Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ffdb597-16b5-37a6-98f1-c1cfad2a5e04.roa
File: 4ffdb597-16b5-37a6-98f1-c1cfad2a5e04.roa (raw, json)
Hash identifier: yBAHHOsGANS+tFCD4h4ElaOJaR65ThmYSeyfM5JGY5c=
Subject key identifier: C3:A1:C2:68:0D:29:1A:A5:60:8A:4C:4A:E6:B3:10:90:B1:1F:A8:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBC2EA58C1AFB228D83084840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ffdb597-16b5-37a6-98f1-c1cfad2a5e04.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Mon 07 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:2e:a5:8c:1a:fb:22:8d:83:08:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 7 05:00:00 2022 GMT
Subject: CN=ddbdc809-e2b4-456f-ab22-0197cb5f446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:7f:91:8b:0c:93:63:2d:46:6a:26:40:2e:
71:d1:a9:24:dc:31:6e:5d:51:27:0c:55:37:a1:f5:
21:22:55:ec:4b:bb:f3:6b:0d:e1:b9:b5:25:70:d2:
da:8a:d4:b4:b5:7d:4b:91:30:51:ad:55:f6:a0:ff:
5f:26:fb:8c:83:ee:0d:68:97:c0:fb:aa:ae:00:b9:
fb:47:40:32:4c:9b:bf:2f:9d:f7:de:56:32:35:98:
4d:c3:a9:56:55:99:56:b6:81:43:df:ea:61:39:df:
73:1e:e1:e4:4c:06:a2:1c:b5:93:da:38:67:5e:d9:
18:41:2e:cf:9a:f7:ed:28:b6:8e:90:b0:12:40:60:
6f:af:e7:3f:c3:1a:30:d3:b0:e1:3a:31:02:91:38:
3f:1f:fa:38:a2:bb:45:de:77:e0:db:94:f4:ba:63:
61:0f:3d:88:b8:ac:d6:66:2d:94:18:7a:56:fb:a6:
97:8d:09:46:4d:bb:a0:ef:2d:01:da:5b:42:52:77:
48:e0:5c:f6:bc:6b:ff:c9:47:07:8c:84:b7:53:73:
38:1f:08:79:5e:df:82:e1:8c:a5:97:85:43:5f:76:
50:2c:7a:b0:4e:82:f2:ae:a1:17:5b:ff:4e:0f:a0:
1c:29:5e:d8:04:e7:88:93:0c:f6:f0:77:3b:ea:7f:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:C2:68:0D:29:1A:A5:60:8A:4C:4A:E6:B3:10:90:B1:1F:A8:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ffdb597-16b5-37a6-98f1-c1cfad2a5e04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c3:a7:d9:78:c9:40:61:a3:7a:8c:97:07:df:fa:d7:7a:5b:
e2:33:c7:46:b4:68:1d:d7:b4:e4:9c:86:31:cb:47:47:fb:7b:
03:0f:18:a9:3d:68:c4:e2:d4:bd:64:a9:72:21:d5:8e:85:58:
ed:d4:96:e6:8c:9b:6f:7c:8a:dc:27:ab:63:e8:4a:b5:e8:e3:
eb:fa:5f:bf:02:98:c1:31:50:e5:87:c1:62:bb:08:e0:03:30:
d0:0b:39:7a:6f:a0:7d:4e:ab:73:b8:c4:86:71:93:7a:70:0d:
3e:d7:8c:1d:d2:d3:0d:62:ac:4e:15:82:3f:b0:ae:f6:c9:af:
0d:f8:ba:02:b8:9c:a1:a4:da:f4:ad:af:56:11:22:40:2d:a3:
ac:38:b3:92:0b:21:01:e7:d0:31:17:25:70:b8:67:7e:81:fd:
ac:d8:e6:3f:99:8f:b5:c1:13:f9:b7:89:a5:c3:48:91:c7:88:
0e:7d:15:4c:d4:04:71:7f:d6:04:ce:92:c6:01:21:e1:16:9d:
82:f5:7b:90:4e:cd:39:dd:74:ed:24:e2:d5:16:b9:ec:3b:42:
ac:8a:3f:32:2b:0e:38:c2:7c:a5:ef:92:8c:8c:3d:e1:09:2e:
49:12:f0:0b:c5:c8:d2:1e:46:d6:58:92:09:fe:88:3d:79:ac:
e7:ce:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:34 2025 by rpki-client