Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1522f69a-e924-3230-8493-34a23194de09.roa
File: 1522f69a-e924-3230-8493-34a23194de09.roa (raw, json)
Hash identifier: f/QJNVdnCCWBsG2AE89CgFlqZ2AGNBRsy7elWE5jGAM=
Subject key identifier: F6:CE:DA:9E:E2:B7:99:A8:70:FF:CB:14:40:E9:62:31:A3:B2:A2:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA9BDF0487EA990D6E3792D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1522f69a-e924-3230-8493-34a23194de09.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a9:bd:f0:48:7e:a9:90:d6:e3:79:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=3e8dd087-0376-47d4-ba01-50c5ae441526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:df:53:22:71:6b:d4:de:f0:89:77:2b:ea:
fd:d3:bc:36:fa:50:49:13:e4:2f:08:e2:4e:26:a7:
eb:9c:4d:39:86:46:22:e0:97:f1:a0:fd:b3:bb:e1:
58:6c:a3:e9:52:c9:32:63:ab:03:68:5f:1f:c0:24:
7d:9a:6d:7e:d9:7d:79:69:a8:b1:a6:f4:cf:20:65:
7b:a0:3e:f4:ed:59:87:78:c6:8f:88:72:d0:51:16:
95:62:d7:2c:a4:6d:a3:56:4d:71:c3:5b:51:b4:19:
98:93:70:7d:dc:6f:0e:24:2e:b9:73:38:da:a1:46:
bf:f6:ab:d4:ad:dd:ec:b4:23:32:5c:54:94:00:6b:
a5:be:c3:1b:86:fe:26:86:79:c9:32:79:72:90:97:
79:02:bd:4f:ec:2e:6f:11:d4:b9:52:5f:28:5c:73:
c3:14:fe:a6:8a:c5:d6:40:dd:d9:e2:c5:68:89:e3:
27:2b:5c:b0:87:88:5e:43:a1:a5:84:45:ed:52:69:
0d:62:c8:08:11:4c:5d:2a:53:53:37:44:0a:84:c4:
36:d6:e6:a8:45:09:ad:31:66:1f:cd:37:a9:00:6d:
93:fe:c6:85:bb:0e:09:db:7e:2f:30:76:a9:13:3c:
28:83:43:f1:66:42:00:d8:18:73:fb:e8:ae:ce:52:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:DA:9E:E2:B7:99:A8:70:FF:CB:14:40:E9:62:31:A3:B2:A2:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1522f69a-e924-3230-8493-34a23194de09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:0c:01:4b:2e:da:9e:ae:91:f8:99:06:d0:9f:62:c8:e1:6b:
f9:b3:20:e4:76:5b:e0:2f:c5:5b:44:b5:33:6b:1f:da:61:31:
2a:fa:c2:d0:ed:d5:b5:3b:c7:08:c8:7b:3a:4b:87:ba:21:aa:
e5:d7:b5:bb:45:53:ee:5a:05:e7:ff:d0:ae:6e:33:1a:5f:0f:
a6:dc:94:8e:7c:a9:6b:62:03:bc:6b:04:16:c5:18:e6:47:63:
64:fc:0a:41:a8:17:ea:0a:02:fe:5e:02:96:20:4c:77:f2:80:
87:bc:f6:f6:36:e4:fc:03:96:ac:30:b2:f6:0b:a4:a8:01:d4:
6b:45:08:ab:e3:80:c4:d5:2e:9d:3d:f2:dd:db:6a:3a:83:71:
12:f9:dd:74:5c:e6:37:15:3d:7a:48:b7:1a:c2:69:88:30:1d:
86:0e:08:16:41:38:78:75:57:86:8f:6a:90:16:57:ec:56:24:
d1:72:97:3a:de:c8:72:54:37:96:6a:d6:68:3a:7c:35:df:ef:
4c:0b:d9:1d:f0:e2:ed:c2:60:b3:5f:61:88:a5:01:3f:e9:6f:
57:ef:67:27:c6:c0:12:71:55:0e:af:71:23:f5:fa:74:7d:af:
a2:da:dc:ed:49:e0:1d:00:57:bc:6b:8a:a6:e1:f2:8b:bb:8c:
5e:e4:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:07 2025 by rpki-client