Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a539c6c-08e9-337b-a5ae-d7cb22588548.roa
File: 1a539c6c-08e9-337b-a5ae-d7cb22588548.roa (raw, json)
Hash identifier: 7wp1unEK8uNmsbHupTg/T6qh4GkmVm7ayzSODgyfY4s=
Subject key identifier: CD:66:90:25:CE:96:97:C9:C7:D3:8E:62:34:F3:76:E6:C5:E1:B9:BC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DC57B264C5FF5560201F86F
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a539c6c-08e9-337b-a5ae-d7cb22588548.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:c5:7b:26:4c:5f:f5:56:02:01:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=39c212b9-f205-4cc4-b3d3-af57d117c8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:96:6a:9a:45:03:0b:17:14:90:cb:ee:bb:
b2:31:e6:86:39:27:a1:04:87:6c:d3:cc:73:a6:29:
81:f9:05:89:aa:6c:4e:f4:a2:19:c0:8e:3c:8f:e9:
9e:4d:5b:23:f3:8c:0d:dd:49:c2:1d:22:fe:a4:be:
ca:9b:24:ce:8d:cc:93:32:08:e8:86:c7:bd:2d:77:
14:bf:46:df:87:df:5b:20:1a:7c:73:68:64:de:38:
ab:ff:7f:fa:db:23:11:fa:80:f5:47:52:6d:80:86:
0b:00:22:dd:31:a4:59:9e:e8:10:58:9b:18:9d:7d:
cd:6f:72:e0:50:6d:d3:36:d8:b6:ca:5f:f3:25:26:
0f:df:65:ef:c5:df:51:38:04:eb:ab:97:a5:ba:e6:
65:77:5a:f3:66:53:c9:62:8a:a9:cc:c5:9c:56:76:
89:60:c1:5a:82:ea:2e:c6:bc:8a:39:05:9b:de:fa:
08:36:7b:4e:10:4f:bc:96:a5:14:51:94:58:e7:87:
81:94:a7:7a:3a:3e:04:b9:9a:09:98:f7:a6:18:57:
b6:70:00:97:00:b6:0b:c1:60:cb:6d:7a:be:6b:ea:
ed:69:24:ff:ad:29:48:6e:ab:6f:56:4d:c0:65:29:
d6:ed:ae:05:95:04:98:69:e5:59:77:cc:2b:3f:51:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:90:25:CE:96:97:C9:C7:D3:8E:62:34:F3:76:E6:C5:E1:B9:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a539c6c-08e9-337b-a5ae-d7cb22588548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:3d:2f:f7:4b:14:0d:ce:b8:8c:06:02:ee:3d:a7:0a:bd:35:
5f:2b:13:52:e3:cd:90:79:21:c0:2d:8b:d3:27:87:e3:e4:fd:
fa:34:3b:60:47:5a:3e:06:e7:3a:8a:c1:da:9e:10:2e:6e:4a:
ee:10:98:38:59:f4:fe:e1:61:2b:47:42:7a:a1:65:54:d9:38:
bf:e9:b0:7d:ea:ed:94:d7:e0:74:b2:33:11:25:17:7f:22:03:
10:b2:5f:8d:a7:10:07:00:b6:58:0f:e8:a2:26:30:75:a0:1b:
6e:0a:9b:de:9e:48:55:f4:bd:73:ed:4e:9e:ec:0a:9c:be:f6:
08:c8:ee:84:da:d8:4a:23:dc:d2:64:04:af:06:df:32:16:66:
81:7d:8b:4a:1a:74:85:40:96:df:74:55:88:25:ec:b7:f0:4e:
36:d1:83:b2:7f:23:f9:bb:b0:70:19:1e:d1:d5:85:11:a9:2e:
5b:7c:40:33:b2:88:f1:b5:49:c0:49:1f:55:f5:fa:2d:4b:b9:
fd:5b:54:36:db:e5:d1:7d:1c:ce:15:9e:49:83:00:d0:26:23:
e4:91:2a:85:b5:9d:f4:28:68:8f:c7:44:0c:c3:f2:fd:4c:d5:
92:65:84:68:08:5f:ed:c2:3f:a4:21:3f:1f:da:3a:16:cc:10:
cd:c3:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:43 2025 by rpki-client