Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19367a3b-c859-3a34-87a7-1dd856ee45af.roa
File: 19367a3b-c859-3a34-87a7-1dd856ee45af.roa (raw, json)
Hash identifier: xubYgDyn9VV3AUJCj+PBfioI3HOAJ7ERbgheVOTxB4c=
Subject key identifier: C7:06:B7:D3:B9:1E:F2:AB:BB:53:AE:21:0D:50:05:18:EC:D6:6A:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE2794D42EE197BC156B22980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19367a3b-c859-3a34-87a7-1dd856ee45af.roa
Signing time: Fri 12 Aug 2022 14:42:08 +0000
ROA not before: Fri 12 Aug 2022 14:42:08 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:79:4d:42:ee:19:7b:c1:56:b2:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 12 14:42:08 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=487011aa-a965-41c0-8024-9f48bcb2cbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:a5:2d:70:ff:12:76:a7:87:8b:50:9b:3e:
a2:20:1b:2e:a3:7c:6a:83:85:fd:2d:65:43:cd:96:
6d:1a:93:9b:ab:c1:45:ef:52:09:46:7f:b0:25:be:
98:dd:de:21:e1:d6:b3:f7:0e:c5:bb:3a:8f:ff:3c:
2d:a2:d7:e8:43:0b:35:39:39:2e:8c:84:c1:ba:5b:
68:c4:ff:a3:30:79:a2:79:83:af:87:6f:cc:ed:f1:
d0:42:a7:b4:3b:96:cc:c6:56:b0:53:18:a3:db:f0:
70:58:9b:9e:a5:9c:01:0f:77:be:88:42:76:d9:26:
69:d0:a7:5d:bc:2f:08:25:94:a3:b9:2b:35:1d:c6:
86:5c:a2:a0:41:8f:9d:24:64:8b:29:94:65:50:ff:
a8:07:0b:1e:f0:09:3f:a0:d7:59:f4:a5:50:33:e4:
9f:09:da:0b:be:43:c1:5e:61:2a:08:a0:82:3f:1c:
7f:fc:0a:d5:73:20:83:ae:03:0f:c5:ac:ba:7b:a5:
91:3d:73:f3:a3:37:49:2a:f2:05:c1:22:7b:11:b2:
ec:c6:09:d0:cd:87:4d:10:50:f6:10:bd:d1:7e:44:
b9:ac:00:52:01:65:85:5a:45:7c:4d:f6:f6:3c:00:
88:3e:9d:c8:53:1d:a8:4a:69:45:24:11:ad:bc:79:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:B7:D3:B9:1E:F2:AB:BB:53:AE:21:0D:50:05:18:EC:D6:6A:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19367a3b-c859-3a34-87a7-1dd856ee45af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:d4:e9:b0:c2:2e:34:df:15:5d:b6:44:ed:50:69:eb:b7:24:
0b:d2:88:ec:17:ac:33:14:d0:a2:84:b4:0d:e7:03:b8:77:97:
f0:6a:cf:f4:69:55:86:cf:ff:c3:73:ca:1d:20:bf:29:18:2a:
11:8a:fa:45:fb:b6:e7:b4:da:22:08:84:ee:42:56:3d:6c:dc:
85:1a:da:d2:49:81:8d:86:86:36:f8:f0:cd:73:af:47:72:5a:
ca:08:b4:a7:67:b8:4d:33:bc:aa:61:34:69:df:75:50:7d:33:
5b:d0:d9:c5:49:35:72:be:ce:98:c4:ab:5f:79:a9:5d:7a:b8:
05:57:ec:6f:85:a8:4d:38:1c:d7:60:fe:d6:39:6d:57:5c:36:
63:c7:64:ad:14:50:b6:62:b3:d4:7a:3c:ba:ca:0c:0e:ba:6d:
e4:a4:19:af:c3:bb:cd:cb:56:65:10:03:50:d6:69:91:4b:61:
93:ff:13:9a:bb:7c:d4:f0:59:08:aa:6c:39:6d:11:86:6d:2b:
c4:61:6b:78:ab:ab:4e:d1:fe:24:4d:b8:81:a0:43:f6:a1:09:
34:3c:b8:8e:82:93:f6:be:8e:9e:c6:09:cb:74:94:4a:38:94:
ad:0a:48:b0:27:55:e6:ab:fa:b1:97:9c:99:b7:8a:8b:54:8c:
32:5e:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:02 2025 by rpki-client