Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/537324dc-a777-31c5-9713-2f3d21e5f9b2.roa
File: 537324dc-a777-31c5-9713-2f3d21e5f9b2.roa (raw, json)
Hash identifier: VD5Tx3vuzEXQCxJf44+iJwoH9tduCEIdSfmYAnkwrbU=
Subject key identifier: 36:2A:8E:5B:6A:23:79:CF:6D:E0:63:BF:25:AA:20:CD:E5:0D:DC:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840417A374C1C95B8BEA94B0B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/537324dc-a777-31c5-9713-2f3d21e5f9b2.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:7a:37:4c:1c:95:b8:be:a9:4b:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=97732103-6382-4d53-b6b2-b7781526354b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:60:95:c8:53:88:42:77:c6:36:a4:b0:c6:
25:92:0a:55:94:ae:69:bc:85:b6:57:26:39:71:90:
2f:63:35:34:78:fd:bc:7a:42:b4:f0:e2:7c:9e:a9:
9c:bb:bc:83:93:70:35:ea:11:ff:83:18:bd:35:b1:
de:43:2f:74:e5:d2:f1:cd:06:c3:29:f5:9c:31:8a:
73:d0:a8:99:3e:3f:8c:be:5b:23:7d:1b:06:4d:7c:
9b:81:3f:39:13:3b:60:65:a9:fb:b0:a7:c4:6a:9e:
68:9e:f0:d9:8c:4f:4a:c3:e7:29:eb:69:4c:91:22:
10:1e:02:9f:6f:a6:ec:24:e6:98:39:a4:5b:75:27:
85:50:86:15:58:3e:9b:97:25:e5:77:18:71:26:69:
12:1d:89:4a:5f:b8:d7:14:24:9f:88:90:ba:86:76:
2f:b7:8a:c9:23:52:e6:64:d6:29:53:e1:5b:03:22:
60:4b:16:dc:c9:6e:a6:f1:04:54:90:49:19:e6:14:
04:84:e1:56:25:a9:4c:b2:5b:64:0a:ea:9b:9d:e7:
88:28:c8:a1:32:81:8f:5c:63:9a:39:1a:d8:1b:d2:
a1:71:30:f7:7f:fa:0d:5c:b2:d1:72:2e:ed:3e:69:
7c:c0:ac:ab:9d:a3:12:e1:26:32:07:79:e5:05:a1:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:8E:5B:6A:23:79:CF:6D:E0:63:BF:25:AA:20:CD:E5:0D:DC:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/537324dc-a777-31c5-9713-2f3d21e5f9b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:fb:8f:bc:8f:27:01:0f:05:8a:18:fd:e9:a5:51:22:62:b5:
97:75:70:10:25:55:32:7e:86:91:13:40:e7:d6:61:9a:ae:c1:
3c:d3:0a:25:6b:bb:27:a2:39:c7:a9:83:89:72:c5:31:7b:43:
b6:d5:86:ea:e6:e1:bc:d1:1f:b6:8a:42:17:c1:f3:6f:09:89:
95:d4:f6:dd:52:ea:51:89:5c:b0:3e:68:e0:34:ae:1e:59:1d:
43:76:b4:5c:8a:17:d4:55:8d:91:e6:00:44:ee:fa:b1:57:2b:
e1:fd:a0:8d:de:10:40:a0:23:16:57:cd:f5:93:72:96:94:f7:
8e:97:8d:25:43:dd:f4:e3:d0:b2:80:6c:f1:22:35:bb:77:d8:
01:0d:bb:dc:df:71:c9:50:57:8d:77:64:52:80:3d:6c:72:13:
51:8d:ab:88:49:da:e9:e6:31:67:ed:55:d6:6c:f0:1a:c5:1b:
b2:25:93:eb:43:8d:b2:50:2f:2c:b7:31:c1:cd:f9:af:62:84:
c6:07:18:f9:b0:cb:23:b3:66:51:04:6e:42:93:1b:3a:cd:5c:
76:a9:e7:18:ee:85:19:71:80:1a:ef:71:9f:e8:a9:7f:3e:db:
1b:ec:b1:e0:91:e0:59:f2:00:12:51:12:d3:fe:52:40:12:cc:
27:86:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:02 2025 by rpki-client