Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/142e86b2-c7dc-30f0-b3b3-f6f692eaab1d.roa
File: 142e86b2-c7dc-30f0-b3b3-f6f692eaab1d.roa (raw, json)
Hash identifier: 4o3UNSCPdreNK2MQMV1IJ22wx02oR0d1HXABNNaH/E8=
Subject key identifier: BA:D4:59:F2:08:B0:00:5C:AF:ED:C2:FA:25:28:B0:BA:BD:38:F1:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBC2F8C66E365A03D58EC7440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/142e86b2-c7dc-30f0-b3b3-f6f692eaab1d.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Mon 07 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:2f:8c:66:e3:65:a0:3d:58:ec:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 7 05:00:00 2022 GMT
Subject: CN=72e99a53-e2eb-47fb-a53c-c94e90ebc26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:3a:5f:f7:8d:7a:64:47:ee:8e:ea:38:b2:
da:31:57:ba:49:0c:53:ab:0d:f9:ea:ea:39:b0:a3:
6a:32:1d:75:07:d4:20:fa:a6:73:3e:f5:09:3e:b4:
b0:38:5d:f5:40:48:d4:38:36:8a:71:e4:8d:f2:5c:
c6:4c:8c:48:89:9d:b5:e1:e9:2b:c0:94:e3:77:49:
fa:f0:f7:74:c7:57:7b:15:98:9a:79:dd:03:bb:59:
93:f1:a4:9e:72:e1:88:17:e4:e3:d7:25:cf:46:42:
b5:4a:4a:f1:45:b3:90:2c:ad:d0:46:13:89:0a:36:
76:df:82:72:89:c4:6a:91:c2:bd:73:ec:f1:2c:dc:
23:b9:f1:57:59:5c:86:dc:e9:f9:d9:07:e5:2c:1b:
6a:00:d0:6a:50:31:75:c6:8e:a7:68:42:5a:a9:ce:
29:5a:3e:ea:5f:45:80:1b:e8:d2:21:41:d0:b3:2c:
e1:dc:c5:45:a0:5f:4e:c6:b5:35:86:84:89:03:ae:
b9:48:f4:74:df:be:b1:8a:fc:8e:b3:35:ad:a6:47:
2b:96:8e:bc:51:93:e9:90:de:64:d4:ec:fb:e8:be:
eb:21:fb:1e:cd:7a:a5:eb:cc:3a:9e:93:f3:ac:fa:
77:36:f1:cd:72:80:79:9a:22:64:34:85:1f:dd:98:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:59:F2:08:B0:00:5C:AF:ED:C2:FA:25:28:B0:BA:BD:38:F1:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/142e86b2-c7dc-30f0-b3b3-f6f692eaab1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:ba:70:e6:c0:e3:17:ce:5d:e4:69:14:96:04:a3:0e:e2:85:
bb:72:8c:f3:22:cf:d7:28:d4:c5:eb:bc:18:1d:cb:23:1d:5d:
45:35:2f:8f:94:51:11:2b:80:b8:5a:d1:a0:97:04:5a:2a:88:
d0:b3:86:dd:b4:ab:51:26:f1:52:51:7a:08:32:c8:ec:2d:ca:
f5:4a:14:3b:86:b4:73:10:3b:6a:69:16:a9:59:2b:5f:bc:51:
d9:19:26:45:08:3b:f0:97:34:9d:aa:a1:51:56:20:2d:4d:fd:
df:e7:76:f8:22:43:a4:cf:aa:27:c4:f8:58:2d:60:c7:d2:fd:
8c:6d:80:8e:07:c6:86:77:4b:db:20:11:e7:71:14:52:2e:ea:
be:60:8d:3b:46:3f:a4:17:db:d9:b8:c3:2b:5d:83:4b:ac:c5:
05:7d:38:42:df:32:ed:f5:3d:b9:66:71:ed:cc:50:7b:07:ea:
ec:f6:b8:8a:16:37:ed:da:87:10:24:c0:0a:66:15:c9:ef:5f:
11:f7:1b:5a:7a:c7:9c:24:91:2d:f9:a6:a4:a1:2a:25:7e:1e:
b1:0c:29:9a:43:78:43:9b:a6:d3:62:fb:be:69:c8:38:b7:21:
34:95:37:1b:c3:f5:07:95:ed:16:d6:c1:07:75:1c:23:ff:53:
f1:a9:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:26 2025 by rpki-client