Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fe3c6a3-403a-3efa-80de-faa00b10ac3a.roa
File: 5fe3c6a3-403a-3efa-80de-faa00b10ac3a.roa (raw, json)
Hash identifier: CibDvo8ER25X/OkzJFQkVGIWAp1VjDGG6e1rjpjy0pE=
Subject key identifier: 81:1D:9E:AE:85:6B:86:38:CC:A9:69:E0:B9:B9:3B:3C:AE:B3:8A:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840430C412C809642DDA46C4E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fe3c6a3-403a-3efa-80de-faa00b10ac3a.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:0c:41:2c:80:96:42:dd:a4:6c:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=dca823b9-43da-4921-835c-3dc71bc907fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:ab:ce:f7:ba:e0:dd:d4:e7:4b:40:21:00:
c9:e8:07:f4:8c:7d:d6:a3:75:27:82:ae:2d:08:36:
ea:69:40:3c:e4:60:ec:45:de:4c:38:5d:ca:4f:c5:
58:cd:fb:af:b7:bf:84:bf:d6:c1:b2:16:c5:a1:85:
a8:25:2e:a9:a2:25:cb:d4:9a:62:67:56:56:41:6d:
f9:9f:9f:a7:38:74:9b:4b:5c:33:5d:e8:c8:16:00:
74:43:e8:6e:a9:43:cb:36:1e:22:e2:07:ac:15:5a:
cd:d8:b4:1e:4c:58:76:24:6c:94:b7:e5:b9:fc:9a:
35:fc:30:b7:1b:65:19:78:d6:27:95:28:21:72:ac:
13:26:3d:7e:8e:8d:bd:52:d8:7d:aa:9b:55:2d:7d:
5b:34:8b:78:e6:5a:12:2a:66:00:43:04:21:da:d0:
5f:03:82:94:8f:27:10:ad:65:d8:e5:e1:5c:58:89:
ae:29:64:a1:6a:2f:fc:95:bf:7c:6b:df:82:fe:be:
9d:b9:a8:14:36:a6:91:04:c5:49:fd:b4:7b:00:ff:
d8:0d:72:8e:c7:cc:d4:a1:11:d9:e6:11:e9:26:43:
69:22:0a:32:f1:f5:7a:b3:43:76:69:dd:67:4c:db:
3f:15:bd:4b:c6:92:f5:30:8c:c3:89:82:a8:74:4f:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:9E:AE:85:6B:86:38:CC:A9:69:E0:B9:B9:3B:3C:AE:B3:8A:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fe3c6a3-403a-3efa-80de-faa00b10ac3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:cf:51:dd:45:fe:e9:3b:3f:9b:2a:d6:33:20:15:37:34:a5:
b2:b6:aa:07:7b:2a:58:3f:86:32:99:d9:e1:57:ce:d7:34:66:
93:7e:70:67:7c:d8:2f:91:12:63:1d:16:51:5b:e0:c4:6c:29:
2c:a3:bf:19:be:44:38:e1:b1:e8:67:3f:eb:b0:d0:a2:ce:00:
22:dc:e4:f1:a2:4b:7a:92:4b:bb:84:9a:68:9c:ec:f0:c1:75:
de:f3:48:85:d8:7a:c9:0e:aa:1c:ff:71:94:f4:12:d7:45:06:
58:3c:42:cf:21:8c:20:0d:02:46:21:ea:db:97:f6:8c:04:eb:
f9:41:a3:e1:ab:ed:0c:0d:7d:e0:44:9a:96:15:71:35:9c:0c:
b8:2e:47:28:27:4d:2d:ce:ef:f0:97:d6:b6:c4:c8:11:5b:0b:
9e:dc:d5:92:dc:fa:10:e5:db:15:40:0d:11:af:fe:1b:c2:91:
c6:67:a5:d9:4f:39:63:b1:29:bd:43:5d:28:f1:a7:14:43:da:
14:c7:1e:f5:3a:80:2c:3b:99:d3:19:36:3f:c9:ec:c6:31:fc:
64:d6:4c:21:e2:fc:ab:08:e5:4a:32:cd:3f:97:33:c3:6b:c3:
66:82:7b:ba:4e:2a:d2:6c:a6:29:66:9e:63:ad:a1:b5:d3:29:
62:67:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:31:22 2025 by rpki-client