Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3478125e-c670-3940-b92a-47010019d841.roa
File: 3478125e-c670-3940-b92a-47010019d841.roa (raw, json)
Hash identifier: kpYldVYjdlD4sHKsktwDl04LZ3zYPYnxXv+5UqWGivQ=
Subject key identifier: 2D:C1:B4:FF:7A:35:83:FD:A7:B6:61:F6:43:4A:25:F3:3B:8D:81:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBF2B953CD3BB3C636DA90F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3478125e-c670-3940-b92a-47010019d841.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bf:2b:95:3c:d3:bb:3c:63:6d:a9:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=5b62b58b-6101-4bd3-87a9-c91502307279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:40:64:95:08:62:ba:e5:3f:31:23:c2:51:
e0:f2:89:de:ac:e8:15:b5:d3:0f:8b:4a:39:08:12:
c1:d0:c4:6b:0f:a9:be:29:1a:b4:37:9f:c5:51:59:
ab:a7:74:72:71:ef:92:8f:ba:8e:00:b8:00:32:e9:
91:85:75:d5:d2:45:32:9e:fa:47:49:69:2c:a3:b0:
22:3c:f7:03:63:0a:03:fc:a2:63:a2:89:06:c3:6a:
68:cf:6f:a5:a3:61:1a:b8:32:51:41:1d:0a:66:9c:
77:35:d1:99:a2:4b:b2:65:f2:dc:18:4e:4c:92:dd:
4b:4d:0d:40:af:e9:cb:10:5d:2d:a3:76:65:79:7f:
ae:04:f0:08:18:15:21:66:da:6b:c1:fc:d9:88:6a:
53:3b:50:6c:1e:2f:66:67:e8:b3:08:0c:a5:80:6a:
0d:8a:af:95:c9:1d:2c:70:19:32:f6:51:99:7b:4f:
14:92:4c:11:d0:65:d2:b5:ae:aa:e4:79:15:dc:ac:
5f:3a:20:ee:ff:bb:31:f7:13:d3:41:22:49:c2:b3:
48:34:e9:c3:f7:6e:d0:77:19:f3:f4:8f:9f:95:14:
96:26:95:e1:72:7f:0f:a3:10:1a:1f:14:3c:ca:cf:
ee:df:cd:a0:00:22:e2:a2:dc:3b:0c:38:fa:a5:6f:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:B4:FF:7A:35:83:FD:A7:B6:61:F6:43:4A:25:F3:3B:8D:81:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3478125e-c670-3940-b92a-47010019d841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:47:44:e8:18:f0:aa:bb:22:aa:d4:f1:2f:8d:12:b0:00:c1:
69:96:bb:ec:4c:11:3d:70:8d:75:5e:ac:58:ae:72:b7:3f:bc:
e4:6f:a7:2d:fa:d4:14:19:98:2c:e8:fb:11:83:96:cf:d8:e7:
b4:9f:2f:9a:fa:d7:c2:9f:b4:27:44:e2:26:dc:ef:fd:a1:f8:
a4:1a:9e:27:59:64:d6:16:d6:5b:54:f1:c8:43:70:ad:8a:30:
ef:6e:b6:3a:d8:b3:92:d5:ab:f0:f2:65:d1:c4:15:b5:9d:2e:
b8:6e:00:4d:f2:d9:ea:05:4e:e4:d0:c2:f2:56:2d:a1:02:82:
6e:28:f7:c9:20:ef:8a:cc:40:f3:9f:77:f7:6c:a6:3e:f9:d3:
db:16:b1:ad:c9:eb:e8:b4:bb:6d:e6:9c:b7:c0:9e:e4:93:1e:
6a:6c:de:93:66:ec:4a:b9:d4:c5:e3:86:ca:7c:dd:0d:bf:19:
8f:41:d5:72:be:31:c3:72:d1:1e:3c:7b:49:2c:6c:f0:19:c3:
82:0e:6b:7b:28:9f:b2:87:7f:a7:c4:2d:78:e6:07:11:fb:d7:
23:c7:08:42:b7:63:54:93:35:e7:b8:bc:f7:e3:ed:c3:42:56:
de:86:7b:99:71:0d:bb:6b:7a:48:a3:dc:4f:28:7a:62:8f:00:
e3:92:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:49 2025 by rpki-client