Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a26474-5510-317d-a689-a43f25381b4f.roa
File: 29a26474-5510-317d-a689-a43f25381b4f.roa (raw, json)
Hash identifier: 4MLzAhNUDC84neMHgK8BuxvyxMwpirW5trSrZHgeQwM=
Subject key identifier: 17:F6:AB:42:1D:CA:75:F3:7B:F9:F4:1E:C3:9E:64:22:E2:6A:33:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3433035EE12EF6B58B024340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a26474-5510-317d-a689-a43f25381b4f.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:33:03:5e:e1:2e:f6:b5:8b:02:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=40fc03d0-bc12-4d2b-a8d9-9e1a14ff9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:9e:65:14:9a:12:41:30:46:d6:e8:14:5c:
c9:13:3c:aa:84:34:16:79:64:6e:c6:20:69:49:14:
a6:43:58:15:05:53:05:61:e9:7f:0d:58:02:83:1a:
35:b1:14:83:3d:03:58:bb:c4:fd:db:68:da:39:86:
9a:39:6d:f2:c9:72:ad:75:92:c4:65:7e:3a:59:2f:
51:76:e3:bd:47:7d:74:a5:b6:cd:c3:42:54:9e:5e:
1b:bc:98:93:97:73:27:fc:b5:44:80:24:7f:fa:93:
80:08:08:ec:c1:c8:3a:5a:05:71:d0:01:ee:d9:d3:
25:18:da:1d:4f:f0:e9:b2:bc:2b:87:85:de:84:67:
38:af:85:46:bc:30:a1:a1:58:07:d3:6a:18:e3:ca:
76:e4:11:88:86:3c:5b:1c:50:fa:f7:d7:de:08:9c:
82:88:60:af:ce:d4:b6:f5:c2:2c:30:5c:8c:68:c0:
8d:d5:c6:73:d7:81:16:6e:a6:25:29:7e:80:6e:d3:
12:be:5a:b2:bb:79:82:59:cd:a1:5a:83:98:02:f3:
34:bf:7d:af:bc:42:f7:15:fa:1c:c4:7d:85:bc:68:
8f:dd:ba:57:10:be:f5:d2:ef:05:0a:a9:47:09:2e:
8c:da:d0:34:db:3b:72:61:3d:05:28:75:5c:5e:18:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:AB:42:1D:CA:75:F3:7B:F9:F4:1E:C3:9E:64:22:E2:6A:33:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a26474-5510-317d-a689-a43f25381b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:76:e2:71:7b:82:12:c3:dc:be:2c:c6:e7:29:bc:f7:e3:29:
95:af:b4:37:c3:d3:9b:54:cc:2b:0c:08:6a:0c:bf:c3:09:78:
94:9a:5b:51:3a:90:55:1b:e0:a7:f7:2d:22:ea:bb:00:93:ab:
2d:8e:6a:ce:ec:5f:54:3c:8e:2f:dd:fe:5b:ee:ba:9e:30:92:
96:a8:55:9b:02:4d:eb:18:ed:f2:74:1c:3a:fe:57:04:60:3b:
6c:65:25:26:3e:11:a5:06:ea:38:41:2f:1f:01:c6:13:9d:66:
a4:ba:17:15:f3:b0:24:cc:fb:50:e9:33:7f:45:3e:dd:c2:8e:
39:ff:a9:24:b6:5e:95:bf:3d:cd:b7:ab:de:93:f8:ab:d7:63:
4a:05:7d:e9:47:d9:b8:07:a3:05:b6:40:42:ec:78:51:d6:18:
f4:ae:a8:51:2f:9a:06:bb:1e:2a:cf:78:8e:84:0d:c3:e4:a9:
b4:26:b9:2e:01:30:69:20:9e:fa:7b:e5:74:e6:a8:33:7d:23:
e0:3a:65:9b:f5:04:7f:21:a6:46:12:f2:99:40:4e:3f:e5:d2:
92:e1:9a:f0:b6:ef:47:fb:93:9b:cc:0c:72:7b:fb:5b:26:06:
7c:ba:2b:12:88:d8:b4:60:5a:43:1b:82:73:61:a5:90:92:7b:
37:f4:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:48 2025 by rpki-client