Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ffb5470-d612-30c0-90bb-13c27047392e.roa
File: 2ffb5470-d612-30c0-90bb-13c27047392e.roa (raw, json)
Hash identifier: H5dXB+Z6yNh2qQApxzDATm+u6dyAPyFdEVHi9J6nivQ=
Subject key identifier: 26:AF:80:16:AB:3F:47:60:7C:DC:DD:F1:98:83:51:99:3F:36:83:FF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584086390A693659D0FC2CEEE500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ffb5470-d612-30c0-90bb-13c27047392e.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:39:0a:69:36:59:d0:fc:2c:ee:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=89802882-afac-4f24-b757-1f8c999c37de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:01:0f:d5:73:b1:02:0b:a8:a6:ba:67:79:
e9:e8:53:21:25:95:0b:d1:90:5e:48:9c:a1:31:66:
7f:87:cf:5f:fe:30:90:9a:e1:f0:79:b4:cd:b3:0e:
cc:82:a8:02:b7:4c:5a:1e:49:d6:2c:8e:29:51:39:
74:ef:c6:a2:2a:b4:86:11:7f:75:e9:db:75:68:06:
90:3e:1f:50:6f:87:6e:ac:b3:ff:2b:b2:24:35:47:
c7:6b:10:6e:4c:e5:24:6b:fd:0a:5a:d6:c2:64:7c:
42:29:5a:25:cd:02:94:b5:75:40:d2:37:b1:39:85:
e1:b3:dc:64:1f:7f:1c:37:a7:45:f7:ec:dd:35:cd:
69:56:c7:fb:72:e9:35:60:9d:42:86:db:21:75:61:
5d:2c:be:1d:5c:b6:b2:77:a1:54:de:35:70:7e:e0:
e6:8d:45:89:a2:51:bb:dc:76:53:47:fb:30:fc:9a:
56:e7:1a:6a:7b:fa:9e:d3:6c:b1:0d:da:f8:49:81:
49:49:df:b7:50:29:09:01:0c:15:26:e1:af:9c:db:
fe:75:25:96:90:dc:c9:4c:b3:c6:31:8d:1e:27:8f:
66:08:f7:80:52:f5:53:0e:0c:80:1c:54:3d:60:47:
b9:61:ab:c9:c2:02:bf:d8:df:1f:c8:2f:b1:d2:d9:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:80:16:AB:3F:47:60:7C:DC:DD:F1:98:83:51:99:3F:36:83:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ffb5470-d612-30c0-90bb-13c27047392e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d7:97:75:16:03:d5:ad:70:bf:95:f8:d5:2d:e1:b9:d8:14:
f4:09:c1:3c:a5:e1:46:19:e8:8b:8b:5a:8d:28:90:d6:da:0a:
25:37:c5:57:03:a0:68:9f:52:01:43:f7:59:f0:b9:ef:a8:d2:
81:b9:75:c5:be:c0:fc:a1:b7:af:fd:b5:23:a0:01:1a:0b:c1:
82:3d:c8:28:5f:d0:ae:dd:fe:cd:f1:29:20:00:fa:c7:01:76:
3d:c6:bc:fd:38:33:f2:af:d4:49:6b:0b:57:32:9c:5e:f7:84:
e5:97:68:49:d4:ac:f0:6a:69:1b:e9:b8:c2:af:71:82:85:f9:
3a:71:35:3a:fc:e8:d2:5e:75:cf:af:ee:fc:a0:45:c5:6b:96:
05:22:cc:e1:1e:e9:d2:d7:3c:f1:95:9e:23:78:10:29:34:e2:
bc:0e:ee:d8:0b:94:b7:c5:a3:95:61:56:d2:df:08:99:7e:b8:
d4:4c:97:69:5c:bd:db:b2:ba:ee:36:e1:cb:5f:14:a5:f0:6a:
03:e3:7b:ac:e6:ea:04:9d:81:fb:c1:23:18:6f:86:fa:22:57:
60:8b:b0:c8:cb:29:be:07:f8:9f:48:c2:55:63:a8:e1:60:39:
bc:4b:8e:70:d5:87:08:03:7a:c9:e3:cc:e8:d2:db:e8:d3:df:
8b:b1:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:09 2025 by rpki-client