Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b20cf9d-8f24-3767-b7ba-8d4ef807797b.roa
File: 1b20cf9d-8f24-3767-b7ba-8d4ef807797b.roa (raw, json)
Hash identifier: IzEBeEgZqVGJR7oso/zbyPWxe1Cc0NsWHjcZ5QIKWb8=
Subject key identifier: 48:8C:66:BE:59:A5:91:48:25:40:2E:8A:A4:35:99:56:2E:B8:1E:DA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405FCEBBFEAC4C6795A8714480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b20cf9d-8f24-3767-b7ba-8d4ef807797b.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:ce:bb:fe:ac:4c:67:95:a8:71:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=35b974ca-df12-4a5f-b1d7-80d614f66572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:86:1e:5e:a5:5f:3f:84:a9:8e:ad:bd:5a:
6e:85:19:8a:0d:ad:8f:03:4d:3f:5a:bb:d6:a0:83:
de:54:16:9e:53:d7:5e:8f:7e:fb:aa:17:73:c3:ac:
33:88:15:03:68:19:b3:cf:a3:f9:cb:c7:7c:f6:dc:
0d:bf:5a:0f:4f:9b:03:6d:1f:f7:28:4b:f7:36:4b:
58:b3:24:8f:bf:51:eb:90:ba:c7:58:09:33:a8:72:
aa:ba:1e:9a:13:1c:da:13:b1:86:d8:19:08:d1:8b:
dd:1d:70:ef:5c:51:b1:68:4b:07:a7:63:e0:43:bb:
75:f8:03:d2:b3:44:e5:58:14:21:0c:e4:f0:d8:92:
14:ff:ec:c1:c8:41:6d:27:60:0a:7e:c4:ec:49:26:
dc:29:2e:8f:74:1a:42:88:f2:82:22:d8:86:86:87:
00:89:f4:0e:be:59:61:11:2b:86:7e:25:f4:44:41:
ce:c8:02:c9:c4:5a:c1:4a:b0:e3:7d:bb:48:66:90:
d8:30:dc:f9:3c:7d:7a:e1:da:f4:3e:bb:f6:db:94:
00:f6:e5:5e:9c:62:6f:ea:21:6b:24:a1:ff:7a:4a:
05:7f:00:fd:3e:ff:78:85:c4:f4:83:06:c2:fa:9f:
d5:27:41:c6:27:1f:63:79:5d:57:a1:41:39:b5:f9:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:66:BE:59:A5:91:48:25:40:2E:8A:A4:35:99:56:2E:B8:1E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b20cf9d-8f24-3767-b7ba-8d4ef807797b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:46:74:0a:54:9c:ff:32:2e:83:fe:63:18:d7:86:83:c1:4c:
07:7d:2e:73:82:71:ed:9c:45:24:17:f5:c1:59:fe:37:40:0a:
75:83:05:3a:69:7a:85:90:9f:40:d1:f8:a6:44:da:fa:aa:6e:
78:43:42:79:6b:88:fa:e5:e0:37:97:c0:f9:fb:4f:cb:45:13:
56:73:71:91:07:19:46:26:6d:62:b5:02:2a:ef:4f:94:8b:03:
a6:07:4d:71:fa:cf:a4:0a:3d:5d:f4:29:3b:91:5e:87:f3:57:
25:89:25:dd:81:f2:be:ca:61:82:da:1c:3e:d7:0a:2d:9e:91:
f6:28:f2:48:de:e2:35:39:8d:3c:38:c5:72:e8:1f:56:29:5d:
bb:82:c2:d7:02:a8:ee:90:2d:f3:d7:87:16:74:32:9f:b8:37:
b4:2f:1d:a2:31:e5:e8:4a:63:58:54:6b:f9:13:38:89:92:22:
53:fe:ba:2b:25:ca:c0:5e:90:b0:16:8d:80:45:47:2f:4c:21:
b8:02:43:14:2c:ed:5b:5c:8a:f5:61:51:1b:d4:e7:96:ea:a8:
72:6f:20:32:0d:c8:c4:db:f7:a0:73:d2:92:e3:e7:ee:4c:5a:
ac:f2:18:99:0a:86:5a:8a:b1:13:8c:44:29:61:ad:ef:f2:32:
10:fa:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:59 2025 by rpki-client