Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4518e8e9-5b9d-31b5-87ce-b914cf4db7c0.roa
File: 4518e8e9-5b9d-31b5-87ce-b914cf4db7c0.roa (raw, json)
Hash identifier: hTKqXCWQ+ixdNlQbvb/aoLC5USoujaUehHTelWvFf18=
Subject key identifier: 7A:E8:EA:FE:68:5D:5B:26:BD:5C:9A:3B:80:F0:23:BD:FE:79:92:16
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584086CE24B15CCC55CCB1241CA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4518e8e9-5b9d-31b5-87ce-b914cf4db7c0.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:ce:24:b1:5c:cc:55:cc:b1:24:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=af417b25-6f34-4586-bf0a-369b5dc9e87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:86:64:29:2a:28:97:c2:a2:27:17:10:32:
db:c4:25:e4:7e:ea:14:13:8f:12:fe:b1:16:a2:85:
a4:74:24:91:91:84:25:4a:ce:1d:65:12:1e:5a:b6:
32:55:0d:4c:8f:6e:1c:ac:74:2e:58:d4:c0:29:e3:
0e:0c:80:49:c3:91:48:39:77:4d:51:40:cc:ce:09:
55:65:94:2d:45:11:7e:9f:0b:81:05:77:84:af:c8:
76:5c:60:c5:d3:38:fc:47:e7:a9:03:a1:72:5d:a5:
75:f8:7f:f1:14:3e:76:af:16:2a:fe:0b:b5:e8:bb:
e0:24:78:45:31:65:74:ae:71:3a:3d:6d:b7:2e:87:
50:07:65:31:fb:72:58:3a:ae:38:a1:b4:8f:14:41:
24:5e:2b:52:b2:fd:31:33:e7:a1:5b:45:79:3c:d0:
2f:2c:ce:72:6f:12:d6:c0:ee:ee:02:02:75:6a:ad:
26:6d:cf:45:e1:66:49:7d:20:38:88:50:96:f5:c3:
57:18:7f:93:1b:8d:37:13:f9:93:0b:08:67:a8:81:
95:ac:ec:c5:93:47:67:31:86:a3:81:66:c8:58:36:
2f:f5:ec:7f:9e:83:28:56:cc:50:5f:ec:6b:e1:c7:
74:84:d2:a0:61:eb:2b:55:06:98:af:56:15:cd:5d:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:EA:FE:68:5D:5B:26:BD:5C:9A:3B:80:F0:23:BD:FE:79:92:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4518e8e9-5b9d-31b5-87ce-b914cf4db7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:0f:09:ac:c2:ab:7d:be:f3:83:c1:e4:bf:d0:39:35:6f:23:
d7:38:08:0d:dd:19:d8:11:16:a4:78:3d:a8:4f:03:d1:7e:2a:
d8:c6:53:d9:c3:a7:f9:24:36:da:f2:f6:6c:43:b8:80:14:c1:
f1:cb:4f:cc:de:90:57:0e:a9:a4:0d:93:78:93:7e:7b:a4:aa:
d6:48:76:7b:0d:60:25:ef:9e:6f:d3:3b:23:8b:d1:9d:ed:b9:
7d:af:f1:dd:7a:43:2c:8d:61:04:2b:8c:57:cb:0c:cf:f9:19:
8e:b4:d1:58:6a:a4:d1:e6:ec:42:10:1b:72:0a:4e:4a:62:ac:
fc:42:af:1a:e5:40:ff:0d:fc:14:8c:34:6e:f8:25:8c:5a:16:
17:77:9a:75:cc:57:3e:10:c2:58:26:9f:33:fd:7f:42:e8:c9:
3b:ac:26:e3:59:69:7f:24:de:83:b2:46:39:f4:18:78:50:15:
18:0f:cf:f6:a7:7c:16:83:2f:b4:02:0f:4b:39:2b:e4:bf:91:
b1:9b:aa:ea:b0:8b:6c:11:67:32:f8:4d:a7:93:df:62:d7:6c:
84:17:85:06:11:1e:24:40:c8:f1:9b:d6:5b:23:af:73:d4:94:
73:5f:6c:74:c4:9b:ca:c0:29:b9:84:46:49:99:30:fa:ad:d7:
7e:05:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:45 2025 by rpki-client