Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6988bbd5-3067-3582-aded-d9eb7744bef6.roa
File: 6988bbd5-3067-3582-aded-d9eb7744bef6.roa (raw, json)
Hash identifier: tpMWD8UQNd7NyHvz/4Sj+7qykY4EMRiy+QFoecYTuYc=
Subject key identifier: 2A:65:64:CD:9E:21:C0:EC:10:2E:1E:F9:90:C1:7B:C7:18:4E:81:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401B00C853AF0AF065E20F5200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6988bbd5-3067-3582-aded-d9eb7744bef6.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.5.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:00:c8:53:af:0a:f0:65:e2:0f:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=e6c62ed8-fb37-4225-89cd-02e22ce13202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:08:ef:8b:84:91:7d:1d:d3:5d:4c:aa:85:
ee:9b:0d:af:d7:53:76:bd:da:2d:24:0f:f9:35:2e:
58:5d:4e:e6:4a:16:f7:db:f0:eb:ce:cc:d7:6d:ad:
63:fb:2d:b8:53:af:f7:e5:c6:18:4c:69:af:e7:d2:
cb:c2:3f:e0:0d:d7:8f:ef:b7:7a:cf:07:e7:73:5d:
39:bc:6f:0a:f1:ae:6e:f3:aa:a3:8f:53:94:e8:89:
36:6a:a1:d0:c8:c0:e6:b4:90:84:0c:61:40:19:0a:
34:ed:71:ae:bb:f3:0a:af:49:20:b5:c0:08:79:a3:
49:76:26:c9:aa:43:6e:9d:05:f9:11:ad:e1:7f:56:
a3:44:ef:8a:8c:af:6c:45:a4:40:b1:b6:83:d2:8d:
da:f9:63:53:5f:e0:d8:45:05:0e:56:8e:4f:7a:0c:
9d:41:e2:1b:ef:d4:50:bb:24:ad:88:50:4f:ca:a8:
78:52:c7:5c:c9:4b:ba:76:91:fc:19:cb:07:fa:77:
94:e9:5f:b9:14:f9:84:d3:ea:34:55:cb:63:20:b8:
5e:6b:84:b8:f1:7c:e5:d9:96:eb:5f:41:ee:81:91:
c3:53:43:70:6b:f0:56:00:e1:5b:e5:14:30:8a:cf:
7c:fc:64:df:f5:30:bb:03:8f:36:5a:3c:36:d4:af:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:65:64:CD:9E:21:C0:EC:10:2E:1E:F9:90:C1:7B:C7:18:4E:81:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6988bbd5-3067-3582-aded-d9eb7744bef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.5.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:a8:bd:ef:14:ea:a3:4d:22:42:20:5c:05:d2:3f:73:df:8b:
40:a7:b8:7a:34:0a:80:ac:b4:90:38:cf:48:1d:41:22:dc:fa:
58:92:ce:0b:e9:5e:40:cc:8d:d7:bd:25:28:f8:15:f9:d2:db:
dc:ce:c5:94:ec:be:09:e2:a2:d7:77:ca:93:49:cf:12:27:da:
36:00:04:5c:8e:cb:c6:54:00:9f:ee:51:04:7c:a4:39:c5:d3:
c4:3d:14:5e:4a:61:f1:b3:06:74:07:a6:88:e2:4c:76:c3:2c:
d3:7f:df:db:8f:ab:f6:53:05:74:47:b1:f1:10:ac:04:82:c8:
c8:68:a5:6c:c5:3f:fa:17:c6:42:f6:1a:5e:f1:8c:c5:3a:65:
c2:f9:53:83:bd:3e:a8:8b:db:d9:27:4e:3e:cf:10:25:e7:31:
c6:08:e7:75:91:4f:be:8d:c0:10:72:b3:1d:1d:bc:d6:d7:2e:
10:c8:76:d9:09:03:11:45:52:a9:12:51:6b:eb:3a:e8:0a:35:
6a:97:15:5b:9c:76:cf:a0:6e:27:2f:a1:41:ed:97:7b:39:46:
cf:9a:d5:f7:8d:89:d9:61:0b:c7:22:03:24:03:98:13:04:11:
5d:aa:82:aa:e0:3b:99:2e:38:77:1b:c1:af:ec:23:7c:26:2a:
cf:31:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:33 2025 by rpki-client