Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01dd1cc3-49d0-39b4-84e2-ba0f1bea6b3d.roa
File: 01dd1cc3-49d0-39b4-84e2-ba0f1bea6b3d.roa (raw, json)
Hash identifier: N3cUqlk1llDBgK0Mfw1s0beS3SZBpRxidm5wegunjt4=
Subject key identifier: 86:16:E7:3E:8C:FC:00:58:CF:D1:14:08:3D:34:4B:E9:85:4A:F5:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401160A797DAF83183146E9940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01dd1cc3-49d0-39b4-84e2-ba0f1bea6b3d.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:60:a7:97:da:f8:31:83:14:6e:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=a64e381f-e1fa-4b3d-a9fe-f24c2cbaca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:49:b5:d0:6d:87:63:f5:9c:2c:00:df:67:
5b:b4:5e:13:81:23:6a:b1:64:5f:4a:58:f1:6d:d6:
49:86:12:24:5e:55:62:50:1d:34:08:8a:ac:52:b4:
0e:11:e1:28:1d:c6:10:81:2a:64:0d:db:8b:6b:e0:
47:5a:32:c4:28:07:bc:f5:c8:85:f2:fd:2c:75:2b:
d3:38:9b:74:b5:c1:74:74:ac:bb:5f:de:1a:1a:80:
07:5a:48:09:8b:3e:a6:11:af:a1:4e:ff:09:48:21:
92:07:33:de:ce:4c:8c:d9:af:29:ff:1f:6f:0c:01:
8c:71:57:19:13:a8:44:40:36:d7:73:69:43:b7:b8:
92:06:8d:88:d1:07:ec:5f:21:29:2f:f8:58:a2:13:
4b:e3:17:f2:97:19:4b:c0:87:53:33:92:27:13:17:
08:7c:df:c0:6d:f6:46:21:cf:d7:09:c0:f8:4c:18:
7a:1d:d0:3d:5f:cf:ee:29:4a:1d:3d:9e:e7:e2:30:
25:1e:a0:99:52:ac:9a:57:f2:74:2c:53:08:56:f3:
42:80:5d:c1:52:d5:5f:fa:02:16:7a:4b:7b:dd:88:
eb:46:2d:c0:0d:99:39:0d:c0:a2:e8:0c:da:d3:e8:
49:03:6b:81:04:cf:6d:f4:19:d4:21:a8:5e:e7:b6:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:16:E7:3E:8C:FC:00:58:CF:D1:14:08:3D:34:4B:E9:85:4A:F5:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01dd1cc3-49d0-39b4-84e2-ba0f1bea6b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:8f:19:d1:59:79:69:ba:1d:75:89:da:df:0c:0e:21:e6:9c:
ff:c5:2a:c7:dc:33:2d:ff:15:c2:df:dc:d2:d7:fb:de:03:5e:
5b:40:8d:73:d7:8a:66:79:53:72:70:27:5f:64:71:37:c0:81:
a3:99:c8:69:4d:0e:1a:f8:2b:5f:bd:f7:43:34:ee:53:a0:15:
b6:4b:bb:09:c0:fe:8d:9c:a6:51:82:56:75:07:ac:bc:21:36:
58:7d:39:3c:33:63:b7:be:16:a1:a1:1c:a9:98:33:d2:1f:72:
a1:36:f9:1e:32:c0:c8:d4:d9:a0:30:7b:be:85:d4:b8:35:02:
eb:e4:4e:e6:7d:c7:f9:ce:0c:cd:d4:6f:8e:4f:c7:b2:5c:66:
57:99:56:ff:c0:49:19:41:16:78:8a:58:fc:24:3b:73:86:e4:
44:8c:bc:74:24:b7:33:d3:c6:17:ea:50:c7:fc:82:64:6f:bd:
49:c5:c9:d3:25:03:ad:23:9f:9e:78:c1:5e:9a:86:53:f3:d8:
71:c4:3a:19:1d:e6:ba:e2:a8:ad:8b:fe:af:2c:10:3a:18:8f:
26:a3:c0:e3:34:93:17:65:1c:b0:32:34:86:29:b4:d2:98:bd:
65:33:87:6d:20:da:d0:d3:d6:a8:19:b4:7b:73:5d:44:ea:c4:
76:30:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:15 2025 by rpki-client