Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ec5abc1-2ea6-3cd4-ba8b-ce583b5dce86.roa
File: 0ec5abc1-2ea6-3cd4-ba8b-ce583b5dce86.roa (raw, json)
Hash identifier: nP7AL7USHOSz8tShrUnaO0mpN/dH1Mi6e1aPm8Ff2nQ=
Subject key identifier: C5:29:1B:A1:83:DB:4D:40:46:6B:54:CD:37:0F:19:1D:3A:41:67:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA58C25931485697EEA62AB98
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ec5abc1-2ea6-3cd4-ba8b-ce583b5dce86.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:8c:25:93:14:85:69:7e:ea:62:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=4dbcccef-44b6-475e-80b2-db114e90d3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:28:f8:82:cf:4d:8b:5e:20:7d:2d:5c:86:25:
eb:55:f9:12:91:a5:d5:4f:a1:9a:65:fb:17:a5:28:
d8:2f:ba:4d:41:0c:68:45:f7:5c:52:46:46:00:92:
83:c1:01:40:f9:cc:0a:e5:44:d4:cc:ba:d4:a2:b6:
63:d6:35:d1:ba:b8:25:94:0a:5e:ca:49:66:65:f7:
5e:aa:f0:3e:b5:5a:e6:c3:cc:2d:a9:f3:4b:4d:cc:
d4:96:73:4f:d9:03:ef:30:16:85:f8:ad:bb:38:26:
99:d7:2d:14:ef:c6:f6:06:37:2d:f7:e0:8a:98:eb:
87:d7:2b:0b:cf:d1:83:f0:fc:0d:e4:2b:1c:be:64:
37:f4:49:8c:66:08:6d:cd:1f:c5:96:9b:b3:4c:e6:
d0:53:09:04:5f:1a:d8:db:1f:99:28:6b:48:b3:32:
c3:f3:30:2e:cf:b5:9c:02:06:11:7e:c1:4f:25:a9:
94:31:0f:8b:97:50:8b:e6:ba:01:f6:3c:5d:46:b9:
d0:b2:df:41:7a:1a:44:91:fe:51:e2:94:42:d7:ba:
06:46:df:35:87:d8:b9:b2:30:d8:a6:1d:f6:4f:ac:
42:72:ec:35:98:1f:2c:8f:ed:13:16:a2:3e:50:6d:
cc:da:68:8f:f2:6d:de:00:fc:45:4e:f5:f1:c1:09:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:1B:A1:83:DB:4D:40:46:6B:54:CD:37:0F:19:1D:3A:41:67:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ec5abc1-2ea6-3cd4-ba8b-ce583b5dce86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:5d:b5:99:fe:f5:53:35:cc:5e:c4:18:7a:70:1e:26:85:8e:
7e:7f:27:8b:c7:45:4c:f5:5e:18:71:ee:2d:2a:7c:2d:f6:e6:
4b:1c:a3:03:74:65:2e:5e:0a:7c:80:81:ed:ba:f3:de:75:a7:
6f:6d:c2:b4:dd:4d:a4:34:a1:54:2e:e4:ca:e2:7e:81:3d:4d:
de:a4:03:fe:a0:fd:f5:5f:68:17:ec:ed:1a:83:66:71:95:4b:
24:17:31:4e:c0:4c:ad:c5:75:76:68:7d:e7:ad:36:7f:68:58:
c2:24:99:3d:dd:ab:99:7d:c6:fd:43:4a:d1:07:7c:5c:2e:ab:
cf:7a:1b:bc:5f:f8:40:c7:03:1b:ef:d7:11:01:23:79:e1:5f:
88:1e:82:06:61:3b:7d:64:f8:07:5b:a6:3a:9b:bd:31:76:7e:
94:e9:76:0b:9b:2d:e5:ee:1f:7b:72:03:5b:d3:84:78:48:6e:
5f:ba:fe:1d:c4:6c:2b:27:19:07:21:58:0e:99:04:0a:79:52:
48:5f:9f:14:30:8f:af:78:23:99:85:96:40:02:c6:37:ad:a8:
dc:1f:2c:47:e2:56:05:25:2a:a8:b9:42:a2:77:46:82:8d:fc:
0c:ca:78:68:3a:a3:c2:ba:f0:f8:dc:3a:e5:4d:c8:2a:d7:86:
37:57:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:49 2025 by rpki-client