Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/355eaa72-cd1a-3a44-b00a-cd1ad5e1429b.roa
File: 355eaa72-cd1a-3a44-b00a-cd1ad5e1429b.roa (raw, json)
Hash identifier: ln+sJ4cY3kpR37D2Xjf2QG+HHgfs73v3gNzN/jONRwA=
Subject key identifier: 40:DF:6D:36:AC:49:65:D6:4D:47:FD:CA:1F:09:8A:44:55:30:C5:11
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E46053A9EA6F03C7F288ABA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/355eaa72-cd1a-3a44-b00a-cd1ad5e1429b.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:05:3a:9e:a6:f0:3c:7f:28:8a:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=635fc2f8-bdd1-46e6-83a7-3391411c9570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:c4:63:d3:24:bd:77:a7:1c:af:35:f4:36:
46:41:e4:d1:73:58:ce:c8:34:f4:b9:96:29:40:6f:
2e:74:c9:ed:a1:a0:14:66:77:c1:95:64:b2:7e:d3:
c2:b4:84:9f:f5:1d:c1:c1:40:62:b2:60:d9:6f:70:
06:2b:37:05:0d:74:85:e9:00:0c:a4:62:01:85:ac:
cc:bb:5d:3f:6d:04:02:ba:2b:c7:60:11:31:9f:de:
29:70:a3:9c:73:ca:20:34:4f:5d:38:3d:15:e6:a9:
64:84:03:0a:bb:f7:56:0a:40:a8:74:86:dd:86:b4:
10:c9:ba:d6:f1:8d:97:47:99:3c:db:56:a6:fc:92:
a9:4f:9e:33:b7:5a:0b:6d:29:4f:c6:98:cb:57:3e:
ca:7c:c0:48:f8:97:78:64:e0:0d:52:02:67:ba:7d:
c1:56:3a:49:1c:69:a5:0c:09:b3:67:a3:3d:c3:59:
20:da:3d:d0:4d:3d:a3:57:13:43:f8:f8:12:85:48:
3a:60:82:95:93:d0:59:b6:63:c7:07:85:a3:f0:aa:
a5:b8:e2:c8:c6:6e:bf:af:77:b8:38:58:41:cd:b8:
05:e7:1e:f3:7f:21:0c:17:d9:9b:24:c0:49:84:6c:
4e:31:52:ce:4b:fb:ef:a2:6e:86:ac:d0:66:b9:b6:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:6D:36:AC:49:65:D6:4D:47:FD:CA:1F:09:8A:44:55:30:C5:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/355eaa72-cd1a-3a44-b00a-cd1ad5e1429b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c1:fe:d5:ca:bf:18:8e:8f:e9:2e:7f:cf:7b:15:b9:44:cd:
38:26:c8:dc:a1:3c:b5:07:05:17:84:35:86:f6:4e:e9:8f:ea:
18:75:8c:24:b5:2d:e5:e9:2a:19:e0:16:e9:d7:39:d8:8b:ab:
9e:31:20:0c:37:1b:1d:99:df:3e:06:49:41:c5:77:e0:fd:7d:
78:ab:5f:67:13:85:87:e3:35:0a:b2:a8:46:dc:d0:aa:99:1b:
35:a9:ca:80:e2:14:c4:ae:f6:15:c0:73:82:03:ba:95:45:f9:
be:a2:64:f1:09:91:e3:56:06:90:c7:76:68:0c:46:02:e7:95:
50:1d:46:13:87:2a:7a:1c:d0:c9:fb:c6:90:50:03:d7:b1:e8:
99:d6:6d:76:ef:79:9f:56:44:69:a2:04:df:56:d1:ec:e3:37:
98:11:96:6b:96:df:d6:2c:16:d1:cf:4e:e2:df:7d:ca:53:fa:
07:c6:2f:51:c9:4f:40:e8:07:96:1a:90:07:57:4f:ac:c5:20:
58:c1:f0:6c:1e:ec:8b:b7:c8:9c:db:cd:cc:f1:a4:5b:60:f8:
33:60:ab:13:76:be:72:e3:30:2c:29:42:67:01:19:81:9b:2f:
49:42:04:a7:ec:c2:2e:58:b0:6d:12:eb:af:61:af:e3:97:72:
1c:23:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:11 2025 by rpki-client