Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5939a38c-a250-3cbf-be13-fb58e34f0248.roa
File: 5939a38c-a250-3cbf-be13-fb58e34f0248.roa (raw, json)
Hash identifier: 4zN1WNGFMuV9+0VL02kE5tcYOSNqsg0jcxanbGzR92c=
Subject key identifier: 09:31:62:4C:49:C1:B7:7A:C2:33:0F:2B:C6:DF:96:E7:48:2B:9A:B4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBB2870A268F42CB4502A6EE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5939a38c-a250-3cbf-be13-fb58e34f0248.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:28:70:a2:68:f4:2c:b4:50:2a:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=2fec0a1d-06b6-42c1-86ee-0052cf7b30e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:92:5d:70:9d:e5:29:a1:6a:4f:3d:96:c6:
50:a7:53:08:2e:48:0b:b5:96:b9:30:74:fb:59:d6:
70:d9:aa:0b:aa:6b:45:44:51:00:81:af:23:93:8c:
71:1f:69:81:d6:b4:f6:5e:93:da:f8:60:31:e2:5e:
2b:b2:04:8d:f7:91:c2:70:df:31:e2:7f:2d:ac:13:
ce:b4:23:f1:d7:63:1c:aa:d6:cc:66:a5:87:9d:02:
d0:99:37:86:a0:d5:98:17:16:68:62:a9:19:c1:3a:
17:0f:df:b4:58:6c:d5:85:15:45:c4:05:23:bc:30:
be:ed:10:a5:ce:eb:18:86:b4:48:09:05:c6:df:9a:
a1:04:07:2b:3f:d9:8b:84:ef:56:a3:d3:75:fe:5d:
e2:8b:04:c7:8d:5f:17:f1:4a:51:aa:1b:e6:6c:a2:
62:4f:7e:ec:36:94:92:fd:4e:8c:5d:3e:0b:ae:e9:
4a:ba:dc:fc:34:ef:56:9a:f7:e7:4d:90:5a:92:7a:
2a:d4:cd:20:ca:84:bd:5c:2c:4e:a6:67:ab:e1:52:
cd:74:4f:26:9a:1f:03:3d:d0:31:5a:19:6a:37:81:
3e:c1:01:30:b2:b6:19:5f:c3:59:d0:59:c7:73:2b:
d1:96:09:aa:a6:08:4c:1b:7e:d9:23:27:41:ae:1d:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:31:62:4C:49:C1:B7:7A:C2:33:0F:2B:C6:DF:96:E7:48:2B:9A:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5939a38c-a250-3cbf-be13-fb58e34f0248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:82:fd:b4:ea:4a:c9:69:3d:a2:b8:12:9d:7b:49:2a:d1:cf:
20:a2:ae:3b:c4:e2:46:1d:f9:d0:7b:0d:42:e2:ce:69:c7:95:
c4:c0:df:ec:c5:38:46:15:67:21:d4:7f:cc:21:62:1c:76:62:
ed:ea:3b:a3:11:d3:e4:46:72:5e:87:7c:66:65:5e:17:2a:0e:
fd:94:71:49:02:87:d2:b0:0a:1c:1c:ab:c7:17:1a:f3:08:67:
89:c1:e5:ac:4a:d9:7d:f6:15:76:e9:1c:71:c8:68:62:be:cb:
c2:74:e1:c8:56:53:53:67:2e:73:d3:2d:f3:fd:db:40:f3:7a:
53:56:3c:3a:ad:93:80:8f:e3:b4:2e:4e:7a:f5:a3:e3:3b:54:
31:ef:9a:0e:9d:a0:bc:13:39:38:2c:e6:be:f7:a9:af:83:7c:
ef:83:0a:a5:e3:17:95:1c:39:4e:9e:a6:1a:6c:2a:29:ad:ff:
ba:7f:e0:8a:d2:ab:d5:d4:ae:bc:e5:a0:67:e8:21:b5:48:ab:
24:cd:a8:bc:24:22:d4:e5:5e:2f:25:03:c9:31:62:b8:a3:f6:
bd:d9:17:70:20:ce:1c:43:cf:70:a4:b7:c1:95:70:c1:1d:d5:
ef:40:d7:33:ab:e3:85:52:5f:99:0d:35:f6:75:ea:31:82:bb:
0e:56:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:41 2025 by rpki-client