Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e16e31f-c5b9-31be-90c9-73e049538b53.roa
File: 4e16e31f-c5b9-31be-90c9-73e049538b53.roa (raw, json)
Hash identifier: ooQQGHGyrziF6tFn0MjRmPDQl2TItMxI1P0WF7q/8jQ=
Subject key identifier: 55:98:3E:6A:1A:D7:0B:A0:3F:E9:54:09:FA:66:72:2C:5B:C2:E3:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840832432B7A16E34FC984B3830
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e16e31f-c5b9-31be-90c9-73e049538b53.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:24:32:b7:a1:6e:34:fc:98:4b:38:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=a4e9ac16-9c88-4c30-a578-3f3065a6494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:2d:84:71:f6:02:e9:c4:96:3f:a5:1b:1b:
fb:68:41:4f:87:23:30:2b:e9:7d:8e:9d:7c:a6:8b:
dd:43:6b:8b:95:65:e6:f6:bf:79:45:54:40:28:ab:
b3:a9:d2:a8:0a:84:25:b2:41:cd:d8:d1:f1:5a:09:
55:61:6f:98:d6:f0:91:00:2b:e3:9a:59:de:f6:4e:
ca:f5:dd:fd:c7:a6:0d:c8:92:81:b8:8e:5b:4b:71:
ec:66:85:35:39:e4:e1:77:2c:40:74:6b:c1:47:2f:
23:7b:df:a3:64:41:de:8e:89:b4:38:cf:3a:f6:37:
d3:fe:81:a8:bb:ee:db:66:98:e7:51:77:a2:58:87:
63:5d:b6:32:81:48:96:1a:65:ec:d5:88:b5:78:0b:
b0:61:58:03:11:76:55:5b:5b:ca:6c:d7:b5:e8:91:
8a:b8:16:1a:18:70:2a:0c:d7:29:7b:d2:45:54:c6:
5b:d6:21:85:83:5f:c1:fd:bf:80:e2:54:b3:df:27:
69:8d:5d:44:80:6e:9f:59:36:29:0d:68:e6:c6:b6:
43:11:94:8b:22:14:19:d1:d6:b4:f6:5c:d3:a9:64:
79:bf:9c:5a:b9:db:c1:06:dc:2c:44:85:0a:50:3a:
8c:19:ce:4c:c2:9e:6e:d4:23:d8:45:22:41:aa:44:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:3E:6A:1A:D7:0B:A0:3F:E9:54:09:FA:66:72:2C:5B:C2:E3:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e16e31f-c5b9-31be-90c9-73e049538b53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f8:e9:17:03:98:ff:88:12:c8:63:66:32:96:28:1e:aa:9e:
3f:55:5d:a9:5e:14:04:49:a1:70:6c:34:8f:05:25:ca:6c:e2:
7c:bd:71:8f:4e:f9:8f:f4:a2:83:39:48:8f:3e:5c:78:cf:0a:
73:1a:db:66:43:63:ec:1d:52:91:4e:68:34:28:67:34:b9:b1:
92:89:d8:f9:9e:f7:55:3c:5b:31:df:c3:f6:a3:fc:c1:a2:bd:
99:01:79:3b:f0:72:5e:3f:ad:a6:bf:44:6a:1d:fe:db:5f:10:
b9:bc:64:da:5e:fa:68:67:30:1b:73:2d:e3:4e:d1:2e:86:39:
00:6a:24:34:65:2e:2a:4b:82:0d:b3:82:82:97:b5:99:53:e9:
14:02:bd:52:29:09:8f:e3:19:28:a0:19:25:d2:5b:d8:d2:23:
1c:0c:29:ec:89:03:c3:0f:f4:ad:77:30:5f:98:42:c7:f9:ac:
59:9d:54:7a:81:f1:3e:94:5d:7d:d3:51:ed:66:d7:f8:0e:ae:
df:bd:a4:0c:ff:77:39:95:18:05:74:f7:71:aa:54:7b:07:d2:
7a:29:14:76:ca:0a:81:ec:27:6c:64:f1:ca:04:a8:bb:5e:98:
a5:b2:94:93:32:a2:97:e8:c4:33:8a:c0:20:b7:4c:cc:3e:b8:
e4:08:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:40 2025 by rpki-client