Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2921620a-28b7-3b5e-9a25-40d7059420d4.roa
File: 2921620a-28b7-3b5e-9a25-40d7059420d4.roa (raw, json)
Hash identifier: dlCi1sIGE9OInYprygHJiiT82i2l9p4dQ/VutBrL2Ts=
Subject key identifier: 24:29:0B:DD:B8:FA:D7:97:2A:D5:BB:5E:E3:7D:12:A2:3B:7F:88:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B880FAD12D253162EA6C2C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2921620a-28b7-3b5e-9a25-40d7059420d4.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:80:fa:d1:2d:25:31:62:ea:6c:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=dfcac3b9-d54c-4567-86d9-60973dbc1e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:af:29:90:6b:b3:a2:be:d2:38:79:d1:68:
98:e3:c5:ca:08:bf:f6:57:9c:dc:83:40:bc:cd:ae:
ca:c2:b2:14:da:b4:94:ca:4b:9e:a8:b6:79:bc:b8:
25:b6:a0:03:60:01:d7:1a:94:d3:44:15:ac:18:e9:
c4:4d:e1:2d:7d:e1:a3:c5:8b:dc:1e:1c:43:ab:8d:
53:02:a0:fb:9b:05:a7:24:77:a9:9d:e4:fa:20:e5:
5a:93:aa:c0:27:f9:dc:ce:ed:82:f4:ee:d9:4f:ae:
a4:6e:b3:aa:cf:19:78:88:7e:5d:5d:4b:23:cd:05:
16:b1:dc:ce:34:72:35:84:b8:ff:37:d4:0b:33:46:
e8:ca:fb:c8:5f:df:eb:89:63:2e:74:f5:6b:1f:72:
fc:8d:db:be:4d:cb:6a:38:83:c9:e3:a1:dc:05:a0:
35:af:97:36:aa:b5:88:3e:57:e3:ac:a3:b4:83:99:
23:31:64:b6:51:ef:74:65:bf:67:93:5c:51:b6:77:
5d:2c:c2:8a:e0:f8:6a:89:f6:03:41:e7:28:ee:60:
28:10:8b:a9:b0:29:1e:9e:fb:c1:c8:30:d1:46:7b:
18:50:40:ce:55:4e:18:e8:d7:93:f0:8e:8f:13:34:
2d:c9:85:74:4a:5e:9a:0d:75:95:27:bd:e9:4f:fc:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:0B:DD:B8:FA:D7:97:2A:D5:BB:5E:E3:7D:12:A2:3B:7F:88:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2921620a-28b7-3b5e-9a25-40d7059420d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:a5:55:11:6b:61:10:ba:24:72:b2:32:67:a3:60:2b:19:fa:
01:ec:95:6e:78:58:75:6b:b9:8d:0e:f3:c8:e2:a7:8c:77:68:
11:05:f4:76:c1:1b:20:c8:1b:ce:1f:53:24:72:d8:b0:ef:7e:
f0:ca:14:82:0c:cf:c7:00:de:ea:f1:65:65:6e:05:64:96:71:
23:49:3f:c5:fa:82:1d:fc:3c:63:36:88:4d:9f:5f:43:5d:9c:
a2:95:e8:e9:f6:6d:b2:1d:dd:96:d4:f2:d7:26:5d:1e:61:03:
4e:0d:3a:f2:62:23:66:dd:05:f4:55:70:7b:33:99:8f:2a:29:
30:59:2b:7e:52:db:e0:97:70:72:f8:43:3a:cb:3d:3f:a8:c2:
36:08:25:64:64:a0:67:d9:66:9a:c3:66:7f:20:59:14:8a:af:
9e:4a:90:6f:c1:fe:23:04:86:61:cf:da:9b:e2:18:c0:02:24:
7f:7f:9c:21:a6:a0:32:91:0a:c5:d3:5e:94:8b:3d:e4:95:8c:
c5:bc:33:9a:d8:14:c6:b3:8f:7d:b3:ad:b6:5d:45:28:ee:09:
4a:a6:37:fd:7d:33:2b:5b:4b:68:e1:51:44:32:84:77:45:de:
0d:03:05:9c:2c:be:22:8f:87:68:65:34:bb:ed:79:1a:72:9f:
29:a4:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:28 2025 by rpki-client