Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23af69ad-9c57-314e-b42a-3b0a3d2d140b.roa
File: 23af69ad-9c57-314e-b42a-3b0a3d2d140b.roa (raw, json)
Hash identifier: 2cOPIW0NTVbux2RRqtq0TEOrisDPwOe/ilvkY8DaNzE=
Subject key identifier: 3C:7F:53:7D:28:87:22:50:33:78:CE:5A:6F:50:2F:B6:7B:BC:CE:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B659E3A9A7B0B5343BBE2F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23af69ad-9c57-314e-b42a-3b0a3d2d140b.roa
Signing time: Thu 26 Jan 2023 15:12:07 +0000
ROA not before: Thu 26 Jan 2023 15:12:07 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:59:e3:a9:a7:b0:b5:34:3b:be:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 26 15:12:07 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=04de7dd3-8405-4665-b14c-e71f696b8f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:ff:d5:65:36:83:9e:cd:27:c1:f5:c7:f0:
33:f3:9f:45:ef:b1:f8:0f:bc:60:c1:06:cb:f4:69:
7c:7e:0c:80:99:c6:41:81:d6:ab:b5:b0:31:c5:4a:
0f:f5:82:95:f3:c6:a5:93:06:38:7a:38:94:5e:97:
2f:d6:64:7e:dc:b9:2a:b3:f5:1a:3d:af:8b:56:11:
ba:e7:aa:0d:a6:4d:1c:91:ac:0f:55:9d:52:40:48:
5c:9b:4f:69:ae:79:bf:43:a1:24:37:9f:f9:01:04:
2f:84:e0:56:67:d3:bf:44:4a:86:5f:b9:1c:02:08:
6e:bf:20:b6:fc:5c:51:6c:6f:ad:be:be:a1:2d:96:
1e:b6:71:09:0c:34:71:17:eb:b7:c0:4f:a6:bf:c0:
1e:e0:a1:2a:9d:82:82:fd:89:37:2d:c8:8f:87:6e:
ee:90:8f:af:49:69:4c:ee:d2:b2:da:f7:fb:42:15:
40:eb:f5:2c:14:ef:7e:c4:d9:e4:0e:c4:af:0e:66:
67:05:64:91:d7:ac:ce:4d:f7:1f:23:85:7a:35:c8:
2f:d1:ab:42:21:51:ba:64:da:b4:8d:b6:83:9b:c8:
35:52:30:b9:11:a6:82:dd:8e:18:11:c9:3c:cd:df:
4e:ec:3f:34:b9:c7:27:ee:98:58:d3:f0:12:56:ad:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:53:7D:28:87:22:50:33:78:CE:5A:6F:50:2F:B6:7B:BC:CE:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23af69ad-9c57-314e-b42a-3b0a3d2d140b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:27:bf:df:30:85:91:18:ad:8a:40:40:b2:4c:c7:8c:54:26:
c2:c6:8e:2f:18:d4:1b:38:cf:b6:21:72:75:31:b8:c5:8d:05:
5b:42:d0:0a:cd:ad:c6:69:81:c1:92:50:48:f6:c1:76:d2:b4:
69:84:85:99:d2:94:3b:3a:39:7c:87:d4:60:a2:75:46:1e:d8:
e0:56:17:3c:4b:78:b1:ad:8c:11:d8:bd:30:ee:61:db:2a:96:
35:19:2b:04:c5:a9:5e:15:4a:76:62:9e:06:f5:fa:74:3d:25:
49:6f:7d:74:69:db:86:31:72:a3:91:d3:bd:87:7c:05:17:54:
c5:34:ca:cc:a7:b4:93:9f:5c:64:5c:53:71:af:20:5c:60:a9:
b9:76:34:ad:8e:3c:19:76:54:16:b5:6e:87:2c:00:35:61:ff:
7a:48:d9:e1:65:ea:8f:3e:ea:8d:f0:8f:60:2b:eb:8f:3b:a9:
2e:2a:92:b4:f9:05:1b:13:8d:4a:e0:17:40:1c:1e:0d:17:3d:
30:60:9b:ad:cc:49:67:51:33:09:b3:31:b1:68:2f:58:e4:31:
d6:1b:fa:18:23:3d:8b:5d:55:95:40:55:33:9a:af:ef:2b:19:
62:58:46:dc:06:c0:e4:64:92:c5:73:3c:3c:68:cd:9a:86:16:
6b:cb:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:32 2025 by rpki-client