Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41e32c18-788a-3ca4-a448-5c781afcdb3b.roa
File: 41e32c18-788a-3ca4-a448-5c781afcdb3b.roa (raw, json)
Hash identifier: fNsfuFiiS1wQyZyWu4/op6/7HuaBmqCGuhH3gs9Dz9A=
Subject key identifier: 2E:EA:B2:1F:90:D9:BE:58:03:84:2B:8A:0E:E3:FF:3F:76:7A:96:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B1BB833FF17F8B938205900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41e32c18-788a-3ca4-a448-5c781afcdb3b.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:1b:b8:33:ff:17:f8:b9:38:20:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=5b4a0355-dd72-416b-9bda-707d787508d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:a3:e0:e7:03:98:30:d1:5f:41:ae:6d:62:
a5:40:b0:0f:0d:ba:7e:a6:e2:88:bb:d4:0e:a1:22:
be:35:4f:cb:9d:95:ad:fc:6e:cd:b8:68:90:00:c6:
a5:ff:96:ae:ba:fb:46:5a:60:64:4d:44:f4:ef:e7:
22:e6:4f:f5:05:14:bd:87:d1:be:15:a6:f2:95:f4:
51:0d:8b:c3:38:d1:34:47:18:4d:2f:e8:37:ec:6b:
de:a3:eb:b4:b3:f0:92:71:2d:f7:3b:86:af:87:06:
af:3e:fd:90:ce:7e:f9:3a:50:cb:11:5b:9f:96:16:
7d:7b:dd:b1:a0:88:39:78:1d:f1:70:6d:18:0e:86:
97:52:a1:b9:7c:a3:6e:96:f1:d4:6f:8c:46:93:f3:
17:e7:ee:30:bc:77:1c:ea:54:0c:59:42:7d:11:a4:
f4:4a:2b:a0:27:6f:28:c0:01:8a:db:f1:8c:7a:8b:
0c:24:df:b6:16:df:51:3a:3e:36:e8:25:37:30:98:
7c:b0:00:9c:4c:ef:00:08:08:b1:87:20:83:20:ea:
a9:09:25:59:6b:f5:89:1a:23:99:a4:8a:eb:99:b7:
a8:28:bb:dc:16:5a:3d:e6:23:4a:2b:65:f4:04:34:
34:60:b4:8c:81:ec:26:94:0e:96:ad:6a:b8:66:28:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:B2:1F:90:D9:BE:58:03:84:2B:8A:0E:E3:FF:3F:76:7A:96:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41e32c18-788a-3ca4-a448-5c781afcdb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:40:33:33:12:6e:a6:2d:65:2e:03:4b:61:6d:88:64:39:3c:
f0:18:91:27:b7:aa:79:db:40:dd:16:85:13:3f:1c:ff:62:1b:
73:f8:22:b4:2c:33:ff:ce:10:e8:0f:37:00:5e:f9:67:fc:15:
89:47:bc:1d:40:40:fc:75:f1:68:6e:11:d8:79:eb:9f:62:46:
94:a4:0e:21:86:13:de:71:c2:b5:39:31:d4:a1:76:6d:e4:cc:
8a:2a:4c:82:50:0b:23:82:45:18:8b:22:62:b0:1d:35:e4:83:
40:7f:c2:80:1a:ec:83:a5:5e:2b:4c:5e:5a:7f:95:19:97:2e:
2e:8b:5f:a2:be:c0:47:b9:50:eb:5e:bf:69:70:45:33:2e:cc:
5d:dc:92:8c:e1:46:96:1f:2c:61:d1:7e:a2:8e:87:74:6b:52:
de:f8:3a:fd:ba:19:6f:bf:26:e9:db:9e:61:83:90:c9:fe:27:
50:f4:d2:f8:e3:cb:d9:52:e9:89:d2:d9:f6:ab:5e:1a:1b:1a:
e0:21:58:9e:f6:53:6b:81:57:5b:db:ad:fd:ce:f7:0f:7d:db:
97:82:2c:d3:34:3f:92:ce:b8:7e:dd:38:e5:d0:40:26:e6:a3:
ce:9c:91:17:37:9c:f9:bb:7c:54:fd:4a:8e:9f:48:40:1d:e9:
61:26:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:19 2025 by rpki-client