Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b4d34db-28cf-30a3-bd71-944e1891d01e.roa
File: 2b4d34db-28cf-30a3-bd71-944e1891d01e.roa (raw, json)
Hash identifier: 00BN2BT4/umkjmCXZ2BNbteEYp/Q3anQkKxL3iHfoiM=
Subject key identifier: B6:B9:61:A4:46:F9:7B:3D:04:4E:77:3A:CA:24:69:D6:F9:AD:01:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D826CB714FA5C78964B07AF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b4d34db-28cf-30a3-bd71-944e1891d01e.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:82:6c:b7:14:fa:5c:78:96:4b:07:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=1ddba89a-9b54-40e1-9cc3-3864d5f29c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:d2:fa:b5:1a:55:76:54:e9:b8:54:0f:c3:
50:44:bc:af:26:40:ab:30:f8:ac:d9:78:dc:6f:6c:
8a:29:ef:d8:4b:a7:88:b8:98:4e:ca:d1:e0:e2:78:
2a:e7:a1:bc:13:d9:cc:db:43:86:c7:44:1a:f9:6b:
21:ff:a4:cb:a6:2f:f8:90:61:ae:1c:08:4a:86:cc:
4e:51:ba:7b:00:bd:46:71:77:6a:b6:43:04:b8:43:
a1:ac:f8:d9:91:37:db:40:f0:cf:65:bd:32:9f:11:
d9:ca:88:80:38:ce:c2:35:07:64:e6:ee:d2:59:5c:
ae:57:4b:59:43:e5:9f:ff:10:27:d6:e0:5a:7c:23:
4c:f8:68:1f:a5:74:99:59:7d:d3:8b:66:80:6c:e1:
57:3d:45:16:e3:88:5c:9c:62:17:a6:ff:cb:b9:da:
6a:7c:68:9e:1e:ab:54:cc:27:93:39:e4:20:2a:95:
d5:fa:bc:27:a1:23:1c:b7:fd:3c:db:54:cc:6d:73:
a2:24:99:79:0d:54:ec:53:fe:ab:e7:67:5c:18:55:
5d:e7:57:0d:a2:92:35:75:58:98:ab:22:7b:b6:f3:
63:72:6a:50:84:a5:f5:c9:b6:1b:49:4a:65:dc:63:
9e:29:ef:32:b1:60:b7:56:11:a5:64:83:6b:ef:16:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B9:61:A4:46:F9:7B:3D:04:4E:77:3A:CA:24:69:D6:F9:AD:01:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b4d34db-28cf-30a3-bd71-944e1891d01e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:c0:89:3e:5e:fe:c5:2e:65:02:dd:cf:9a:85:37:b2:43:75:
88:d8:bc:9e:b7:99:51:32:0a:54:bd:03:1f:fc:11:d0:2c:aa:
76:fa:01:ec:48:ce:b6:8f:87:9d:53:2b:85:8c:f9:35:bd:6b:
cd:93:2b:06:46:47:2c:37:87:3e:44:00:23:e1:04:82:27:16:
48:21:1c:fa:92:5f:2f:69:2d:a3:53:9a:1d:77:26:78:1d:51:
96:50:a4:b9:97:c2:bd:f0:d9:e1:f0:7d:5f:97:c7:1b:39:ec:
2b:6f:fd:59:8b:63:3a:61:0e:f0:8d:ee:7e:fb:44:8a:78:f3:
62:43:9a:06:0b:52:66:ba:05:8e:f5:fc:c5:f9:3e:31:b8:5f:
cc:46:e7:83:1a:b8:25:34:e3:38:b9:e4:02:42:c0:0c:76:fb:
85:47:cc:ac:9f:93:af:6b:68:ad:e1:d2:9b:da:6b:0c:a5:8c:
64:36:2f:00:e9:64:1c:aa:bc:1f:ae:f6:4b:08:43:52:de:da:
9b:3d:43:bd:20:00:26:6d:0d:0f:d2:9b:bd:29:ff:59:81:19:
c5:dd:b0:a2:f1:10:4e:67:05:c0:88:18:4d:ee:90:da:2b:ee:
4b:e2:79:a4:ea:e4:a0:46:be:0e:d5:75:5e:86:31:99:37:16:
eb:16:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:29 2025 by rpki-client