Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2705426d-d1b7-3928-8320-21e55f01f330.roa
File: 2705426d-d1b7-3928-8320-21e55f01f330.roa (raw, json)
Hash identifier: 3i/+zNKio/7h/S9BwaZxEcYChxVZ+ruDVV5xyCyKz78=
Subject key identifier: 66:B5:C5:71:A7:30:F4:7E:B2:9E:6C:B1:0E:D3:8F:B1:26:F2:A1:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584010C45FB9EDB4EA1E130C7100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2705426d-d1b7-3928-8320-21e55f01f330.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:c4:5f:b9:ed:b4:ea:1e:13:0c:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=c4c59e20-6538-4518-8f61-7f8eaac52f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:ff:89:b9:23:19:0d:0c:55:c5:28:e3:f8:
2a:3f:3c:b9:75:94:c7:d0:7c:dd:79:ef:57:9b:3d:
a0:26:0b:17:5d:4f:02:43:a0:d7:1a:33:88:5f:16:
9a:fa:a8:43:34:07:33:57:35:bb:ae:e3:75:c7:55:
a8:28:79:71:f9:e0:66:ce:9e:6e:d7:c7:c2:89:ff:
53:f4:a1:57:12:21:4e:ec:76:88:cd:97:d4:25:73:
bf:43:aa:85:a8:aa:32:12:7d:cd:77:5d:2b:6b:d0:
97:09:34:8a:3a:57:1a:30:a7:7c:a1:4d:a7:9e:e5:
11:16:5b:be:79:4b:5b:59:93:6a:b9:f9:5b:03:76:
e6:07:81:8f:1b:3f:6a:4c:e1:eb:f4:f0:fb:22:a6:
cd:74:dd:ec:59:74:b1:cc:d4:c7:24:2d:ac:cb:52:
36:45:06:67:c2:cc:f2:28:6a:85:b0:89:11:eb:03:
67:44:46:8c:e8:6c:4f:35:60:8b:df:b5:11:d2:bf:
a7:3b:e8:6e:4b:d8:7c:3e:4b:30:f7:2a:c3:31:40:
5e:fe:08:ef:bc:f4:cd:c0:ab:91:50:31:c2:fb:b3:
ac:61:7c:fd:1e:ca:f8:1d:32:e0:eb:51:54:b8:b0:
da:ad:98:79:14:2c:e5:fc:70:e2:ac:ca:6a:69:b3:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:C5:71:A7:30:F4:7E:B2:9E:6C:B1:0E:D3:8F:B1:26:F2:A1:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2705426d-d1b7-3928-8320-21e55f01f330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c6:dc:60:64:cc:cf:21:d1:7c:6d:34:34:fb:4e:d9:7f:69:
52:6d:73:1d:5c:5f:e0:1e:e8:de:9c:f1:16:c7:73:40:ee:d9:
9a:02:0c:ed:4c:71:48:dc:35:56:f2:06:b7:f5:37:58:22:27:
a2:e9:b0:9b:89:5c:b8:36:c4:40:47:d6:9e:9c:61:83:e8:b4:
9e:69:d8:12:19:fa:ab:ec:e0:7b:92:a8:54:48:f2:64:57:5b:
66:70:e2:f2:37:50:4c:3b:a8:46:e8:d9:ae:25:ee:16:c3:d3:
f8:99:1c:61:e7:dd:01:cd:87:43:00:0e:04:c2:a8:cd:b1:fc:
0a:21:17:1c:63:34:53:9c:e6:f8:5f:57:9f:01:86:32:9c:3b:
11:7f:97:a5:86:de:d2:86:7d:04:d8:ce:96:a3:fe:9f:4c:22:
fe:aa:e1:b7:b9:20:c3:58:ff:79:b2:06:1f:17:f5:50:ae:90:
5b:9e:ec:6d:84:6d:3b:cb:c3:a6:08:3c:77:6c:ce:91:49:6a:
80:df:2b:4b:73:3b:68:aa:98:7c:28:4e:26:08:6d:a6:d0:d8:
59:81:f6:4f:47:24:a4:6d:a3:07:05:79:d2:fa:11:45:4b:b5:
9e:27:57:ba:3c:45:0c:6a:0e:8c:84:fe:11:c2:7a:c5:94:f8:
2d:8f:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:42 2025 by rpki-client