Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27377311-4ad2-31e3-b23a-b9b324ac3069.roa
File: 27377311-4ad2-31e3-b23a-b9b324ac3069.roa (raw, json)
Hash identifier: Gj+XappKeaOxp7gnBqSusEDk/UC3qEgfFS2bf/h4rso=
Subject key identifier: 64:8D:BF:72:13:66:86:C2:B7:92:CD:71:B0:18:48:00:5F:3B:FD:C5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCBC9BEF0D914A880C97BA228
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27377311-4ad2-31e3-b23a-b9b324ac3069.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:c9:be:f0:d9:14:a8:80:c9:7b:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=6773cc7e-5144-46a1-a520-b0cadd9e5a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:d7:5f:b5:4b:c8:a7:a9:0b:af:cf:4c:65:
6a:86:e1:69:e6:7b:81:6c:0e:78:ea:e1:7c:73:99:
27:85:12:b9:f0:68:f4:ce:f4:e4:ed:06:d3:fc:ac:
cb:ff:63:f7:31:d2:ec:88:c5:85:68:ac:03:d5:f0:
1e:03:6a:80:ea:5f:e8:2d:a8:15:3c:4c:d2:8b:db:
35:fc:b8:3a:35:b3:4b:04:86:70:b6:16:bd:50:9c:
d1:e8:c7:0e:e2:40:72:c0:22:db:0a:4f:5e:19:f4:
76:2a:8b:e2:49:d9:24:78:82:94:a9:18:32:24:84:
52:41:f0:08:f0:36:cb:e2:9c:f3:57:9f:63:cc:79:
c4:79:9a:88:85:3d:fc:41:6e:63:56:9e:49:7b:47:
aa:d0:47:be:7d:1f:96:78:f9:11:ff:32:34:e3:18:
52:8c:d9:4c:1b:a4:36:f8:4b:71:c9:e3:4c:91:21:
a5:13:75:be:ea:f7:d5:7b:4f:33:c8:7f:ee:dc:b3:
aa:24:5e:2a:50:e1:0e:c6:38:85:b4:3f:72:de:c0:
d1:59:39:85:31:5a:c7:bb:84:84:91:0d:d8:2f:68:
1b:87:0c:4b:4d:63:2c:b8:dd:09:79:77:cf:23:e9:
fc:43:c4:67:29:8d:a0:f0:67:5b:1f:c7:2a:5e:f6:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:BF:72:13:66:86:C2:B7:92:CD:71:B0:18:48:00:5F:3B:FD:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27377311-4ad2-31e3-b23a-b9b324ac3069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:97:64:cf:50:25:f8:e5:be:05:52:39:88:a9:51:29:b5:46:
85:f6:db:46:e6:45:36:eb:81:10:19:d2:19:32:76:6d:b2:15:
0c:ca:35:29:0c:3e:53:29:51:03:3a:21:84:0d:5b:cd:4e:f6:
86:07:f1:cc:04:7b:df:e4:81:44:1c:b7:e4:75:bd:d9:8c:dc:
a7:a0:03:a9:29:79:b5:86:99:50:49:2a:30:0f:7e:33:2f:12:
dd:37:fc:86:1c:a6:78:ff:c6:f3:62:ad:1a:7c:5a:a8:e7:33:
32:48:ee:c5:76:57:96:71:a5:fa:78:e9:46:9a:2f:d7:bb:ca:
da:fd:90:62:3f:80:81:92:17:01:d3:dc:ad:26:54:a6:bd:bb:
2f:f7:ed:bf:8d:d1:51:b3:9d:67:84:15:3d:6e:7b:9f:f3:7c:
be:97:fe:0d:ba:78:ff:f9:ee:19:ea:2b:85:d7:a5:16:ff:fc:
fc:6a:0a:37:51:59:46:4f:e2:f4:5e:6b:38:65:61:36:0c:c2:
9d:d8:98:ac:10:70:d8:9b:b9:3a:1a:97:6e:b8:ed:a7:0d:0b:
0b:b6:cf:d0:b3:da:58:6b:26:6c:13:69:7e:a7:23:71:8c:82:
7e:0c:f0:07:b4:3b:7d:ef:2c:e3:c6:69:a2:c8:7e:86:a9:7f:
9d:d2:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:08 2025 by rpki-client