Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e4e1014-57f3-38ab-9ec7-9dac6bc3c325.roa
File: 5e4e1014-57f3-38ab-9ec7-9dac6bc3c325.roa (raw, json)
Hash identifier: HW9sFhOKn9aqzqZnQCtcq9Tn1aWj1xqTSmv/m05x8F0=
Subject key identifier: 29:95:3C:D8:2D:D3:FB:F3:0A:CA:3D:65:8A:B7:50:1A:2E:91:3C:29
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF3A0ABEA6E69A648CFC37480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e4e1014-57f3-38ab-9ec7-9dac6bc3c325.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:a0:ab:ea:6e:69:a6:48:cf:c3:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=c9ea72d3-8951-45f4-8781-f354fa578183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:a1:ad:23:53:3b:79:c1:be:c0:71:ac:d0:
6f:59:4e:51:a0:78:32:d2:b4:15:48:36:d0:a0:3e:
58:f7:f1:60:8f:5d:d5:6e:db:72:ba:b6:a7:a5:6c:
2c:c3:37:92:25:90:a9:77:66:67:d6:4a:0a:11:a8:
c3:9b:fa:51:e3:c7:a6:f6:3b:55:f4:16:2b:a5:7e:
af:36:3a:65:4f:36:8e:12:5f:4f:fa:a6:f9:f9:8c:
11:80:1c:65:88:25:0f:7b:44:40:f2:f9:5c:71:60:
08:18:96:5a:20:50:b3:58:fe:b2:3b:46:91:08:c3:
b9:00:52:06:da:a0:e2:e5:b7:7c:dc:d3:e9:b6:65:
b5:16:ee:46:61:19:c6:b7:f5:18:cd:95:a0:21:43:
82:23:0b:ce:f9:e1:ea:c3:3a:ad:fb:b5:b6:9d:fa:
2e:7a:ed:d2:f6:a5:d8:67:03:56:88:fc:b1:a6:8e:
e6:d0:49:2f:a8:74:55:14:cb:f9:83:36:f7:e7:13:
3b:6f:7e:4a:91:d4:70:42:42:4c:e0:d5:aa:9e:53:
ae:34:ab:03:03:c4:2c:af:14:54:61:32:71:3e:e3:
9f:08:0d:41:5d:63:da:b3:3e:de:91:64:4a:be:20:
40:f0:e3:b0:b2:30:59:71:09:c7:9c:4c:f8:16:57:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:3C:D8:2D:D3:FB:F3:0A:CA:3D:65:8A:B7:50:1A:2E:91:3C:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e4e1014-57f3-38ab-9ec7-9dac6bc3c325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b2:44:4f:bd:f7:36:25:d8:6c:92:16:ca:9c:b4:02:ce:ec:
6a:d3:14:bd:53:16:bb:b1:27:e0:94:dd:cc:8b:cf:22:b1:b5:
65:50:b4:d3:a9:e0:91:9d:fd:0c:6d:0c:dd:52:c2:61:ff:c6:
da:d7:d4:bb:5a:1f:b6:a4:22:96:b2:b3:29:46:f0:1c:20:db:
4b:d5:49:e8:eb:64:04:e1:0b:13:76:28:f2:95:69:c7:5e:cd:
81:8f:23:8b:06:33:a6:f1:19:17:2a:de:10:ec:c0:f1:ec:42:
08:39:91:84:fa:3a:57:84:b2:4b:49:39:07:88:36:3c:5e:97:
f6:c0:8e:03:66:30:39:05:82:25:bf:cc:14:23:a9:cf:3e:cb:
ba:ce:b3:03:1d:cf:95:de:56:81:4f:c3:c1:db:47:19:f5:8c:
39:ce:b7:47:e1:ea:d8:54:a4:df:3b:1a:83:97:57:36:d2:7e:
68:46:9b:2e:28:a0:77:a6:98:de:eb:b9:ae:f3:13:40:2b:79:
b5:7c:4c:69:c2:3a:2a:86:e1:8b:d9:de:43:10:d5:b7:d2:9b:
9d:65:12:46:d8:33:6b:2e:8f:f9:3c:13:e0:10:df:4d:0b:20:
cd:bb:bc:b7:6c:79:a2:30:d5:13:47:1c:d5:2a:9c:e4:0a:0d:
0d:9d:40:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:36 2025 by rpki-client