Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25819137-fe2a-321b-85ea-738f41157d23.roa
File: 25819137-fe2a-321b-85ea-738f41157d23.roa (raw, json)
Hash identifier: 9N9KRnrFLG7ozQCBbdo7EZaGlS4hC4Fcb5iMKGIUzqs=
Subject key identifier: AF:7A:4B:F9:3E:B2:A2:81:FC:B2:74:68:02:61:AA:A7:15:01:10:B0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F75DE91B388B726B0EE8F6508
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25819137-fe2a-321b-85ea-738f41157d23.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:75:de:91:b3:88:b7:26:b0:ee:8f:65:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=3727cadb-ae9b-4def-b700-dbb9618277a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:be:60:5c:20:00:d5:26:17:db:a7:58:25:
20:ae:8c:25:83:e1:73:f1:a7:3c:95:e2:c9:33:69:
22:b3:4a:6a:46:9d:a8:ec:ab:50:dd:6c:9f:8e:3d:
87:2c:22:a2:32:53:a2:a9:57:70:74:f0:fa:a6:d0:
57:b3:18:36:62:5e:02:96:1b:5f:c1:7a:7b:30:f4:
43:59:40:cd:77:b1:f4:65:35:c9:3b:de:65:de:91:
b9:c8:eb:ff:d0:b4:1d:2c:27:31:f7:5e:f5:cd:2a:
ae:31:fe:ce:0f:ed:c6:dd:c4:98:77:01:14:1f:71:
9f:59:11:22:8c:84:83:cd:1a:2e:08:9e:a6:1f:c7:
b9:0d:0e:fd:fc:ff:28:eb:c9:52:be:6c:81:b0:28:
07:ea:6b:fd:5e:40:bd:dc:d1:60:e9:46:dd:27:c2:
5d:d3:76:8e:7c:77:e6:c6:bd:b2:01:c8:ce:a7:ed:
54:b6:7b:78:f3:9b:f2:11:34:8e:56:20:c2:f2:0c:
97:74:c8:fa:d1:cb:9c:96:b1:d4:57:cf:91:5b:80:
b3:2c:5d:f7:ec:83:28:4e:6a:d9:62:c5:e6:5d:c3:
16:00:16:0c:05:a4:3a:bc:1b:bf:bc:b7:73:9b:58:
60:f9:9c:56:6a:e4:ad:35:41:39:81:54:2c:b6:ef:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:4B:F9:3E:B2:A2:81:FC:B2:74:68:02:61:AA:A7:15:01:10:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25819137-fe2a-321b-85ea-738f41157d23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:e5:90:97:47:78:53:4e:ba:b3:e9:6c:ec:8d:db:ad:c8:77:
0f:e3:bd:04:fb:79:af:24:09:88:1e:1f:03:8c:4a:43:d7:6a:
51:39:94:25:2b:03:bd:c0:4b:fc:1b:ae:48:74:b3:f9:17:fd:
60:5f:d1:0d:0e:02:58:45:e6:56:18:07:26:a7:12:63:c9:fe:
cb:82:8e:ed:8d:93:08:2f:3f:da:68:1b:ae:98:30:a1:99:6f:
1d:14:54:7b:0e:7f:14:33:64:58:34:59:87:38:cd:50:9f:5f:
d9:7e:1b:99:d8:1a:b8:bf:09:4b:82:a9:2d:ae:f6:08:06:9b:
78:96:14:d3:3f:6f:8a:74:b9:a5:43:3d:f2:38:5e:14:e5:a4:
36:ea:ae:b3:2c:72:2c:de:8b:00:53:64:e0:7d:52:a0:83:05:
b3:ee:54:dc:54:0d:3a:9c:e7:f0:43:4f:a1:90:55:6c:1c:69:
70:1a:20:02:69:df:a5:e3:62:b9:a5:11:b5:e5:0d:04:bf:a4:
cf:c5:f0:c9:58:9e:12:95:69:28:e0:ca:95:9e:75:be:a2:10:
84:01:a4:ea:df:db:be:10:39:5b:72:33:37:53:e4:76:5a:87:
d7:6e:de:e7:1e:72:b0:74:84:ec:4a:60:17:61:c2:ae:5c:40:
7e:bc:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:48 2025 by rpki-client