Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c7e6af7-5af1-313c-8305-61bfa69b7eff.roa
File: 3c7e6af7-5af1-313c-8305-61bfa69b7eff.roa (raw, json)
Hash identifier: Ac9WFgfRAK/Pa8AboLwpfkwImCcgkq/Y/B3Uyoj7gZk=
Subject key identifier: E1:87:95:0B:8E:DF:24:D8:A7:98:FF:F6:D3:CE:28:EE:67:5B:C2:C3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584043049A4BB27A29ED0C151240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c7e6af7-5af1-313c-8305-61bfa69b7eff.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:04:9a:4b:b2:7a:29:ed:0c:15:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=7cdb0081-6336-436a-acf0-991049738260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:81:2c:d3:e3:c7:42:4d:ec:b0:63:6b:a2:
01:ff:81:60:56:b4:12:08:42:90:b9:2c:bb:d3:3c:
9b:e4:90:1e:a3:5d:5f:20:51:42:55:c5:60:0c:80:
d4:bb:c2:37:9a:50:f9:18:8b:ca:bc:ab:11:e0:76:
37:c3:90:c5:d8:81:ee:38:f3:64:70:d8:1e:e9:be:
7d:47:52:1d:f0:f5:d0:08:7e:3f:3c:c2:4f:8b:13:
c6:a3:2b:d5:74:fd:78:c3:f0:c1:56:4b:49:cc:31:
74:e9:e7:73:75:5d:70:6c:85:f3:0b:a1:a6:d0:a3:
d8:84:e0:bd:70:e5:41:90:26:f6:f7:98:30:5b:b9:
51:b6:cb:ff:41:56:c7:2c:42:e5:ca:24:31:cb:09:
dc:b4:1a:7a:60:02:66:f1:1f:d2:8f:f0:92:13:e3:
11:fe:45:29:3e:14:e9:58:fd:7b:0d:ea:26:b3:61:
73:8c:e0:72:37:b4:2e:e0:bd:ae:be:db:c8:68:50:
1c:ba:d1:2b:5d:d6:dd:b4:72:53:ed:08:68:80:d1:
9a:c4:9d:a2:5d:6b:1f:6f:30:c0:1f:f6:67:a9:d2:
41:05:e3:55:d3:86:2d:39:96:4d:d3:e7:94:e1:8e:
5a:47:f4:28:c5:3a:24:e7:ce:8b:37:6d:b9:62:bc:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:87:95:0B:8E:DF:24:D8:A7:98:FF:F6:D3:CE:28:EE:67:5B:C2:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c7e6af7-5af1-313c-8305-61bfa69b7eff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:37:4c:cb:6f:03:24:ab:90:1c:0c:f2:76:cf:c7:90:9c:11:
07:10:01:51:77:31:9c:ad:6c:2a:2a:9e:53:7e:9f:b5:47:b4:
77:68:a6:49:81:de:a8:6a:8b:f0:73:34:ea:e9:d2:c7:25:3b:
d0:c1:51:9a:eb:f3:7f:fa:13:d0:56:68:cb:e3:ff:35:89:2d:
bb:22:e1:ea:d4:cd:b7:e4:d9:5b:f7:a6:d2:a2:63:e9:99:6c:
0f:67:ef:3d:00:da:3e:18:73:91:c3:26:31:0e:8d:74:8f:94:
6c:b0:27:44:a8:fb:c7:94:68:f2:20:79:f9:43:fa:58:9b:bb:
e6:0c:16:cf:1c:f5:11:32:b5:ab:a8:25:1a:d5:e5:2d:65:4f:
be:b4:67:d4:0d:b0:34:02:f0:88:a5:7a:b1:1e:66:e4:2e:c0:
d3:fb:b7:9d:a7:65:f9:7d:80:97:8d:2a:8f:07:82:e9:3a:13:
76:f5:66:e0:b3:f7:7f:4f:2f:15:a3:bc:ca:76:1e:25:5e:d1:
17:f6:35:70:77:86:9f:76:e6:1d:e3:17:95:e1:cc:35:bd:2b:
b5:04:ef:29:15:1d:1c:8f:87:64:e0:af:c4:86:6d:80:17:00:
85:9a:b8:e6:5f:cf:75:6a:56:3f:0c:e1:c4:46:f0:2a:fa:4b:
46:b0:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:10 2025 by rpki-client