4:89:b9:ed:da:d3:3c:ca:ab:6b:8c:3f:7b:de:
04:28:6d:63:33:1e:60:2b:43:54:4c:70:26:f2:b0:
f5:61:28:34:fe:99:6d:ed:aa:23:19:a6:62:18:9e:
fe:fe:23:19:35:ae:c5:e3:7c:99:2e:fe:1c:3c:60:
97:e3:e8:10:72:38:3b:a1:50:34:e4:d3:dd:a2:3f:
c1:bb:b4:d9:bb:15:17:a6:45:bd:89:21:9e:ec:a4:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:16:AF:EE:D0:12:17:96:26:CC:97:47:4E:80:64:D1:DF:74:3A:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d21c983f-55a3-3215-aa62-1fc10ade228b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:5f:3a:6e:be:14:6c:4e:6e:58:87:3b:c6:9c:5e:b9:d7:85:
30:f2:b6:2b:ee:23:e6:85:b0:e9:a7:de:52:9e:db:d4:53:53:
3d:0f:ab:ec:80:b3:61:dd:09:89:fc:b2:db:ed:55:f6:59:3d:
34:64:87:27:69:77:88:2b:e5:9b:d8:94:80:3e:3f:05:d5:50:
bb:80:d4:62:d1:ba:b3:73:71:1f:c1:c7:97:44:08:8c:f5:5c:
c7:e3:14:8b:0b:76:9e:5f:8d:10:15:4e:b9:e8:ad:bf:b5:17:
c9:ff:8b:86:fd:6a:d0:07:ad:f3:f4:15:c1:51:ce:37:70:39:
bd:d9:4b:8b:67:ba:50:30:67:73:d0:98:98:3e:1c:31:db:a3:
19:eb:a5:8f:33:ac:f1:0c:57:e0:c0:c6:9e:d3:39:48:ab:f3:
47:9f:8b:36:b0:18:82:d6:49:5c:19:d6:c5:8a:cc:93:6b:fb:
8b:93:68:2d:6e:76:f2:f5:68:4c:72:09:bf:bb:ca:fb:63:ab:
2f:1a:02:28:4b:9c:cf:3a:50:da:15:25:f8:1b:7e:ff:2b:8a:
ff:e4:8f:d7:45:4a:a6:04:7f:cf:d6:88:70:4d:9b:dd:e5:3b:
86:36:75:a1:3b:b5:0a:06:c7:b4:43:2b:68:f5:f0:c5:e2:3b:
f4:39:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:27 2025 by rpki-client