Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35b37d8a-1067-3249-ac6b-df568785fa1c.roa
File: 35b37d8a-1067-3249-ac6b-df568785fa1c.roa (raw, json)
Hash identifier: yagUOKyptbAVx8U9ku6BDegBCsgyVxzclt7Y9oDzHN4=
Subject key identifier: 39:DE:ED:35:C5:FE:F0:69:5E:40:F2:86:53:B0:BF:42:5E:26:A0:24
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF277275CF7F6B1248A14C800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35b37d8a-1067-3249-ac6b-df568785fa1c.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:77:27:5c:f7:f6:b1:24:8a:14:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=df23e376-a9fc-4a88-868a-5ee413cbe949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:89:09:24:3d:6e:03:82:79:43:f3:7a:2b:
bf:c7:6b:02:d8:da:51:7f:db:29:1d:64:01:37:d1:
41:fc:af:ca:c9:43:5f:74:b3:b9:27:92:7d:4d:5a:
c4:c9:a0:a0:ac:82:bf:a6:6f:c2:c5:ac:48:e0:4d:
1a:40:aa:1e:bd:4c:56:8b:72:15:22:93:ea:ca:8a:
9f:f2:ce:0e:dc:38:90:ba:dd:80:42:70:98:b3:60:
b0:d7:ff:00:0e:5b:26:20:71:b9:4d:08:55:da:5d:
3e:6b:c0:d7:f8:a8:35:f1:f9:9e:5c:61:b0:e9:5f:
66:67:05:2e:0d:cd:72:e3:6b:e2:16:bc:f1:ec:00:
9e:d6:e5:fd:bd:b4:31:2f:c7:c6:4a:63:16:83:43:
b5:34:3e:54:3c:bf:2c:27:34:f8:62:6c:d1:bd:dc:
95:03:17:fe:85:ad:a7:48:d3:9d:b7:cc:20:9e:ab:
03:ca:79:d1:cd:0a:b0:54:67:81:60:da:e3:f4:2d:
3e:19:71:83:11:d3:c2:20:21:6a:bc:90:59:f4:69:
33:78:b9:52:6d:7a:0b:d6:bc:7f:34:e5:67:ef:4c:
78:ef:31:ad:d4:7f:2d:be:85:72:e6:b9:67:f3:01:
41:07:ed:7e:74:fa:de:fd:b8:a2:1a:5c:a7:87:7c:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:ED:35:C5:FE:F0:69:5E:40:F2:86:53:B0:BF:42:5E:26:A0:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35b37d8a-1067-3249-ac6b-df568785fa1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b3:86:22:d5:61:d4:6b:7d:ff:ea:ab:6a:0c:2c:85:a7:61:
4e:d9:c5:1c:ae:4f:09:e3:90:67:8c:fc:a5:76:a3:34:af:1e:
2a:c9:d6:b3:ad:a0:be:26:45:47:40:67:2e:8d:25:2e:2e:c0:
cb:4b:9d:5d:5d:a2:5b:ba:ec:ce:5b:9c:5c:bf:ab:4a:29:77:
cb:ce:84:9d:6b:a3:62:6f:d4:18:83:d4:91:83:dc:0e:d6:22:
2e:c9:63:2e:7b:32:2c:5a:02:70:33:7b:c5:a1:8c:63:35:49:
e5:44:b3:b3:7d:d7:5c:01:c2:d5:d2:9e:38:9c:33:f0:40:d2:
31:6b:4e:15:48:c7:33:51:1f:60:9b:6d:a0:21:c1:fe:ae:50:
4f:df:7b:3f:6e:88:b4:53:14:c4:b5:3a:7c:3a:aa:d3:3e:66:
29:4f:9e:d7:15:4c:0a:70:f8:8d:9b:44:30:cc:bc:e9:f1:48:
d5:f6:65:30:d7:c1:af:b6:9f:cb:71:9e:0e:c2:98:96:41:44:
bb:5b:84:79:7e:42:d7:67:6e:e3:a7:a0:4c:90:b8:ae:8d:b8:
62:26:70:f0:cf:f9:b7:71:41:3f:22:bf:a7:4f:5c:b0:60:2f:
85:0c:ea:75:c6:95:0b:3b:ae:bf:0f:65:71:d6:4e:4b:eb:33:
64:e6:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:17 2025 by rpki-client