Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd6cce27-b8e4-386a-add2-f3f9c7764d17.roa
File: fd6cce27-b8e4-386a-add2-f3f9c7764d17.roa (raw, json)
Hash identifier: 23WdIZHhfIRS6KmJePJjgPORqO2LLkkPuPHdtkVAQ/E=
Subject key identifier: 96:1B:6C:5B:3C:D7:E3:3B:FA:A7:C1:01:B5:E9:24:BE:8A:0B:2D:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9BE44CB579639C6A88A90900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd6cce27-b8e4-386a-add2-f3f9c7764d17.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 139.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:e4:4c:b5:79:63:9c:6a:88:a9:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=8e78858b-3ed1-4ba4-9f60-9e4a7f157646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:01:08:51:be:b2:51:11:44:a4:4d:fe:cb:
3e:dc:cb:8a:d7:ed:e3:bb:2c:53:94:a0:20:f4:a0:
1e:fd:7b:5e:81:c5:ac:1b:56:90:24:70:c3:53:79:
bf:ad:d9:93:1a:40:0b:56:a5:8f:f4:6b:3c:62:0a:
e5:30:5d:0c:5a:ac:7b:f8:fe:15:ab:c3:99:22:bb:
61:72:ed:7f:b1:46:9d:d1:44:e0:44:86:2a:98:11:
d7:6a:c7:48:09:ff:22:5a:bb:aa:85:56:5d:00:0b:
e1:d9:2f:94:27:54:cd:89:3f:09:42:6b:da:fd:51:
9c:c9:ca:85:da:c8:e1:63:cb:67:a7:c1:7e:42:4e:
ab:67:54:1a:6b:37:b3:fa:98:f7:a6:83:7c:af:22:
16:73:43:05:99:fd:cf:3d:5a:3d:2c:fe:8a:a8:d7:
4f:94:da:ce:24:96:43:d0:8b:79:7f:f7:2b:46:3e:
ec:21:ab:6a:b3:ad:13:35:90:46:67:55:d9:90:ed:
a6:41:43:52:76:ac:50:8d:74:a2:5a:c3:d7:9d:28:
54:05:dc:b3:04:44:a0:46:47:f3:d2:83:a9:32:9a:
8b:19:c5:fa:35:20:20:d9:25:3c:a5:20:d9:9a:73:
50:5e:e8:cd:40:bc:ea:e8:08:27:c7:55:f8:0c:32:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:6C:5B:3C:D7:E3:3B:FA:A7:C1:01:B5:E9:24:BE:8A:0B:2D:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd6cce27-b8e4-386a-add2-f3f9c7764d17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
139.56.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:0a:31:21:6a:8d:92:8d:de:5a:67:fc:c6:7d:06:c1:90:26:
67:31:8e:3c:79:01:ab:64:ba:2b:d5:8a:93:a5:58:c3:09:9f:
a7:fd:a3:13:50:78:08:e9:75:13:04:50:36:3b:96:4c:40:12:
74:f5:1c:6c:19:c4:82:9d:b8:69:5d:e6:44:5e:bc:ff:e8:c0:
81:e9:9b:f3:e6:c9:dc:84:91:bf:c2:51:2f:7a:16:86:33:5e:
4a:24:5e:13:b2:fb:1c:3c:f7:76:d8:b0:6b:6b:17:51:a7:61:
8a:84:4d:65:ac:cd:7c:3d:c3:90:77:f4:a9:49:e0:b0:ee:47:
d8:45:ab:b9:94:4f:cd:0e:78:1a:f5:ad:88:a7:87:da:b5:bc:
83:18:9b:27:fb:e8:18:e1:9c:ef:69:59:b0:d8:61:9b:9b:aa:
55:94:32:5a:3b:53:ed:c4:6a:28:12:46:56:58:57:ec:68:62:
92:04:46:7e:f6:22:dd:91:48:20:c7:50:a7:f1:a6:ae:cf:83:
db:1a:dc:35:cd:c1:b7:13:e8:00:1e:b1:91:a6:18:84:11:8b:
58:36:d0:09:14:0c:fd:a9:c5:19:25:23:c6:74:96:27:f8:4f:
69:b1:2c:9c:8d:bc:2c:3d:94:5e:2e:85:df:29:14:f3:6d:12:
d2:7d:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:24 2025 by rpki-client