Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c50c268-e9e2-30d9-a724-212df2b1f9fb.roa
File: 1c50c268-e9e2-30d9-a724-212df2b1f9fb.roa (raw, json)
Hash identifier: sjj7KqMIBykMVBUIZdCSPeoUF3X4//N1QgzzzvUf4wg=
Subject key identifier: DA:A3:F1:CB:91:A3:04:19:D2:F2:AB:5A:A2:F5:0B:30:97:44:69:E4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401ACCC924003129EDA88C4C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c50c268-e9e2-30d9-a724-212df2b1f9fb.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:cc:c9:24:00:31:29:ed:a8:8c:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=8edd21b7-7348-4deb-95cf-3a472fb39787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:63:20:0b:e5:2c:4d:81:41:f4:c6:2c:5e:
af:4e:4c:1a:57:38:88:2b:b4:bf:2c:27:ca:d5:8b:
9a:38:5f:bf:35:10:87:a2:00:5b:b3:01:1e:71:5d:
24:77:c2:27:b6:12:15:e2:2d:93:68:ad:11:84:9d:
60:34:90:a7:ac:43:3f:68:89:7e:e5:f2:c8:8b:84:
6b:bc:60:26:09:23:7b:86:f3:97:e7:84:bf:00:89:
14:81:25:09:fd:4f:23:4d:9c:9d:1a:df:88:f4:e8:
39:95:0d:b0:a7:7e:b2:eb:28:9c:18:60:fc:b6:87:
88:80:d5:87:7d:a6:12:a2:70:c0:07:07:a3:ca:f7:
8a:07:8a:a5:5d:8e:91:3c:58:6b:e8:14:98:ad:b3:
be:96:b6:9f:76:95:8e:de:d5:38:96:9d:82:78:ef:
ca:42:d5:65:50:a8:ab:b2:cc:54:89:fe:b3:7d:cb:
bc:2a:e9:6a:f3:c6:29:a2:8f:8f:ef:96:f1:47:03:
ae:76:62:c4:7e:98:eb:e9:8a:23:2e:59:be:a4:de:
fc:4a:ac:32:c1:7b:0c:0b:68:10:8d:e8:2c:22:f0:
d1:bf:a1:9e:d6:5a:34:6d:63:8e:24:34:8a:6b:ef:
43:e8:af:14:b0:23:b6:ad:94:13:95:ec:3e:ce:0a:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:F1:CB:91:A3:04:19:D2:F2:AB:5A:A2:F5:0B:30:97:44:69:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c50c268-e9e2-30d9-a724-212df2b1f9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c2:2b:31:47:23:57:3f:bd:c8:c3:f0:d2:bc:19:e9:63:31:
52:08:5b:7a:e3:c4:76:cf:0a:e7:5a:66:14:97:c8:1d:77:d5:
8d:e7:b9:0c:43:ff:b6:62:c3:f0:c0:71:dc:d1:a8:2e:eb:23:
06:cc:d1:c3:36:ff:b9:fd:19:17:bf:c2:fb:7d:be:ae:24:df:
32:42:49:ec:6d:85:51:b6:0c:f2:27:2a:ac:44:de:2c:e4:15:
b4:45:f7:14:56:a7:71:5a:c2:17:b2:cd:d3:1c:3a:0d:b3:45:
62:59:76:c8:36:71:98:7c:49:07:2f:e3:b6:29:06:42:59:26:
57:74:ce:e5:1a:a3:06:5a:a3:1c:7a:c1:5c:b2:57:d8:3a:04:
54:1f:b2:00:bd:a8:0e:5f:02:bf:f7:a2:2e:fc:15:5d:c7:d1:
b7:4d:f3:85:ae:8c:8a:e2:d0:da:e6:1f:d4:e0:3b:d0:a7:12:
6a:b7:99:e5:12:2d:cc:b4:1a:71:22:84:98:c1:79:43:5c:ab:
7b:3c:d2:3c:a0:4e:5b:20:14:4e:ab:72:3f:8e:c0:cb:4a:0e:
4d:a9:12:b7:be:7e:72:71:f8:6c:4c:18:ff:b5:d4:d7:2f:e9:
2e:81:be:39:b4:6d:7e:6a:20:5d:61:1f:29:e8:d6:89:6c:b5:
93:6e:be:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:05:08 2025 by rpki-client