Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/583a0b1b-29bb-3f2f-bae2-95ebf52a5cd3.roa
File: 583a0b1b-29bb-3f2f-bae2-95ebf52a5cd3.roa (raw, json)
Hash identifier: dOmoiUYXa/A+YW27l2um9bWMBCbtBmjAjLqcX0vxvR0=
Subject key identifier: FD:AC:03:82:70:BE:2B:32:0C:3A:2E:63:69:CE:1C:3A:70:04:E4:C5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7D3D9B71A97E9BA6240AAB20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/583a0b1b-29bb-3f2f-bae2-95ebf52a5cd3.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:3d:9b:71:a9:7e:9b:a6:24:0a:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=4df409f3-2c11-4e52-b02f-5e67210ab097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:ba:88:c1:e7:ec:28:03:42:7c:67:2b:8d:
0a:3e:79:0d:2e:4d:2d:87:f1:a4:49:34:45:a2:74:
f3:f2:78:9e:dd:17:f5:f5:cf:c9:d6:fb:24:cb:86:
9b:e6:78:71:6e:31:0e:ee:7e:dc:1e:29:71:fc:ac:
8e:3e:dd:e3:5c:0d:ba:c2:80:98:2a:c1:dc:a6:ab:
8c:7d:3f:e3:6a:ff:c2:7c:34:71:85:6d:85:97:a8:
9c:74:44:96:e3:bf:18:f4:40:14:b6:82:61:fa:bc:
2d:b9:25:82:69:6e:ee:fe:d9:99:fc:a2:4b:df:55:
71:b7:3e:82:a9:ea:3e:0b:7d:13:c1:86:e7:ae:0a:
f9:5e:3d:4d:6a:82:c1:d6:9a:37:20:30:1e:58:45:
47:b3:b6:11:df:d3:aa:e7:b5:9e:bf:81:89:4f:43:
35:d5:4e:08:4b:89:8b:f7:16:e2:ae:5a:5c:3f:d7:
02:aa:97:c5:a9:1b:94:21:19:cb:1c:34:00:52:a5:
e6:e9:0f:28:94:a5:f6:89:6c:ac:54:a9:07:54:89:
c0:b7:ba:0b:6a:94:6d:87:49:e8:1a:85:ba:71:94:
3f:bf:08:0b:33:a4:36:87:73:d2:3d:11:5b:a8:32:
06:66:49:d4:18:ca:84:83:5d:72:24:26:9f:b8:71:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AC:03:82:70:BE:2B:32:0C:3A:2E:63:69:CE:1C:3A:70:04:E4:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/583a0b1b-29bb-3f2f-bae2-95ebf52a5cd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2d:ce:06:7d:e5:78:4f:a7:bf:c3:f0:d3:2e:4d:e8:d1:14:
90:f9:90:6a:ce:b6:6b:e5:e4:7d:ec:6c:56:b3:43:5f:36:4b:
91:3d:a6:30:f8:0a:f5:3e:ab:99:70:69:8e:35:2e:d4:59:97:
54:8b:3e:a7:d3:45:c2:47:38:e8:03:f6:dd:56:c0:92:70:8e:
36:fb:1a:31:29:d1:c5:b0:4e:12:98:b8:0e:b1:c3:ca:5c:a6:
8c:ac:e8:7a:4c:98:e8:d1:b9:ba:b1:e9:97:2a:44:0e:73:19:
a5:45:e8:59:4d:f2:98:7a:e7:1a:ae:44:88:f4:6b:70:54:09:
2f:d1:56:df:8b:97:c3:8f:bb:cc:cf:32:0a:c7:85:96:e2:1f:
a3:19:c3:29:aa:eb:4a:8d:68:cc:04:5e:d5:15:20:3e:f7:e9:
06:21:5a:fe:f1:67:90:23:7e:ee:d9:53:8d:ed:e2:12:ed:df:
64:ba:2b:88:c9:55:7c:cc:90:bd:ab:34:fb:66:ce:c1:e5:54:
5c:83:7a:65:9a:be:b1:dc:cf:e6:b1:ef:30:1b:e4:85:9b:fd:
12:26:fd:3f:85:f7:00:57:d0:23:a5:9c:6d:06:69:73:61:0e:
79:96:74:c6:d7:d4:71:5f:c5:5e:f6:00:51:c1:ab:ed:58:59:
1a:64:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:24 2025 by rpki-client