Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/574617a1-434a-33ab-8c8f-36255f1af6a2.roa
File: 574617a1-434a-33ab-8c8f-36255f1af6a2.roa (raw, json)
Hash identifier: lOvErWYpWrzYZ1KruTJnIMFgxW8DB2ja4G94NBY6tls=
Subject key identifier: 13:CF:AD:C7:5C:95:3B:75:E6:5D:05:BD:CD:0C:44:31:E9:23:A8:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B32103310238651FD3151D8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/574617a1-434a-33ab-8c8f-36255f1af6a2.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.116.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:32:10:33:10:23:86:51:fd:31:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=25c4b97c-a0ad-491d-bd39-bbb37fffdde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:43:3a:9c:d0:de:46:c8:ed:1f:9d:95:1a:
48:d4:2c:c1:8e:b1:7d:08:37:8b:f1:4d:e2:56:dd:
4a:4f:47:a4:64:9d:51:2e:17:57:3b:5d:52:63:b5:
1e:22:e5:d5:a1:2d:f9:cc:c9:6a:74:56:75:23:b5:
70:29:e2:93:51:f0:d3:a6:a0:1c:61:13:cc:2d:b9:
52:7f:ad:9c:76:01:a8:75:33:53:12:48:84:0a:1d:
c9:b4:c8:0a:9f:ed:a2:1d:01:8d:0a:ee:a1:09:ba:
cf:76:ed:c3:2d:19:8c:8b:d4:ae:36:d5:c8:9d:60:
00:c1:07:2e:04:83:a9:7b:e8:4e:c0:c3:ef:22:91:
1f:15:2a:53:1a:ee:a3:c0:03:7e:57:41:f7:f9:23:
f8:ce:22:3b:90:34:fc:8e:32:02:40:c9:20:ab:75:
aa:14:4f:8f:19:ac:bc:d4:7c:2b:c8:c3:79:22:22:
a6:1f:20:a5:0b:9e:44:39:05:07:33:e6:4e:62:5d:
61:f7:17:ad:9d:50:c6:fe:fc:b4:02:bb:36:b6:7f:
5a:71:d9:71:73:c9:e2:11:11:46:14:ba:69:63:1b:
86:09:38:9f:a0:6d:80:49:bf:61:21:be:bf:53:4f:
12:cb:09:65:e9:c1:33:fd:6b:58:9b:ef:2d:d0:e4:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:AD:C7:5C:95:3B:75:E6:5D:05:BD:CD:0C:44:31:E9:23:A8:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/574617a1-434a-33ab-8c8f-36255f1af6a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.116.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c7:9b:8f:ea:f8:c0:ee:75:e1:af:17:e4:97:e0:eb:f9:a0:
1c:fd:2a:77:c6:4c:d3:b0:f7:2a:f9:e6:5d:a9:c7:5e:0b:a4:
9e:27:54:a2:82:96:d7:73:7b:b0:3f:c4:98:48:27:5f:07:5e:
9e:d7:6c:45:72:03:97:bd:6e:c1:05:26:48:8d:2b:53:ee:7e:
49:c6:f5:2c:6b:0a:9b:6b:d9:63:fd:83:ce:ee:45:35:54:71:
b4:4f:37:13:e8:d8:a8:0f:26:65:a8:69:67:53:61:2d:bc:73:
fe:05:dc:6d:4f:08:0b:fe:11:85:1b:e4:2f:10:c2:bb:bd:8e:
5c:43:e0:67:3a:f8:eb:d5:10:0e:c6:6c:fd:33:25:ac:81:65:
d0:9e:2d:0b:d5:58:b0:f4:6c:dd:2b:da:68:e9:20:55:92:30:
08:97:f0:16:29:99:f0:cf:ff:7b:cd:ff:10:ce:d5:20:59:83:
c3:6a:0d:13:de:89:29:56:0e:4f:b6:7e:af:76:9f:bf:a7:8c:
ef:fc:68:3a:29:6b:0b:95:1b:37:33:a8:cb:76:8f:ea:b8:83:
46:13:ac:7b:7e:00:db:a4:97:e8:e9:6e:f5:1f:cb:32:f6:c0:
34:07:62:b1:9b:cb:be:0c:24:a9:30:ae:d1:78:23:c9:6c:33:
d0:a8:4d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:34 2025 by rpki-client