Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a709df6-d5ad-363a-8e21-68b69712910f.roa
File: 0a709df6-d5ad-363a-8e21-68b69712910f.roa (raw, json)
Hash identifier: ngN90JR2+Oit1HwKUyzs6ASClPWlN0tl9cDJ264B1+c=
Subject key identifier: 67:CF:1E:3C:9E:E9:16:CB:3E:6C:69:86:E3:F8:90:C2:DA:5B:20:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD0B5D390B7C1216B76389A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a709df6-d5ad-363a-8e21-68b69712910f.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:b5:d3:90:b7:c1:21:6b:76:38:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=be12b6a0-a0dc-4737-9d0c-982a83d04dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:b4:06:d5:cc:4a:99:18:7d:ee:6b:57:d3:
8d:3f:0e:25:d7:26:ba:12:80:9a:7a:e7:49:f0:a8:
5e:07:96:e7:4f:1e:dc:ae:4d:d8:65:72:dd:f0:51:
29:6d:c6:1a:be:ba:a4:0b:be:8a:fd:4d:90:fd:1a:
21:b1:6a:5b:d3:76:d6:23:5e:3b:51:ec:c9:1a:63:
23:1a:10:9f:c3:81:c7:6f:6a:72:a0:23:5a:41:55:
9e:9d:5a:0c:6c:fa:be:c6:89:09:a4:99:43:8e:44:
29:74:22:1a:0c:9c:69:b2:b9:42:fe:2e:39:be:83:
c1:47:fb:4f:a0:13:1a:a3:c0:92:61:cf:ad:11:e8:
cb:6b:24:22:9d:41:9f:d6:ea:50:3b:fb:0d:6b:39:
8b:32:ad:ee:08:f7:60:d5:95:13:ac:e4:00:63:ad:
fb:ee:bc:8e:2c:1a:1a:18:85:3c:12:b9:c5:ec:cc:
3a:06:57:6c:7c:88:48:c0:d3:71:08:4c:2f:77:89:
d7:3f:b1:43:06:c9:ce:8c:ef:8c:47:85:ca:ac:5f:
f9:3d:a2:6b:a2:8c:c1:87:e4:b8:df:37:9e:fd:17:
74:c7:e3:00:4d:25:6f:4f:d8:70:2f:72:c1:5b:40:
41:85:85:a0:a1:07:7e:7c:07:0c:9c:dd:f7:fe:49:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:1E:3C:9E:E9:16:CB:3E:6C:69:86:E3:F8:90:C2:DA:5B:20:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a709df6-d5ad-363a-8e21-68b69712910f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ee:a3:b6:2b:ec:e2:17:63:19:4b:43:a5:0b:c2:27:1c:b7:
b6:d7:0c:0d:ff:ea:25:c0:3f:1c:7d:e8:5d:fb:66:ec:38:2c:
b0:ec:66:cb:97:74:3d:34:da:7a:33:a9:72:0b:00:79:09:a2:
35:85:6c:19:da:7a:bf:3c:09:c3:c9:b6:41:de:eb:4d:36:03:
c6:7f:97:4c:68:b0:87:b0:4e:6b:47:88:9a:7f:7d:9c:43:21:
8d:fc:f6:e9:5b:e9:9a:89:a4:a7:e1:3a:1a:18:bb:29:2b:2c:
fe:89:36:69:29:42:f2:2f:c6:9f:65:57:0c:dd:4b:49:54:60:
3c:85:cd:f1:6d:73:29:3e:71:fd:f2:89:db:72:14:89:96:c5:
3c:5a:84:63:db:72:e2:a7:20:0c:3e:46:07:c2:da:f9:48:90:
5e:bb:18:88:e2:9b:0e:ef:94:63:95:dd:1f:e8:15:e3:cb:51:
cf:a9:5f:1e:21:d8:71:da:0c:eb:a2:4f:01:01:5e:01:26:e2:
c5:d6:14:0e:61:ff:d8:88:a5:f1:ab:75:26:0a:ae:22:95:0b:
27:eb:a1:aa:ab:2d:da:82:d7:24:92:d9:43:05:25:23:31:94:
58:7f:4b:88:13:9a:a2:cf:e8:3c:21:7a:b0:f5:e4:d8:fb:59:
15:20:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:32 2025 by rpki-client