Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21bf940f-8a75-343e-a40f-328f9f8e493a.roa
File: 21bf940f-8a75-343e-a40f-328f9f8e493a.roa (raw, json)
Hash identifier: yvlFRYz1RrBzVkvzGKMKi106MSPVww5GqYi0jV/0FYk=
Subject key identifier: 3D:5F:82:9B:7D:3A:DF:2D:E2:AB:C3:95:2C:96:A2:C3:ED:30:D3:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B2AA4F011D5CE2DF213B800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21bf940f-8a75-343e-a40f-328f9f8e493a.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.6.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:2a:a4:f0:11:d5:ce:2d:f2:13:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=7fba5579-5d99-4849-bd04-d9c46a37b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:97:5c:77:ad:b2:9a:ed:ec:ff:6b:a0:5f:90:
c0:55:b6:a1:ea:6f:2a:07:e0:3a:0a:d2:e0:b7:69:
20:61:31:3f:bc:3f:e9:a7:6a:2e:5e:e7:ce:6b:51:
9d:c3:c0:e2:1c:38:7d:e7:0f:ba:0a:85:31:26:c5:
3b:21:2f:c9:8d:04:62:7c:61:6f:a2:2f:a3:c2:17:
7c:56:d0:b6:5a:3f:76:61:a0:b0:dc:13:ec:f4:8a:
2c:d9:df:5b:23:66:ce:29:22:bc:bf:2d:00:63:f9:
b7:8a:de:a7:c5:0c:79:d1:06:fe:d0:6c:f7:a6:43:
ce:12:ea:ec:1d:10:ef:6e:82:25:a7:7c:6c:bd:39:
9b:cf:48:d4:29:10:f5:86:f9:d5:5e:3c:8c:4f:62:
1f:3b:51:c6:38:4f:b9:de:e1:af:e1:c2:b7:51:43:
7b:93:8a:f1:90:77:2c:65:ff:8e:db:97:ea:7f:83:
79:2e:d1:9a:33:74:c2:0f:c4:ed:94:a1:1e:4e:0e:
9d:21:e6:7f:2f:42:f3:51:7c:68:2b:30:99:dd:01:
29:16:f9:95:f1:ff:e0:42:17:b0:69:d9:82:00:f3:
ce:02:38:af:be:4e:d9:57:c3:0c:fc:93:7f:b8:f3:
97:5b:a3:fb:de:ea:79:85:6b:b3:08:69:df:1c:fc:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:82:9B:7D:3A:DF:2D:E2:AB:C3:95:2C:96:A2:C3:ED:30:D3:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21bf940f-8a75-343e-a40f-328f9f8e493a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.6.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:34:cd:dc:d3:68:21:d8:37:b3:3c:86:5c:61:b8:16:1b:ff:
e2:c8:81:aa:1f:b1:73:0b:61:1c:18:5b:58:c6:d3:52:f9:13:
df:f4:57:01:77:02:a8:6b:15:1d:e1:5d:c5:9f:b5:83:df:b3:
aa:49:84:14:3a:cc:e6:9d:26:70:26:b9:68:9f:1e:4e:2f:4b:
da:85:5f:2e:0b:83:06:9b:dd:34:ad:9e:aa:65:0f:09:37:a1:
a5:42:2e:7c:6b:2c:e9:59:b4:1c:55:90:dd:8b:68:16:c7:d1:
ee:65:46:4c:3f:9e:70:35:59:3c:76:db:84:c1:b2:5f:40:b0:
f8:55:ca:29:14:98:47:6c:44:1b:79:7f:7b:8c:3c:3c:0b:b6:
b8:4b:6b:83:80:77:7b:eb:10:10:fe:83:4e:bf:ef:8c:39:6a:
58:75:eb:97:3a:ce:9e:06:eb:91:27:26:00:32:f3:0c:f8:59:
7f:d3:ad:d6:6f:e8:25:c4:48:7e:43:f9:65:29:f2:46:96:f9:
6a:e4:fd:3d:64:4c:bb:91:d5:e9:89:17:91:2b:cc:87:0a:f0:
11:3a:0b:21:ed:54:8c:49:32:58:22:32:f8:3a:41:28:75:60:
63:1a:3c:12:a1:9e:3c:20:50:be:6d:4b:40:57:cf:db:24:34:
d5:1f:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:56 2025 by rpki-client