Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c532d96-9023-3ca7-af6f-b3173649ce5f.roa
File: 0c532d96-9023-3ca7-af6f-b3173649ce5f.roa (raw, json)
Hash identifier: dBwgbDTLW+3RBdQNlZbxmjJVecZ9N53BMORmexRmBlg=
Subject key identifier: 7B:EF:E2:73:28:92:C3:B3:DA:0A:1A:D3:45:B0:95:6E:43:5E:69:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408324268E58FB1A64519BE620
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c532d96-9023-3ca7-af6f-b3173649ce5f.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:24:26:8e:58:fb:1a:64:51:9b:e6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=d83f0376-947c-4e3a-92da-ff32f004c314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:ad:af:49:3e:9f:94:dc:5f:e1:d6:ed:c1:
24:da:b5:7d:4b:ed:4a:3f:bc:fb:07:f3:09:ed:cb:
af:f9:fa:df:55:a1:97:25:d3:fe:91:2c:24:66:b9:
ba:19:bd:d3:31:2d:53:66:bd:e8:54:39:e8:92:e5:
bc:64:79:14:9f:b7:e0:99:8a:55:22:b5:4f:68:da:
27:a6:0e:4c:86:2a:ce:05:c0:b0:a6:43:37:f0:30:
00:09:06:e9:e7:59:2e:b7:3e:a5:f8:38:2c:c7:7f:
c5:22:1a:46:49:76:b5:3a:ee:49:dd:81:ed:2d:15:
d7:04:5b:61:12:fe:7d:0a:bb:bb:3c:0f:85:07:93:
fa:b1:7c:37:e6:8e:a7:98:e5:bd:3b:40:7e:7e:cf:
55:c8:90:db:ae:04:ea:34:b3:16:c3:71:92:aa:91:
30:96:0f:0b:c7:32:da:8a:b2:9c:3d:e2:2d:e8:93:
61:1c:b0:a7:b6:4a:37:a4:79:18:f2:ae:ea:77:87:
bf:fb:a1:bf:47:42:91:2c:4d:26:22:0a:28:11:3b:
b0:d4:16:ab:80:22:58:16:71:f8:72:be:14:6c:b7:
7e:3f:b6:0b:ca:67:0f:ee:d5:04:15:6f:af:d9:06:
30:21:65:24:57:0a:48:c7:f2:f6:0f:57:9d:27:04:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:E2:73:28:92:C3:B3:DA:0A:1A:D3:45:B0:95:6E:43:5E:69:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c532d96-9023-3ca7-af6f-b3173649ce5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:6b:61:96:ff:77:04:92:20:23:54:e8:f5:3f:16:6c:18:0b:
f8:88:fe:7e:18:16:c7:fa:4b:db:5c:bf:dc:09:38:ce:18:b8:
cd:0c:60:3f:4d:f7:1e:4a:c8:c2:03:8f:b3:c7:6a:56:db:53:
c0:20:49:b4:25:33:74:2f:d7:e8:fa:1f:be:06:4b:8d:5e:e1:
67:98:9f:8b:7e:b6:d2:98:63:88:fd:18:73:e7:1e:ea:05:77:
cd:f2:f4:83:70:7c:71:59:2d:2f:2e:7b:80:4c:16:86:39:97:
bd:79:a0:94:cb:72:4b:08:24:19:d7:54:35:44:0c:f0:19:c4:
22:5c:66:db:e2:8d:0c:00:24:da:a1:45:98:8b:35:a0:66:e7:
91:2f:2c:9e:49:52:02:54:8a:6a:a9:b9:1e:7c:bb:9e:f0:d4:
cb:55:67:a4:c5:21:23:9e:da:89:11:fc:51:d0:8f:ae:45:db:
b0:b9:18:a8:b5:4e:69:34:ed:f6:e7:5d:0c:18:5b:91:7e:92:
e4:50:96:cb:15:51:0c:b9:08:00:26:f3:51:44:bc:a7:d7:39:
2c:1e:20:5a:d2:35:13:2a:0e:e8:cc:02:a7:f7:2a:75:da:17:
5a:4c:fe:72:6e:5f:ce:0d:5a:37:ce:60:54:ab:b7:0e:bd:79:
48:aa:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:50 2025 by rpki-client