Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3059e1ad-2270-36bf-934c-7ee2c91b2910.roa
File: 3059e1ad-2270-36bf-934c-7ee2c91b2910.roa (raw, json)
Hash identifier: qIsoj10ChG3pxJ9Giyyh6IavDzDIQa4v9SSURK++gdo=
Subject key identifier: DF:AA:A6:20:C8:4B:9C:FB:0C:27:1B:4E:ED:C7:A4:53:7E:61:75:A2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0CE926C8159BFB3AB32D7B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3059e1ad-2270-36bf-934c-7ee2c91b2910.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:e9:26:c8:15:9b:fb:3a:b3:2d:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=25e5c811-c80a-46e0-a1e1-6836c748ded9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:19:12:e6:6b:43:e9:69:21:4d:51:5b:5c:
f4:51:d9:bd:a0:51:42:bf:9b:4e:f5:8b:96:df:c9:
6b:bd:4e:d9:6b:64:df:4e:59:be:a6:5e:2d:4e:0a:
fa:86:52:d0:5c:53:3e:3c:b0:8d:ad:71:9e:fd:64:
99:fa:85:d8:36:03:50:10:3c:ae:f5:a5:b0:b0:aa:
65:6f:08:d5:b6:82:6b:2e:15:4e:c6:8f:a0:bf:a2:
ef:57:ac:ba:f8:90:aa:4c:29:a2:13:d5:05:70:be:
84:57:37:80:e9:68:4b:fa:97:a0:5f:67:88:39:2b:
b7:76:30:7f:d7:38:6c:e9:3b:bb:4f:e2:77:b6:f6:
81:80:6c:dd:41:ea:d6:ed:98:83:e3:81:be:c0:a7:
9b:63:6a:87:fd:7c:0e:a1:23:b0:69:4e:17:29:d5:
79:5a:5a:9a:a5:f7:b2:64:96:af:f1:ac:bb:11:e1:
b2:79:ad:4f:30:5c:cf:44:f6:9a:dc:fc:2d:51:82:
bd:c4:33:97:a0:6e:f2:6c:bd:a0:06:fa:12:ee:7f:
53:e9:fb:61:dd:71:d9:22:5f:6d:b0:96:d0:bc:37:
48:c1:cd:73:4d:87:03:cb:47:8d:8c:6c:56:28:d0:
d3:f4:eb:29:f0:07:31:62:a5:1c:c7:b0:56:72:ab:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:A6:20:C8:4B:9C:FB:0C:27:1B:4E:ED:C7:A4:53:7E:61:75:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3059e1ad-2270-36bf-934c-7ee2c91b2910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:3e:91:4e:23:d1:47:93:7b:b8:b5:55:6a:bb:25:41:80:72:
f5:fb:21:cb:11:28:96:ac:4f:74:56:a2:23:1e:f1:8c:58:56:
6d:ce:5e:d1:50:30:6c:42:4a:1e:09:d9:99:c6:04:36:59:90:
93:ed:65:16:2d:42:95:70:0b:af:b9:89:ed:a7:27:26:52:d0:
fe:7a:57:d1:32:1b:6e:75:08:6c:3e:b9:ea:8d:47:1f:e8:87:
6a:2f:42:fb:24:cc:88:58:b0:9d:b3:d6:69:18:a7:76:34:62:
bb:fb:63:1f:59:61:70:4e:2e:38:cd:b7:13:f9:cd:d3:15:7f:
88:c8:75:7a:3e:6c:a4:ad:25:50:42:ca:2e:bb:39:04:0b:e8:
60:3d:03:96:90:33:c2:7a:ff:0d:1b:c9:05:b1:76:46:38:98:
ec:d2:cc:ee:c3:14:29:07:4a:03:72:bd:27:63:a1:4c:63:6e:
18:c0:f2:24:1a:80:3d:01:20:1e:8b:01:93:98:aa:fd:f2:fc:
9f:cc:ed:31:c7:16:69:fd:19:b4:7e:1f:15:73:85:81:32:44:
e6:3d:22:77:99:eb:98:b2:44:40:64:dd:e3:b9:7c:f4:e0:04:
ab:64:a2:31:7c:e2:cb:e5:d2:34:58:a4:cf:4a:5e:e4:1e:15:
72:ca:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:07 2025 by rpki-client