Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51304d08-0017-3cf3-b731-96f17189f84c.roa
File: 51304d08-0017-3cf3-b731-96f17189f84c.roa (raw, json)
Hash identifier: Ncf8jB6kCbYniPQajZ6TVVhEcxX39HZRxZT8ZGRLhBE=
Subject key identifier: BD:0E:CB:DC:C1:AE:6C:A8:52:FC:4A:8C:B9:00:91:DF:FA:84:68:55
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0D15FB0944C7773464638D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51304d08-0017-3cf3-b731-96f17189f84c.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0d:15:fb:09:44:c7:77:34:64:63:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=2800c87f-2857-4a34-a141-d8dc1eb8881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:4d:03:74:21:dd:39:7a:f5:d5:6e:43:c2:
82:cf:63:a9:f0:ab:61:12:96:d0:24:3c:c3:90:18:
0a:05:fd:70:b4:ac:0e:65:9f:b0:9f:65:6c:13:03:
41:f1:c2:26:08:a3:86:d9:d6:33:6c:5b:fd:c3:cf:
bb:86:f0:47:a3:c2:61:49:7a:4c:5e:ea:d4:e8:a1:
2a:24:91:1f:73:ec:66:78:9c:ce:b2:e2:5b:bc:22:
e5:86:3e:b7:59:f0:19:31:a0:88:6b:1e:e8:67:14:
7e:b6:0c:e4:da:89:40:ed:2f:45:6e:f9:16:cc:14:
15:0b:83:82:1d:0c:b4:8b:01:87:62:df:1b:56:9c:
60:4b:70:7b:12:10:1c:0d:40:5c:26:b6:aa:1a:7e:
59:07:83:96:e6:9d:1c:fe:4a:d1:7d:2d:90:b3:f3:
66:97:80:8a:46:2f:e1:82:26:6c:30:62:cf:fc:44:
f6:0c:a3:de:50:34:25:68:24:e6:dd:82:46:03:ed:
99:f3:55:85:f2:c5:fa:2d:dc:9e:88:58:14:c6:cd:
35:3c:c8:01:c6:6c:1e:7c:1e:ca:93:40:05:99:ed:
e7:4d:aa:86:3e:01:45:70:3f:83:be:36:26:8d:50:
cf:12:b6:53:61:50:71:e0:04:66:41:35:27:e7:35:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:CB:DC:C1:AE:6C:A8:52:FC:4A:8C:B9:00:91:DF:FA:84:68:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/51304d08-0017-3cf3-b731-96f17189f84c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d7:11:07:7c:9e:1f:9a:99:ce:9d:f3:ae:2f:3b:1a:8c:68:
61:1d:ee:8a:9d:a8:d3:42:1f:6f:f4:48:1d:84:1f:bd:fe:9c:
c1:60:34:71:71:58:f5:d9:31:3a:dd:b1:39:45:e0:10:3e:86:
7b:f3:c6:cb:c7:16:61:48:db:eb:a1:49:1f:b5:1a:6c:97:0e:
4f:0e:83:dd:c9:06:3c:fe:43:b1:14:df:24:ba:6f:ec:9c:fb:
01:88:5c:d7:43:ff:ae:ab:0b:19:b7:28:f8:3a:9a:3a:36:46:
e0:40:cc:94:63:d6:80:c7:76:1d:35:32:5d:56:f9:74:bd:07:
0d:eb:50:01:9f:3d:b0:d9:7f:af:02:b3:83:38:11:77:dd:94:
cb:09:3d:79:1e:1a:59:51:f1:9f:ae:23:f2:b9:08:d0:46:a5:
04:8d:93:f0:d1:d0:e2:de:67:e4:ac:93:36:fa:2d:71:d3:7a:
e3:0b:51:89:a4:85:10:8c:11:5d:c7:23:d9:a9:96:fe:f6:a5:
55:5f:d2:7d:f2:9b:06:db:0c:5a:ab:c3:e9:fd:b0:4c:39:ab:
c3:e0:67:dc:fe:27:e3:1a:fd:15:60:4e:bc:4e:e8:6a:01:2e:
0a:a8:c8:88:4e:2b:96:b3:f4:24:a3:8a:ad:eb:4f:27:08:02:
6f:3f:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:33 2025 by rpki-client