Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17afb3fb-0f8e-334e-8cb5-e4ec4e4002eb.roa
File: 17afb3fb-0f8e-334e-8cb5-e4ec4e4002eb.roa (raw, json)
Hash identifier: hvdMeMfIicIMAVDV4y3Ucs7eDip5gdbBL4wBwVhG/1w=
Subject key identifier: DE:C7:59:AF:22:80:E5:FC:4B:94:04:39:3F:73:24:B5:40:36:A2:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AD831C991DB77B7BE0403B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17afb3fb-0f8e-334e-8cb5-e4ec4e4002eb.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:83:1c:99:1d:b7:7b:7b:e0:40:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=479bb169-a995-4a8b-a31e-657b4758f429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:8d:cc:ba:7b:45:db:9c:ed:81:fc:bf:0d:
9c:d8:0c:f9:87:ca:bf:b9:17:70:1b:3f:11:a0:17:
10:f6:af:dc:c5:8a:cc:fe:30:60:8b:15:2f:c1:ab:
76:1e:5e:b8:a5:ef:c7:c7:22:d2:86:0f:90:a2:65:
d1:89:0e:be:6d:68:7d:50:e0:6b:d1:ed:9c:cc:9f:
3d:42:52:d4:66:45:01:57:63:e6:84:75:06:e1:8c:
2c:10:1a:47:3e:61:ec:96:a8:2b:47:59:d8:99:53:
02:a0:4e:f3:a3:3b:86:af:3d:50:ce:5f:93:e9:ca:
71:da:ac:25:5e:eb:92:ea:f2:c5:21:5c:14:a0:93:
ef:8a:52:18:09:fd:98:73:cc:3b:93:cc:90:2e:ef:
43:12:d0:4a:df:f8:54:ea:f5:f7:aa:c0:73:0c:4c:
b9:86:89:af:89:be:69:4f:83:7d:a2:fc:22:73:15:
46:85:2d:dc:a5:c9:e1:3f:fe:72:bb:f5:b7:12:ab:
4f:50:8a:5b:0e:2a:d5:51:7f:6d:3b:54:42:38:46:
4d:db:b0:aa:52:7c:74:cc:67:9a:31:6e:90:ec:2f:
a0:8d:b8:b7:12:c5:a2:86:96:08:84:73:23:48:3c:
c6:86:2a:7d:5b:f2:05:51:7b:8b:51:7b:38:41:42:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:59:AF:22:80:E5:FC:4B:94:04:39:3F:73:24:B5:40:36:A2:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17afb3fb-0f8e-334e-8cb5-e4ec4e4002eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:02:f5:a0:51:19:c1:3b:52:c1:82:2a:fb:29:5c:1b:ba:f6:
17:9b:32:6f:ae:39:bf:d5:6c:f9:3e:8a:92:c0:d9:9f:62:73:
9a:1c:96:04:5c:cf:7a:e3:4c:0c:d5:63:e4:2a:6d:93:e1:36:
69:16:50:cb:8e:0c:d6:e4:41:e6:3f:db:a3:07:d9:1b:2a:ea:
75:4d:46:93:93:81:b2:0b:6e:38:81:1e:b8:09:23:9f:4c:8e:
84:84:b1:51:14:a2:dc:3f:44:34:b2:fe:54:d9:30:01:de:c1:
7f:a4:90:bb:b9:5e:29:66:1b:5a:ba:28:46:cb:6f:e8:ad:c2:
a0:be:80:a9:50:41:81:59:c6:31:0e:34:a6:50:31:1e:1c:7a:
f1:74:f7:4c:b6:53:12:0a:39:97:fd:0d:38:10:ce:cb:8d:7f:
e5:78:df:8b:8f:19:65:1d:9f:0a:f9:bb:39:66:94:71:f7:d2:
c7:17:27:cf:cb:55:7b:2f:44:32:a2:08:40:91:ad:98:5f:30:
29:fd:a2:92:6b:36:a4:fd:c9:eb:7e:19:3b:31:02:02:50:94:
9a:ff:e6:9f:e7:df:c6:52:a8:d7:a5:8a:86:fb:aa:94:0d:4e:
d1:75:18:b4:da:cc:7e:cc:ed:8e:a5:c4:0d:b7:27:c6:6e:a0:
f4:ad:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:25 2025 by rpki-client