Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/502c3525-ad72-3c1c-9e34-a2a9fe93b1b8.roa
File: 502c3525-ad72-3c1c-9e34-a2a9fe93b1b8.roa (raw, json)
Hash identifier: NWkgYzvOo/HJuVMqD/yJFypK555wkScXAi8IgJSJEO0=
Subject key identifier: AD:7E:76:FD:D9:B7:DF:8C:C2:54:E0:30:BF:41:B2:09:FF:81:42:06
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408605181D4E0C0D33325A2600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/502c3525-ad72-3c1c-9e34-a2a9fe93b1b8.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:05:18:1d:4e:0c:0d:33:32:5a:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=c54e4a69-288b-4189-978a-4c03f575a274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:73:ee:6e:01:19:8b:bf:01:06:e4:9d:20:
65:8c:ab:fa:08:14:5d:0d:c7:89:a4:f4:95:9c:f1:
fe:b2:14:68:18:ab:00:30:f1:2e:f7:d4:a9:8c:c7:
3f:a9:e4:31:14:68:b1:4b:30:ff:20:4c:24:a2:8d:
d1:4f:91:5c:35:37:3a:b3:c7:15:26:1c:1f:ad:d5:
07:df:19:24:34:c9:04:79:99:6d:fe:74:40:1b:22:
cb:0e:94:3a:09:22:5f:cd:bd:c5:cd:2c:04:cb:cc:
22:13:d8:04:9e:6a:77:ac:d8:86:73:7c:4d:cf:ab:
89:60:16:62:07:18:5d:6e:f2:81:a9:1e:dd:af:e8:
c0:77:20:04:00:8a:d3:15:39:67:c5:8e:fa:4f:54:
26:ee:b8:fe:9e:fe:da:8b:c0:29:71:24:f9:db:a6:
15:ad:a1:50:68:b9:e0:8e:d4:7d:2d:9a:2b:f4:0f:
2d:85:a1:2d:3d:19:54:7d:83:6d:78:56:52:db:2b:
95:7a:5a:a1:34:16:f7:ab:62:30:e4:c1:dd:c6:5c:
bb:4c:13:30:59:66:5d:f2:81:27:74:58:a2:95:77:
c8:60:c2:75:d4:49:14:6f:40:10:56:93:c0:37:29:
7f:33:0d:67:c0:fe:17:19:4e:52:d9:e9:c9:e2:0d:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:76:FD:D9:B7:DF:8C:C2:54:E0:30:BF:41:B2:09:FF:81:42:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/502c3525-ad72-3c1c-9e34-a2a9fe93b1b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:5e:22:d2:40:50:b5:2b:a2:3c:96:71:c2:27:3f:d2:92:e0:
bb:fd:1f:f0:4e:ed:9e:32:7b:ea:d8:63:47:ef:92:e3:9c:da:
15:bd:13:67:df:3d:de:21:dd:de:50:3e:eb:c9:68:25:b5:fb:
4b:5a:96:77:0f:17:a3:57:1d:89:29:1b:38:65:f8:8a:a6:60:
ff:be:1c:5b:da:5e:a3:a0:fc:31:34:da:ac:39:fd:12:79:9e:
54:3e:f0:39:c4:33:cd:d1:12:52:52:58:a2:7a:28:4a:f5:00:
40:2f:41:4c:33:3c:06:f6:14:f5:13:19:28:c3:33:24:58:69:
c9:87:80:f7:96:91:82:55:0b:88:b0:ed:cb:69:cf:3a:43:54:
dc:a3:a4:82:c5:da:2e:e1:61:d2:f2:a8:ff:b5:43:47:0c:47:
cd:84:a0:dc:a7:67:e0:f4:15:30:93:9b:15:c4:c3:61:c8:9e:
32:86:cd:af:88:74:15:dc:fe:07:0b:09:4e:b8:92:88:07:a8:
69:92:c2:93:49:6c:e2:98:e3:98:5e:c5:ce:6a:f1:3a:e3:12:
1a:f0:c7:84:c9:cd:84:05:cc:ab:b0:ee:f0:99:b3:97:d8:9c:
a1:0d:c9:f1:f2:6b:fd:16:94:8c:5c:4e:cb:24:3a:cb:72:dd:
4f:b3:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:54 2025 by rpki-client