Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/442de4ec-cd2d-3fca-9233-51f843e0889a.roa
File: 442de4ec-cd2d-3fca-9233-51f843e0889a.roa (raw, json)
Hash identifier: YeFjY1LxrUvFLK/ZWi9eKyNZJdyHpUB0cZyj6UXK9BE=
Subject key identifier: 2B:A0:DB:6D:6D:77:8F:6A:D2:46:95:19:8C:D5:C7:0F:21:27:B0:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6D229912FD3FB348F03B7C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/442de4ec-cd2d-3fca-9233-51f843e0889a.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:22:99:12:fd:3f:b3:48:f0:3b:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=f82cb12f-260f-4b61-aa0a-cf57b71b0ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:10:6b:41:bd:23:e7:50:2c:0c:e9:90:41:
3e:e3:89:61:3f:68:34:fc:06:92:61:68:f7:75:78:
a4:5e:35:1d:ce:2a:3a:cc:97:13:a5:68:39:3e:03:
9c:fc:ac:5e:27:cf:fe:d0:40:bd:22:3b:8b:f9:de:
d6:33:d5:ea:95:29:a9:93:20:12:87:00:b7:a6:14:
96:7c:3e:c0:6a:84:28:92:13:dc:d3:78:10:28:d0:
ee:8a:36:78:30:ba:36:e3:0f:46:ea:82:c0:23:fe:
e9:e7:03:4c:3c:50:83:ef:02:6b:18:bd:8a:9c:23:
3c:78:5a:9a:a4:12:15:e6:31:3e:a2:01:e0:72:02:
99:77:99:6d:4f:52:e5:d2:48:0b:b8:1d:c5:93:f3:
a4:98:82:5e:38:17:63:7d:8d:62:f4:63:46:e3:f8:
a1:45:e0:fa:0c:bd:41:ab:d4:71:97:00:3f:d1:5e:
d7:eb:41:0e:8d:ef:fc:5f:1e:62:50:5a:79:4a:c9:
98:0d:e5:54:4d:83:9f:a7:40:02:3d:97:ab:ba:54:
f1:fe:82:43:a5:6a:5b:74:96:5a:09:0c:71:15:ff:
34:0f:f2:96:94:b9:ff:9b:7f:c1:03:88:67:d5:d3:
55:c1:06:52:1d:96:7f:2d:f1:5e:f3:90:e6:51:eb:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:DB:6D:6D:77:8F:6A:D2:46:95:19:8C:D5:C7:0F:21:27:B0:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/442de4ec-cd2d-3fca-9233-51f843e0889a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:3f:7e:3a:c5:1e:f1:55:0f:34:62:71:4d:7b:a7:95:07:aa:
ad:25:f0:ca:2e:4b:11:a7:de:15:77:aa:a6:d9:8d:58:72:4f:
b0:50:5d:79:6f:ed:a7:4e:6c:d8:b7:a5:dc:d3:55:99:78:a0:
8f:00:5e:cc:b2:59:c7:eb:8c:e7:ce:94:d4:4e:52:c8:ee:97:
33:34:ce:e4:7b:be:fa:ae:3f:d6:35:ad:4b:71:e4:c8:da:c1:
98:ca:f6:3c:55:e8:9d:dd:17:a5:7d:cb:b8:92:44:7e:59:9e:
f6:c4:4d:b0:4d:57:b8:39:67:c7:a7:fb:78:cb:8d:a7:8e:ce:
47:13:24:8a:02:79:08:92:4d:54:7e:48:db:76:fb:e6:52:76:
6e:e3:a7:d0:24:c4:5b:35:fd:d3:89:b3:38:80:af:ab:b4:35:
56:65:33:fd:43:4a:9f:f1:a8:7a:26:71:37:ff:58:91:21:aa:
71:1f:a5:a8:0c:64:2c:d9:ed:e1:c0:54:1a:1c:17:66:03:e7:
f0:9a:59:99:99:a5:e6:a7:bd:97:99:9f:a7:52:69:75:ea:91:
fc:97:9c:7c:ce:88:2a:13:2c:35:76:ef:25:1e:74:f2:ab:1c:
18:84:02:0b:e5:75:33:ca:fb:42:a2:63:bf:d0:7e:a4:31:70:
1d:9f:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:41 2025 by rpki-client