Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/589de3a4-4b20-33dd-852b-b0f99156761c.roa
File: 589de3a4-4b20-33dd-852b-b0f99156761c.roa (raw, json)
Hash identifier: dYdJeQUxQlBFannx7mso48Ue9AiE1vUlGlAW184HL+U=
Subject key identifier: 70:8C:EE:90:49:F8:12:63:D3:C7:83:BF:BA:A7:09:AC:63:AF:F2:95
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD06411B1494321D054ED8780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/589de3a4-4b20-33dd-852b-b0f99156761c.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.5.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:64:11:b1:49:43:21:d0:54:ed:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=e39c6a2d-b948-4705-877a-d1157d2f17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:b8:92:28:6e:16:89:f9:e6:1e:da:fd:20:
f7:fc:1d:04:46:69:c7:a4:97:94:25:7c:c8:34:7e:
0e:af:3e:19:89:88:7f:dd:dc:0d:4a:c8:be:a7:29:
4d:65:0f:7d:df:50:1b:f9:1e:d4:25:55:98:29:70:
ed:95:c8:97:a3:6b:d6:bf:cf:e1:61:2e:30:bb:26:
a2:86:de:dd:be:75:ed:0c:f2:b5:3c:10:8f:8f:0a:
47:6d:99:8a:eb:7c:aa:86:66:13:ef:71:c1:0f:8a:
d6:75:b8:06:fe:88:f8:76:b6:e0:13:4a:70:e1:db:
9e:53:79:23:a7:45:99:52:1b:04:b1:8f:8c:4f:f3:
c6:46:98:35:7a:41:a1:b3:a9:81:37:09:c5:63:9b:
75:d5:48:7b:89:11:de:bc:40:90:18:8b:e3:89:38:
4a:d2:7e:c1:87:9f:ad:27:de:cf:29:64:e0:13:6d:
c6:1c:ee:87:c0:7b:85:e4:2f:49:ab:ac:a3:13:2e:
63:7b:e5:2c:54:e8:53:cf:d9:bc:10:4b:c5:ed:89:
61:aa:45:7f:b4:c3:01:a6:43:da:e8:f7:7a:16:36:
bb:62:80:6f:cb:67:49:51:72:28:be:46:79:a8:08:
60:a8:dd:9f:38:0c:54:fb:c9:b9:48:d2:f9:92:e1:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:EE:90:49:F8:12:63:D3:C7:83:BF:BA:A7:09:AC:63:AF:F2:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/589de3a4-4b20-33dd-852b-b0f99156761c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.5.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:bf:c8:9c:75:d6:b8:49:8d:be:f9:7d:7a:0c:38:42:e4:97:
ae:6f:6c:a1:30:be:53:cb:77:54:01:3a:e9:ad:8f:81:01:76:
27:53:77:06:81:89:1f:fb:18:80:66:bb:52:f7:9b:cd:5b:d2:
f1:58:85:42:8c:80:64:fc:6a:83:1c:97:f0:ef:f3:5c:b1:15:
a9:a5:b2:d9:9f:f2:f2:49:6f:e3:21:d6:1e:c3:ac:b5:55:81:
b5:b6:d7:5c:bf:27:c6:18:b9:60:b6:ba:72:c9:ba:b6:fa:cf:
5b:24:07:b1:6b:fa:59:28:91:5c:15:72:89:1e:a3:14:09:81:
22:7c:f1:2d:87:7b:29:0f:38:6d:ae:06:0f:1d:ae:07:fa:19:
78:b6:34:8c:68:d2:4b:b2:9a:a1:93:88:ca:5e:bd:27:f1:15:
1d:e2:fa:df:7a:33:e4:50:89:6b:0a:fb:d3:fe:0b:0c:69:d2:
5d:5d:d0:2a:eb:fd:ca:c5:2b:7a:e7:56:6b:28:3d:ca:ec:95:
b6:ea:0c:dc:5b:fc:f1:07:c4:d0:d9:63:5f:f7:85:91:d9:d1:
a2:91:0c:11:9c:ea:ea:f6:0c:76:f9:37:29:90:0c:c2:a3:c3:
c1:74:a8:4d:e1:5f:4b:b4:c3:e3:a8:0d:bc:26:f8:61:74:15:
93:77:48:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:38:24 2025 by rpki-client