Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c08aa4a-3b66-3b1a-a7f1-b216248730c7.roa
File: 0c08aa4a-3b66-3b1a-a7f1-b216248730c7.roa (raw, json)
Hash identifier: V7mucl6VYY6twSK1zs/NfApStDMiN+DhzYEkM6o6YKE=
Subject key identifier: 37:A7:BD:42:16:30:08:9D:F4:7D:48:F7:47:8A:C2:4D:8F:B5:B7:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584037F79783943ACDF3430EA440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c08aa4a-3b66-3b1a-a7f1-b216248730c7.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:f7:97:83:94:3a:cd:f3:43:0e:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=593c3314-057f-4462-8342-010e02782f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:f1:e9:e5:06:91:af:64:43:69:2f:fc:d9:
62:fe:a8:d5:76:fd:f5:80:46:eb:f9:d8:49:6d:21:
a9:b6:25:31:31:a2:81:50:fd:54:27:b6:ce:2d:a8:
b8:64:95:57:68:9a:20:8c:94:48:fd:68:71:45:df:
99:63:1d:70:75:ee:ec:c0:0c:45:37:03:ea:6b:18:
30:33:3c:de:15:e8:aa:6f:ef:26:45:a1:94:ac:f3:
59:9f:77:d9:d4:52:dd:1d:fb:15:59:96:aa:fe:17:
f9:56:9e:95:ef:d1:28:87:ac:c1:46:da:0c:8b:43:
26:66:86:0d:6c:4e:69:a9:9f:8d:7e:fa:d1:88:8a:
9c:b2:75:4f:e3:fa:c2:da:d2:0e:e2:93:5d:fb:66:
1f:6a:2a:46:1e:d7:96:b9:d7:0e:de:b0:2e:5d:42:
4d:a5:55:93:c7:3f:77:d6:31:5a:36:13:bb:8b:77:
f8:eb:53:94:78:16:2b:e5:17:0b:89:e7:1b:43:27:
b0:a2:70:b8:d8:91:6f:79:6a:d8:35:bf:ef:5e:2d:
3a:b8:af:87:3c:fb:1c:b2:dd:94:ed:0d:85:49:ee:
99:fb:8b:b4:c3:53:65:bf:14:4b:64:8e:a5:58:63:
8d:8d:a0:9f:2c:37:12:73:8a:d1:b3:c6:01:7c:ab:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:BD:42:16:30:08:9D:F4:7D:48:F7:47:8A:C2:4D:8F:B5:B7:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c08aa4a-3b66-3b1a-a7f1-b216248730c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:e0:66:2e:9f:40:79:6e:4f:eb:31:b7:ff:e7:5f:e5:08:48:
2c:40:92:c6:3c:03:dc:81:e3:22:23:a9:fb:a9:87:b7:19:25:
e3:c8:c5:01:6d:eb:b3:4f:9a:a2:8f:9e:29:b7:b0:83:2b:8c:
57:a5:99:0f:b9:0b:eb:5f:7b:ce:da:3f:64:f5:37:56:22:4d:
01:4f:76:cd:26:61:78:c6:79:20:be:ad:b2:fa:99:19:08:24:
f2:48:ce:ab:3a:d9:6b:e0:5a:4b:3a:0f:65:de:02:c7:87:99:
d3:62:3c:c3:9a:df:62:1a:a8:00:6e:31:50:24:2e:74:9b:21:
a8:43:33:bf:1f:09:a7:ef:85:32:00:1c:2d:f4:2d:ac:bb:e2:
02:26:f3:a2:b0:2d:bc:29:0e:29:f7:c9:72:28:39:02:f2:5d:
36:53:4a:ac:5a:f8:b0:e9:82:a8:13:af:76:fa:d6:09:75:b7:
62:ad:ec:b7:7b:cf:08:4c:71:2d:34:bc:1e:ae:74:d7:f0:c4:
2c:71:05:98:e8:d9:44:51:d1:9a:be:84:90:16:02:8e:c6:30:
a7:97:12:1c:67:75:10:44:79:19:60:b8:4d:06:1a:58:f3:9e:
e9:56:04:79:f0:92:a6:6b:a3:3f:44:84:95:aa:a2:91:64:66:
a9:53:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:56 2025 by rpki-client