Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/008b7f0e-bd5d-3a7b-b4db-85aef0c505b0.roa
File: 008b7f0e-bd5d-3a7b-b4db-85aef0c505b0.roa (raw, json)
Hash identifier: 1h8/M1koLhX/ymCQh5z9cXJlFtQMFxHzbM4i7MO/hHo=
Subject key identifier: F0:44:5A:94:1B:7A:76:B3:E0:37:EE:05:30:1B:BB:73:C3:58:AE:61
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B4FB471991DBC2D4632D480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/008b7f0e-bd5d-3a7b-b4db-85aef0c505b0.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:4f:b4:71:99:1d:bc:2d:46:32:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=003216e6-fe74-460d-841d-0c0c53c1b6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:59:15:5c:7e:ff:1a:c4:00:d1:53:bb:89:
00:c7:49:b4:62:19:21:45:a1:2a:eb:6e:fa:14:82:
bd:e5:d6:4a:64:84:94:75:43:4a:a2:0d:7e:a5:d1:
b6:c9:13:cf:6b:51:5c:f8:9c:d0:aa:ff:59:a9:98:
ee:d4:df:5a:4e:19:2f:d4:be:8c:c8:ff:35:4b:22:
60:d0:d5:bb:7a:25:73:e6:30:40:c6:57:80:2c:fa:
b2:c4:7f:81:ce:6b:72:25:5a:f1:b0:82:23:e8:67:
cd:cd:ad:3c:8f:cc:96:4b:64:ca:ca:40:0e:63:d4:
a1:4a:c7:5c:9a:60:7f:2a:ff:b1:8c:75:d4:3a:c6:
c8:d9:93:de:1e:8e:ac:13:0a:2d:26:a6:f0:f3:63:
84:02:b0:21:e1:21:c3:4c:24:98:ab:b6:f8:9a:65:
22:52:80:bf:31:f0:9c:6d:25:2a:11:11:ce:8d:18:
15:e4:e3:34:55:97:e5:73:e9:62:bc:c1:8c:d2:86:
80:c4:e1:66:ca:8b:0e:ed:c8:ec:74:4e:dc:23:45:
db:c8:4c:fc:da:55:8e:f4:ce:50:22:97:a7:d6:31:
9e:4c:44:78:c0:08:41:d5:7a:45:37:c6:52:b7:95:
e9:6b:c2:a1:a1:6f:33:a8:43:c5:12:03:54:dc:6a:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:5A:94:1B:7A:76:B3:E0:37:EE:05:30:1B:BB:73:C3:58:AE:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/008b7f0e-bd5d-3a7b-b4db-85aef0c505b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f9:f3:df:37:2d:1a:7b:26:ae:dc:41:90:ed:89:5a:57:ce:
5d:25:e2:c1:ca:85:4e:2b:02:74:a0:10:61:ec:4c:e7:89:da:
5a:64:db:76:9d:1e:f8:65:6c:99:e3:2a:23:02:f8:59:a8:19:
98:dc:f4:4d:e4:4d:57:ee:bd:2a:97:aa:87:e7:45:da:80:a7:
8e:b4:e1:8e:e1:20:4f:d9:90:ff:75:f9:0c:c3:00:40:a5:27:
42:6a:8f:ca:31:60:be:1f:31:08:7a:a5:5f:3b:48:fc:85:7e:
cb:99:5d:c6:96:c1:bc:c8:00:ae:a4:47:41:5d:a7:6e:cd:ee:
a7:bc:05:a7:b4:84:e0:50:ae:1e:08:3b:1f:8b:ce:15:b7:4b:
64:9a:9b:4a:c2:a6:c6:1e:04:2d:a8:b4:a9:19:95:3a:58:0c:
5d:4d:b3:61:61:6e:c0:40:e9:d3:b8:e9:37:ba:0b:8c:e0:cf:
2a:ef:69:7d:6b:7b:0b:4a:59:93:01:3c:9b:7a:fe:0e:08:18:
89:9d:90:3a:79:0c:32:42:75:a9:3e:dd:be:ab:71:9f:ca:71:
f2:93:65:c7:82:40:5a:7e:f6:70:c6:c8:1c:bd:81:e7:72:c5:
12:0e:bb:db:8b:66:2a:bd:ee:a2:39:64:0c:66:f5:ce:7c:dc:
7b:55:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:50:07 2025 by rpki-client