Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3094143c-cc8a-3941-977b-6a25087ecc21.roa
File: 3094143c-cc8a-3941-977b-6a25087ecc21.roa (raw, json)
Hash identifier: 6/j2BTXTqhjPNwV5727Elxie5hjPONREw78efKgxhfE=
Subject key identifier: 28:AB:DF:55:F8:0C:19:77:C3:03:7C:03:D3:E1:D2:FE:B3:B7:0D:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0D06F5D38D691F6359546BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3094143c-cc8a-3941-977b-6a25087ecc21.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0d:06:f5:d3:8d:69:1f:63:59:54:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=4b16d580-cee7-44db-9997-f642a58aceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:fd:0a:94:3f:7c:78:d6:cb:00:df:31:1c:
c1:b8:42:ad:c7:47:5f:c6:da:9a:c1:56:93:8e:a8:
82:cf:17:57:f2:06:88:84:f1:10:d5:9c:29:12:f6:
16:65:f1:a3:27:2e:08:14:92:f3:e7:cf:d2:ad:33:
53:3c:3b:9b:1e:c2:fa:91:6c:51:30:02:9b:a3:ad:
2a:ef:9b:ca:ab:e4:d1:5b:cc:3d:3f:61:7b:83:3b:
22:33:28:e8:0f:55:aa:37:7c:5c:4f:86:8b:df:5e:
5b:44:37:86:5b:e0:86:b8:dc:66:50:65:8d:62:88:
69:d6:da:fa:f9:cb:37:84:5c:a0:6f:0a:bc:1d:e5:
4f:c5:f8:72:11:63:1f:39:24:54:0b:36:ee:bc:09:
5f:d1:d1:2b:d3:e0:da:7f:14:80:db:be:1b:ae:a3:
7a:db:67:6a:0f:16:d8:77:53:14:a5:bf:de:67:ee:
d2:0e:96:5a:84:3b:74:4b:58:45:a7:62:bc:31:a6:
93:ec:91:95:2f:7d:70:1e:4a:4d:66:e7:95:06:e9:
d7:d1:41:70:a8:24:8d:c6:ca:16:60:3e:68:58:11:
72:31:8a:3a:b7:10:b9:ee:df:34:05:4a:ea:ed:d9:
68:fc:95:8a:8c:ed:82:d8:3b:20:04:04:24:6a:e5:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:DF:55:F8:0C:19:77:C3:03:7C:03:D3:E1:D2:FE:B3:B7:0D:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3094143c-cc8a-3941-977b-6a25087ecc21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:50:2f:2f:40:7a:37:ba:bd:26:79:c0:2e:04:f7:e5:5d:c9:
49:66:bb:21:7f:75:f1:da:c1:79:d7:67:5f:1f:44:42:1a:58:
ad:89:5f:d7:94:ff:99:11:45:b5:e4:b8:8d:86:c9:2f:4a:cd:
c8:76:80:3c:49:15:be:33:20:41:45:dc:29:5e:17:64:02:9d:
40:b2:3c:b1:49:96:36:37:8a:98:0c:3b:7b:20:c8:1e:03:d6:
a1:88:11:55:8f:2d:14:98:f3:f8:d4:f9:6a:6d:fe:7b:90:e8:
d8:42:3b:52:a7:e9:4f:14:5b:4d:57:77:c8:9a:91:7b:a3:dc:
2b:81:ed:1d:d2:1e:5c:66:1a:f7:f2:c2:52:09:20:ee:d4:14:
3e:38:a5:4e:f0:02:32:c0:72:7f:7f:e1:a8:f6:76:ff:bc:f9:
54:15:55:ad:4a:58:1b:3c:90:7e:25:5a:06:e1:1b:21:20:48:
fc:4a:ee:df:a3:99:5e:75:ce:99:9d:a8:ae:16:ac:d2:40:ba:
31:f6:76:cc:df:95:21:f0:14:6a:d9:3b:32:61:14:40:34:33:
dc:8a:c2:ff:69:e8:5d:ab:e2:0c:4d:ff:84:07:e2:96:b2:9b:
3f:35:e9:39:aa:8a:fa:14:f5:94:8c:5f:39:36:90:8f:81:cb:
32:56:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:01 2025 by rpki-client