Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43e71159-5658-3262-afc6-fba9064dfbe7.roa
File: 43e71159-5658-3262-afc6-fba9064dfbe7.roa (raw, json)
Hash identifier: ZoGYUfAv6gPUIxEm4QM8KTv4qSe+EFjbEuLNDUh/+xY=
Subject key identifier: D9:A5:6E:21:54:0F:97:5B:EC:E8:15:5B:56:69:AF:16:04:03:28:DF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCC6D564DC5FFFE3BAD5243D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43e71159-5658-3262-afc6-fba9064dfbe7.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:6d:56:4d:c5:ff:fe:3b:ad:52:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=699d9def-925f-48e6-b952-d6130203a746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b0:fb:12:89:6b:5d:46:26:f4:6e:de:34:4c:
8a:ee:62:af:74:ac:2e:00:93:54:f9:01:93:dd:b0:
7e:78:ea:c3:ca:f7:05:57:09:bd:94:88:75:5f:17:
d5:75:27:73:42:90:4f:31:c2:13:70:c0:14:05:0e:
c8:25:cb:ce:76:bf:8c:b6:65:8e:84:fe:97:40:88:
29:7d:9e:64:81:32:b0:4d:04:df:0a:e7:51:aa:0f:
3b:b6:70:39:96:4b:d9:37:28:7d:84:cc:a9:31:a3:
7f:08:ff:12:b5:ed:60:b8:12:66:c8:0f:d4:7f:41:
45:45:be:ca:9c:04:f8:61:ec:5b:89:9f:9b:a4:23:
8d:b1:5c:d7:c1:ba:a9:27:22:03:ac:fe:42:c9:74:
40:df:c7:2c:ef:74:05:20:7e:5d:57:22:d3:28:28:
c3:51:b0:d6:c9:18:f4:3c:8b:c2:bb:3b:97:27:6a:
ba:ba:d7:d3:ab:58:50:3f:6d:97:f3:52:20:bc:5a:
62:77:3e:bb:82:38:55:f4:49:85:12:c1:8e:8f:1a:
bd:17:7b:b9:5c:59:b5:8a:81:81:b7:fe:3c:be:99:
ec:5a:ce:9a:05:ec:2e:82:e3:70:7e:ca:02:4b:85:
50:b6:50:8b:cf:18:8e:85:bd:bc:63:18:a1:81:43:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A5:6E:21:54:0F:97:5B:EC:E8:15:5B:56:69:AF:16:04:03:28:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43e71159-5658-3262-afc6-fba9064dfbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:61:74:a5:04:83:96:85:0b:ce:26:53:33:72:7b:7f:84:e6:
27:69:24:96:3c:68:59:8e:23:34:97:99:76:31:52:0b:0a:a0:
3b:64:b0:a7:68:cb:86:e1:df:6c:f7:b1:d9:3a:fb:9f:0e:a8:
fe:e1:54:b2:c8:ba:c2:e8:a2:c4:72:3b:b9:53:3f:8a:8b:7f:
3e:71:2e:e6:11:bf:0a:8e:1a:2e:b0:56:8a:99:32:34:2b:be:
22:13:49:49:54:ee:d3:b4:90:02:dc:73:84:06:dd:a2:ed:f4:
de:db:e5:90:23:9e:f8:e9:61:0e:17:ff:03:4c:b5:8b:71:58:
ba:d8:28:73:e1:2c:67:05:83:fc:15:6f:2c:65:a2:8e:11:0a:
56:80:49:8d:08:cd:09:ec:96:cf:dd:37:06:5f:69:b3:52:23:
11:c4:25:11:86:f9:97:ff:c0:e5:e4:d9:dd:3c:00:bb:30:48:
f2:56:5a:fe:f9:71:9b:4c:1e:ee:ee:67:f7:6e:fd:90:ca:2c:
c1:80:89:a3:95:e0:45:bb:1c:a2:c5:8e:a6:79:d8:7b:84:0f:
41:06:73:93:06:28:c8:e3:43:25:d6:8f:d0:46:8e:56:da:e9:
80:f3:82:0a:a6:a6:dd:8f:07:51:67:cb:1a:d5:95:54:31:c1:
ce:de:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:35 2025 by rpki-client