Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d89e68-9260-3ac9-a65c-5aac6b58da7d.roa
File: 39d89e68-9260-3ac9-a65c-5aac6b58da7d.roa (raw, json)
Hash identifier: Dkmp1atw/7qy08XpOZyGVdjJrl0FGcbPGlX9+vlRZns=
Subject key identifier: B9:C8:68:94:1A:D7:5C:95:AC:B1:C5:0B:50:6E:2E:F9:64:1D:18:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC299095CA4D24FE55631CC10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d89e68-9260-3ac9-a65c-5aac6b58da7d.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c2:99:09:5c:a4:d2:4f:e5:56:31:cc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=dd81c011-e98c-41fe-a062-94692c22ca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:90:c5:33:d3:58:0f:5d:da:64:0b:5f:ca:
1f:16:94:1c:be:85:9f:3c:c7:6b:9e:d8:93:b0:77:
13:ce:2e:2a:5a:f3:56:e4:78:cd:fd:f4:46:d0:90:
97:48:11:b2:f4:7e:bb:50:60:f2:fe:4b:d8:89:26:
54:b2:a1:64:81:f2:b2:d7:fd:4d:05:f1:e8:29:30:
f9:d8:48:77:73:38:7e:b7:bd:d0:df:a8:08:4a:26:
a6:7a:39:ae:b9:6d:93:83:28:fe:0d:8d:93:1d:71:
89:81:55:d0:6d:4f:9a:fc:bd:03:55:ab:cd:a3:a8:
08:ae:44:e5:e9:ce:da:ab:b1:10:6f:5c:cb:18:a1:
dd:0a:75:41:f3:a5:b4:22:4a:1f:fc:d3:19:84:2d:
5d:36:5a:1b:0f:44:50:bc:23:82:26:ed:15:a0:8a:
6f:87:bd:3c:78:5a:d6:34:f0:df:2d:0b:30:4b:c1:
8d:49:a6:91:4e:33:b2:97:4a:98:f5:8d:c7:bc:85:
30:82:c4:f1:91:d4:73:9d:ec:0d:cf:74:58:3f:db:
73:66:96:59:06:54:3e:ad:51:af:c8:84:7f:23:cb:
2f:d9:ba:0f:ba:41:a8:05:b1:65:60:b6:5b:29:f0:
fc:cc:4a:99:5c:34:76:84:8f:aa:cd:0c:37:ef:8f:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C8:68:94:1A:D7:5C:95:AC:B1:C5:0B:50:6E:2E:F9:64:1D:18:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39d89e68-9260-3ac9-a65c-5aac6b58da7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:0e:6c:98:05:08:c0:fc:85:e1:d4:44:6a:cb:04:53:7c:0e:
33:ed:37:7d:b4:d5:6a:65:77:c2:d0:e7:62:23:6a:b5:1f:e7:
b6:6b:d1:c7:8c:de:3f:01:f2:f9:f5:57:bd:ea:d7:fb:b9:44:
c3:a3:bf:1c:9e:18:5a:9e:fc:3b:d8:55:a5:4f:86:50:b5:fe:
58:46:3a:23:92:21:78:36:cd:81:21:2a:99:f9:a0:4a:98:cd:
93:88:0b:3e:2d:55:fb:1b:d4:0a:25:bb:b4:a5:7a:5b:7a:24:
fb:d7:e1:a6:2a:da:91:f6:0e:c2:57:fd:ae:41:ee:1e:3a:5c:
6d:d6:b8:9a:90:52:eb:64:08:c4:9e:54:7c:74:3b:98:4f:55:
04:4d:27:14:3a:36:02:ad:3a:d7:59:3b:3f:aa:ae:f1:42:04:
8e:c5:00:9f:94:c1:2b:31:e0:62:ad:4d:f1:37:9a:6f:91:94:
71:21:6d:69:e4:ef:7c:09:a7:03:1c:54:28:1c:84:0f:d5:7a:
40:6a:79:33:2d:0e:73:6e:79:7a:03:d1:c6:3b:16:6a:f5:7c:
7c:0f:19:7e:10:8c:53:99:a1:e7:cf:a3:ca:09:d9:a4:d0:64:
a6:fe:b1:0a:9d:18:ce:52:fc:17:5a:27:1d:54:c3:c3:90:6d:
87:ed:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:09 2025 by rpki-client