Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3635987d-fd58-321c-b79d-93f5c843b9a6.roa
File: 3635987d-fd58-321c-b79d-93f5c843b9a6.roa (raw, json)
Hash identifier: zk181pi23u56ArQfdR+FbwBr1ZV9LuqVplMBg1AqVm4=
Subject key identifier: FB:55:62:2B:2F:8E:96:68:2D:C3:B9:66:76:3B:8D:2F:4E:D7:6C:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3433298FB072077D92B9F000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3635987d-fd58-321c-b79d-93f5c843b9a6.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:33:29:8f:b0:72:07:7d:92:b9:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=7c3c138b-b125-4343-97d1-05cb48be685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:a0:42:a7:56:69:8c:22:1d:00:8a:be:70:
82:e7:83:20:84:1c:98:92:ed:56:76:40:b2:0b:a2:
c2:bc:7e:66:7f:8c:b9:ff:f0:06:f6:aa:e8:c5:aa:
aa:a8:cb:21:34:21:95:62:c8:e0:f4:a1:d3:8b:9d:
28:5f:62:4d:e7:00:dd:0f:f8:31:aa:32:e4:b6:1a:
69:76:1d:7f:da:ab:84:51:09:92:2e:46:f2:f1:fe:
21:9c:b0:39:0e:83:3c:cc:96:cf:77:c9:35:e6:cf:
93:65:f4:df:ee:bc:78:29:0e:38:e0:47:5f:fe:0a:
5f:b9:94:2f:9a:7c:a0:8d:61:0c:f0:c4:83:d6:49:
bd:fb:1c:52:fe:1a:69:ed:89:fd:fc:ea:82:4d:b0:
5f:d1:96:7c:92:d4:b3:e8:64:0b:70:89:1a:9c:ab:
fc:05:5e:0a:d4:c9:71:a1:02:e9:5f:36:f1:5c:39:
0f:78:dd:84:1c:46:77:9d:52:45:54:3a:0b:28:ff:
48:ae:f3:5d:b5:70:2d:00:8a:52:4d:cc:ea:ed:10:
d2:0c:13:4e:5d:22:55:39:60:6b:ee:fe:22:37:b9:
ce:70:14:e3:b1:05:34:dc:23:37:15:a1:05:a3:b7:
20:a2:df:70:7b:73:29:9b:79:f3:ba:70:26:d7:2e:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:62:2B:2F:8E:96:68:2D:C3:B9:66:76:3B:8D:2F:4E:D7:6C:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3635987d-fd58-321c-b79d-93f5c843b9a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:4c:cb:36:ca:0d:c7:a4:ba:dd:06:d0:19:cb:22:a6:b1:44:
a6:fd:68:62:c4:a7:f6:e6:c2:70:f2:6f:90:5f:2b:dd:a3:90:
54:c9:e2:a2:6e:b6:fe:dd:cf:97:b4:db:1f:06:51:b8:36:d7:
1f:4b:80:40:eb:80:0b:35:e8:96:95:28:f4:98:85:79:8e:ce:
55:2a:d4:90:c2:ac:5a:9a:4d:5b:3b:58:2f:34:8e:68:8b:4f:
b1:17:ba:77:c4:90:3e:be:ef:38:df:f3:32:c2:ea:20:54:50:
c2:72:e7:f5:aa:32:5f:e9:97:22:e4:08:46:ac:ee:fd:72:83:
c7:e7:95:31:29:80:66:c5:cf:c8:91:29:70:be:dc:68:82:ff:
c6:76:ef:4e:f3:2e:7e:36:1d:28:bf:cc:8f:f5:ea:9f:a3:d2:
08:f2:38:cb:e4:e3:67:59:3a:e2:46:a6:e9:95:4c:20:8d:1e:
a8:0c:48:8c:3d:0a:29:0c:70:df:0c:e5:c5:1c:a7:93:96:62:
7e:28:e5:f8:a4:11:90:d6:41:8d:17:ed:b1:76:a8:8f:6a:5b:
5f:ef:ec:09:a0:9d:0c:47:41:8b:33:b2:86:23:8f:02:3a:9e:
6f:e5:ec:4a:71:30:ff:f2:f4:f4:8a:f9:91:01:e3:16:2e:8d:
1e:4e:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:53:22 2025 by rpki-client