Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0aa3de13-d5ef-33e5-8ea8-6cc0aafb68a2.roa
File: 0aa3de13-d5ef-33e5-8ea8-6cc0aafb68a2.roa (raw, json)
Hash identifier: Cpe2W09DVGU5qJGBAfUgmys8x6ByCJPkDswzufZq0y0=
Subject key identifier: 69:BF:F1:4F:5D:D3:F3:8C:76:6B:BC:D8:6D:FA:42:35:0D:CB:E5:46
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1EE833F43ADB3787E32D5B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0aa3de13-d5ef-33e5-8ea8-6cc0aafb68a2.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:e8:33:f4:3a:db:37:87:e3:2d:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=d5a6ac3f-36da-46d9-a88d-55343925af4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:8f:0c:22:76:40:9c:92:15:f3:bd:11:20:
02:5a:2e:93:2d:24:b1:aa:5b:46:cf:a0:c0:53:58:
28:5e:f1:1d:7e:7d:c0:08:e8:58:a6:0e:52:9f:9f:
a0:b1:d7:73:88:20:52:35:d2:fc:21:92:68:d1:4a:
90:6c:58:3b:16:bd:e2:af:57:d3:ec:29:32:f4:aa:
c1:34:3b:7f:27:71:35:ea:25:e8:40:e7:41:48:97:
58:ca:9c:d2:2c:bc:2b:d6:c4:b6:7e:92:a5:5c:b5:
05:c1:a2:c3:9a:53:39:3d:8c:61:b7:8c:fc:de:4c:
83:f5:27:fb:f8:47:ea:c9:1e:ba:c5:cb:0e:94:d1:
a6:3e:7f:d8:d5:95:16:e9:e3:65:4c:fd:5d:ae:82:
d8:21:2e:70:17:20:bf:61:86:87:80:f7:35:93:91:
56:6e:22:72:5e:07:91:22:8d:52:72:25:bf:50:06:
95:ec:a8:46:30:27:4b:8f:59:01:2e:bc:49:f0:b1:
58:08:45:64:e6:7d:71:fe:09:eb:9d:b0:8c:56:4d:
4f:a9:c0:a7:9d:b2:e7:58:c9:50:77:83:ac:4a:e4:
4b:fe:58:29:01:46:6d:b2:c4:96:c3:8c:45:2e:29:
6f:d2:b1:60:1d:8a:ae:5d:02:22:8e:c7:ab:6f:77:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BF:F1:4F:5D:D3:F3:8C:76:6B:BC:D8:6D:FA:42:35:0D:CB:E5:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0aa3de13-d5ef-33e5-8ea8-6cc0aafb68a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e2:a8:f4:49:1e:41:13:95:f3:a6:7f:de:22:70:c6:17:6e:
cb:7b:5e:2f:cc:35:23:8a:7f:dc:f1:01:a0:41:5f:be:9a:96:
9e:15:0e:06:2d:17:3a:c3:f8:85:e6:ba:d7:a6:5b:00:d6:20:
ac:a4:fc:67:62:27:66:73:40:81:5f:b8:d8:49:97:1c:c6:f9:
3c:b8:63:8e:78:44:77:45:8b:c0:da:77:bc:6a:85:d0:2b:0d:
ee:54:2c:0f:2b:10:95:fc:e6:5f:3a:52:c4:ec:44:5a:52:2e:
c2:af:d5:59:b9:ee:41:fa:10:58:f1:ec:aa:59:99:c6:9c:f8:
50:c0:94:4a:9f:2e:19:3e:63:56:0d:57:cd:6d:aa:ed:94:ea:
b3:90:b8:83:81:2e:0b:a6:75:9c:d1:d5:ee:e2:26:11:aa:1d:
78:10:b4:ed:c0:e0:43:31:7e:b4:ff:eb:21:f0:23:3d:29:85:
7c:99:73:f4:bf:f8:f1:75:e3:94:e5:f9:a3:17:13:6f:a8:50:
ae:27:4a:f7:6a:cd:e7:4d:e6:19:4e:21:fb:ef:f4:d2:38:b8:
71:e1:ce:47:4e:3c:d4:ed:e9:e1:b7:3c:c6:6e:b1:f9:12:5d:
be:b9:b4:76:cd:36:f8:29:1b:6c:7a:f7:38:eb:19:49:39:43:
b6:90:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:49 2025 by rpki-client