Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02c317ff-3e4e-30be-b901-49ceb2a2cc4d.roa
File: 02c317ff-3e4e-30be-b901-49ceb2a2cc4d.roa (raw, json)
Hash identifier: I8NXCmU8IsctbayTmKpsvjbXjVb85RwMnUnk5e69ZXU=
Subject key identifier: 16:31:38:9A:EB:3E:C1:9F:46:8C:1A:A8:E3:D8:50:A0:CD:F3:1F:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0CE8FA40C99350CA56E3E800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02c317ff-3e4e-30be-b901-49ceb2a2cc4d.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:e8:fa:40:c9:93:50:ca:56:e3:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=ff0f4c53-d149-41c3-9fcc-01865003be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:91:3c:cc:ba:c1:da:cb:8c:a7:4e:d3:5d:
4d:0b:8d:f0:6f:f7:d6:ac:ed:99:40:98:84:27:4c:
50:5e:ad:98:cf:33:f8:c8:02:5e:44:10:09:a0:8e:
b4:ce:b9:b3:dd:60:05:a4:94:44:de:89:c1:58:59:
64:84:a0:33:d9:06:36:5d:e1:aa:04:55:87:05:0d:
71:e3:60:4d:5d:eb:62:17:17:bc:d4:c2:c1:03:0f:
2d:ed:4e:5e:9a:42:d5:99:f5:f6:e7:e1:35:60:9e:
06:64:8c:18:ff:00:e6:c1:6b:48:2e:b2:f7:dd:83:
e4:8d:66:28:56:1c:8f:b5:34:d6:cc:4f:e8:d8:0f:
61:39:6a:7c:10:87:ea:06:7f:e0:a1:7b:2f:dc:3e:
a4:01:60:25:4f:a2:57:c7:3f:d6:30:4b:3a:e1:f5:
3c:35:e1:82:ea:97:c2:eb:fb:c6:cf:18:29:c0:51:
ff:5b:72:d1:1a:f8:9d:e3:fb:ff:08:64:56:9d:d7:
4e:47:38:1a:4a:f9:b8:86:1a:1b:37:1b:6c:5b:f7:
2a:ef:3d:1e:5c:78:a1:fa:64:63:4b:46:c4:21:ab:
44:a6:91:bf:7d:70:67:1f:3f:fa:85:92:93:a2:2e:
35:2f:41:b4:74:65:1c:f8:08:fd:93:05:79:af:a7:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:31:38:9A:EB:3E:C1:9F:46:8C:1A:A8:E3:D8:50:A0:CD:F3:1F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02c317ff-3e4e-30be-b901-49ceb2a2cc4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:a5:75:18:e6:b5:ea:89:80:19:1f:b1:45:21:bf:38:7f:bb:
3e:41:e4:1d:26:8f:81:6d:99:b3:3c:1d:e5:1c:a3:97:31:2a:
b2:98:16:13:2e:66:cc:3c:67:a0:88:cc:99:4d:fc:d0:22:f9:
f0:85:70:59:6e:11:f4:7c:17:2e:3d:55:86:15:85:b4:66:57:
1a:45:b7:80:12:f2:7a:d0:d2:89:47:04:22:2b:9b:a0:db:69:
f4:78:5d:6a:a7:44:9f:99:ff:6c:8d:ab:ae:5f:50:42:66:02:
53:64:06:a9:ee:ec:3b:2f:11:3d:f2:be:39:53:ee:6b:83:0a:
9b:7d:a6:be:6a:d9:75:c0:ed:20:52:57:1a:67:81:bf:bc:10:
8f:e7:0f:c9:e8:60:52:e1:f9:f9:25:87:3f:74:24:ea:f6:e0:
35:de:91:d0:33:d3:04:9b:ee:97:2f:d0:8c:bf:d1:32:9d:13:
7b:61:ea:c2:a6:d4:6a:43:c1:dc:fa:a8:56:ba:dd:ef:4e:cd:
aa:46:35:79:36:d5:93:74:7e:dd:b0:16:6e:c3:43:fb:87:14:
ba:9c:c3:f2:1c:69:7d:0c:cc:44:78:60:45:9f:e1:e6:5b:cf:
16:0f:e6:f8:54:85:90:2e:d7:57:1b:b2:5a:b3:bd:df:0b:f0:
d4:ba:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:51 2025 by rpki-client