Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64662a9f-ae72-3fb9-a8e4-64f83ece080a.roa
File: 64662a9f-ae72-3fb9-a8e4-64f83ece080a.roa (raw, json)
Hash identifier: k1PPF5N3npBqfeD36GH1HWnTfOe+1kO6eDwDQB4L7yg=
Subject key identifier: 6A:33:E2:4E:BF:6A:31:94:E8:FE:23:6D:06:98:1A:11:F3:35:48:B4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F75DE8B5714B0B9A7FB273F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64662a9f-ae72-3fb9-a8e4-64f83ece080a.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:75:de:8b:57:14:b0:b9:a7:fb:27:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=cacd617c-a08a-4dd1-8beb-749e9baf8083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:2c:c7:25:5b:48:53:c2:a5:4c:d1:57:c3:
3e:34:b5:ac:8a:60:3d:7c:07:ab:0f:85:bb:4d:30:
0f:36:d8:ad:e8:c7:72:92:7e:7f:d2:8b:73:ad:5b:
85:5b:5d:89:e2:d6:16:a1:ab:e3:6f:de:e4:2c:0b:
03:9e:0b:18:95:c0:bf:8f:55:0e:6d:ea:e2:b4:f1:
f5:ba:c3:51:34:cd:ca:2c:bd:3e:f2:3e:e6:21:37:
8e:ae:75:e3:f5:12:20:6a:43:f2:d6:e7:98:44:b4:
8e:43:51:bf:98:71:49:9b:b3:46:88:f3:d1:92:a4:
6b:28:a4:05:e9:83:1b:18:10:84:5d:ba:e5:66:c2:
59:f5:9a:ad:a1:5c:5f:9d:c6:83:e4:62:72:a6:40:
36:af:06:f0:a3:91:80:22:01:6a:14:a2:d5:82:63:
ee:90:0d:54:70:16:59:14:a2:50:06:fe:33:d7:35:
2d:29:de:f3:7e:a5:18:32:5f:29:3f:9f:0e:d4:a7:
d7:e6:3b:9f:20:31:e3:72:1e:4b:38:ce:a3:6b:76:
24:7a:92:3f:44:27:22:b0:a4:10:3c:95:5f:7a:7e:
40:70:19:1c:fe:40:e6:fd:a1:ed:e2:9d:5d:db:4e:
3d:99:1d:c2:84:7c:7a:b7:57:51:1a:a0:88:a0:f1:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:E2:4E:BF:6A:31:94:E8:FE:23:6D:06:98:1A:11:F3:35:48:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/64662a9f-ae72-3fb9-a8e4-64f83ece080a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:20:36:10:37:ec:06:27:85:79:aa:d3:d7:2e:80:57:6f:96:
8a:56:6a:66:98:e4:a1:23:9c:07:36:14:45:5d:0a:58:fc:40:
c3:fe:f1:f1:26:a6:2d:0f:ac:30:c8:96:74:1f:50:cc:02:cb:
6b:69:7f:c3:4d:31:bf:d8:e7:c4:d6:6b:f4:96:1a:a8:8a:a3:
2f:93:8f:74:27:9c:fa:a2:14:61:e0:f2:bd:02:c7:c5:9c:d7:
ca:ce:d4:fe:e8:dd:ec:cc:3b:68:8b:d0:a6:27:8d:eb:22:ab:
17:d6:8c:c4:79:6a:fd:51:1c:01:b0:1c:47:41:1f:c7:16:f7:
b3:c5:58:7b:ed:a0:26:07:4d:96:be:23:7c:fb:71:76:32:3e:
2e:4a:50:c1:8d:7e:95:51:57:51:23:cf:02:e9:41:b4:46:e4:
ca:7c:1b:e2:9d:46:90:17:64:61:b9:04:c1:3b:e2:6c:12:45:
58:07:4a:2c:7d:c0:49:36:18:9b:c4:2d:9d:a1:ea:f2:71:10:
24:df:48:08:83:67:70:69:30:8a:1d:99:57:3e:c1:da:df:e9:
37:8e:ff:1c:6d:78:ba:99:be:03:7c:cb:ec:c6:a3:e1:80:3f:
e5:de:f6:9e:20:4c:de:d0:ad:34:d1:12:00:94:e5:ea:0c:98:
33:1e:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:47 2025 by rpki-client