Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50a1647d-d25a-386f-b0e1-208851cdbb1c.roa
File: 50a1647d-d25a-386f-b0e1-208851cdbb1c.roa (raw, json)
Hash identifier: tnWPrkVx7ETsL9zasEN0fNYDOfmnu1a+c2g+PTlBV8w=
Subject key identifier: 87:5B:D5:BE:05:53:1F:4D:D4:4B:D2:28:12:8D:F9:D0:A0:B9:78:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE279B30B964F08300B46E380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50a1647d-d25a-386f-b0e1-208851cdbb1c.roa
Signing time: Fri 12 Aug 2022 14:42:08 +0000
ROA not before: Fri 12 Aug 2022 14:42:08 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:79:b3:0b:96:4f:08:30:0b:46:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 12 14:42:08 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=03e4d18d-ea7c-41df-bbed-5c32dbdc549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:da:1e:9b:a0:02:85:2c:0a:87:61:27:3e:
bb:04:55:f3:05:dd:82:52:b2:b8:92:c6:e0:a1:e7:
d4:fe:f1:4e:7a:8d:0f:3c:67:62:ea:f6:6e:6e:6f:
24:9b:fe:4b:67:9c:f3:5c:b9:ab:f1:4c:f7:bd:90:
56:ea:b1:64:ef:62:9d:4a:45:04:3d:d2:ce:01:bf:
d1:ed:3a:4e:d7:5a:e1:92:d4:22:94:6c:77:dc:4a:
63:f0:75:e3:c0:62:77:94:bc:78:7d:dd:1a:53:16:
f8:36:c7:12:e8:bc:b3:a6:63:ac:97:cc:d3:06:73:
ad:1a:e5:72:ad:73:5e:ad:ed:af:c8:7a:e7:88:d3:
25:ac:d5:1a:ae:7d:85:01:ab:b5:fd:77:ee:cf:0b:
1d:49:02:74:b4:33:23:f9:51:e4:83:17:6c:e9:73:
d5:4c:5b:a2:9c:e7:6f:11:8b:3b:1a:58:75:d3:49:
84:29:fc:cd:8d:bb:01:c8:59:f7:91:f0:1c:de:e6:
70:26:61:a9:92:4f:e5:58:d3:54:fa:30:36:87:7c:
6f:dc:c1:73:94:ba:03:12:69:0e:32:f8:09:51:20:
65:31:d0:55:51:cb:52:04:83:7e:53:7d:77:fa:f5:
ba:49:53:76:92:73:49:90:6c:d0:95:27:f8:be:cf:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:D5:BE:05:53:1F:4D:D4:4B:D2:28:12:8D:F9:D0:A0:B9:78:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50a1647d-d25a-386f-b0e1-208851cdbb1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:66:c5:c4:28:8f:03:f3:8a:7b:6c:ac:32:15:63:71:d1:95:
d1:16:d1:16:06:9d:3e:5d:9a:ea:7f:15:5e:da:48:19:6f:fe:
ec:fb:b7:dc:a9:dc:89:6a:77:77:f2:ff:a6:a5:ce:4f:5b:a6:
21:cb:e5:7b:51:b3:94:56:c8:25:ef:4d:72:17:48:00:e0:7c:
74:08:66:df:68:cd:92:dd:fa:6d:f3:73:ab:1a:e2:2f:54:fd:
2a:0e:9f:bc:ba:1e:e5:47:a6:96:b3:bb:2c:ea:54:43:b7:c1:
77:3c:8c:3e:db:78:dc:11:30:95:5a:56:14:22:23:50:a7:21:
cb:1f:d1:e7:ce:fd:f2:cf:9f:62:d6:a8:6b:6d:bc:92:ef:62:
99:bc:8c:b3:38:d5:f6:a3:c6:d6:58:91:32:f3:95:37:b3:25:
5c:39:da:e3:68:d7:f9:a2:3a:ac:00:82:0d:1f:f2:56:d5:3e:
19:d9:55:37:1b:ad:a4:bd:cc:35:5b:e8:03:2b:20:38:9e:b5:
0b:cc:51:a5:55:6a:19:95:11:38:a7:88:86:2f:a4:24:55:22:
78:f5:8a:7b:de:a2:05:54:23:6d:98:64:14:a8:54:1c:8b:d6:
e0:20:38:df:aa:1a:bd:72:2b:82:0a:72:74:85:9f:28:5b:d8:
ad:d8:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:01:08 2025 by rpki-client