Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38dbcef3-32f0-32aa-9682-b3b12257550b.roa
File: 38dbcef3-32f0-32aa-9682-b3b12257550b.roa (raw, json)
Hash identifier: eYR0bkJOQ78fGtuBmu1M4pQOnlJN+8XW8gYxZ7fV/4A=
Subject key identifier: 2A:6B:23:41:5A:3B:32:10:98:72:2D:E8:D7:3C:7C:7D:FF:4C:FE:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC32DF70CBB15B6D2902E63C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38dbcef3-32f0-32aa-9682-b3b12257550b.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c3:2d:f7:0c:bb:15:b6:d2:90:2e:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=3743f8d8-5147-4d7a-b6aa-c66f23cc5785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:59:19:9d:68:65:28:78:64:59:80:4a:4b:
fd:e1:77:c6:dc:2f:1b:55:a7:8c:19:4e:c9:dc:7b:
45:ad:02:fe:13:5e:e6:0f:13:96:82:0e:7b:82:fb:
8c:25:cb:40:27:22:6f:99:3a:46:b3:d0:81:2a:6f:
1d:2b:4e:5e:d7:14:57:4e:a2:80:1d:a7:b1:1d:71:
88:16:2f:da:f2:f8:89:13:b6:69:c6:00:a3:a3:89:
7c:6c:05:7e:69:c3:9b:80:27:c4:55:75:42:8e:4e:
6a:36:d7:e6:13:01:e9:82:3d:d9:ab:db:e1:73:74:
b8:a1:e5:05:43:1a:4e:10:0e:5c:e7:ef:4f:eb:16:
68:49:ae:e3:a7:ee:7a:a0:c1:c8:9b:b9:21:15:50:
09:3e:50:44:48:05:32:b9:30:e0:ec:ee:f7:3e:95:
b2:46:32:b0:a2:58:a6:6f:1c:91:ac:67:6f:32:05:
f0:de:3f:d5:c8:d7:e1:e2:2d:92:58:5a:54:c3:1e:
29:82:2d:d7:46:d3:d8:ad:d1:2a:f6:75:8a:27:4d:
f1:82:27:8d:ef:04:22:b4:4b:44:46:06:44:fb:75:
c6:e9:2d:be:b6:1a:6f:2d:2c:a7:d1:85:63:a1:5a:
37:79:dd:8f:50:44:53:7a:98:51:a8:bb:3a:9e:df:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6B:23:41:5A:3B:32:10:98:72:2D:E8:D7:3C:7C:7D:FF:4C:FE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38dbcef3-32f0-32aa-9682-b3b12257550b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:42:a4:f7:b6:c5:b1:4e:b9:29:2c:6a:cb:b3:e9:5d:b3:b1:
b9:a0:59:fb:54:21:e1:7d:33:9b:e4:3b:84:cb:ac:ca:7b:ac:
07:4b:e8:cb:3b:ec:96:87:1f:57:7d:5b:b4:d8:42:63:03:3b:
cd:93:73:35:60:52:5c:69:f7:ac:0c:3e:82:d7:71:cf:f2:11:
db:be:90:57:df:47:d7:b8:98:3c:4c:21:31:e3:61:4f:0d:bf:
44:58:d4:79:35:01:c3:bf:43:86:7a:1d:73:88:ec:af:2c:05:
4a:5b:bb:f4:48:7a:49:96:d7:0d:14:59:6a:89:f2:46:63:17:
2c:b3:27:f7:ea:c9:f9:c9:64:66:d6:31:73:f7:f7:80:34:da:
27:02:b3:ee:b2:b4:eb:99:d0:f6:88:a1:f2:e2:41:7b:56:2e:
6c:31:88:3e:2c:b8:5d:d0:ed:4a:45:5d:c8:1a:16:70:35:9a:
09:72:cc:ca:58:a3:3b:44:e8:aa:f3:11:d0:b1:64:f3:99:8e:
69:35:6c:c1:4e:2d:2b:35:b8:c3:ff:1b:dc:da:bc:68:cf:da:
d4:94:c2:f5:14:39:80:33:06:21:eb:51:e4:6b:b5:64:12:d2:
78:76:5e:ae:61:04:11:51:89:bc:02:4f:ba:77:8c:e6:1d:c0:
3a:3b:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:58 2025 by rpki-client