Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/709b118a-5203-3ea7-8124-919ab4240ec9.roa
File: 709b118a-5203-3ea7-8124-919ab4240ec9.roa (raw, json)
Hash identifier: fjPIoQKWCZPIfMhhHue7Qj9BFljhc4EkAqGlBu6ll9Y=
Subject key identifier: 5C:29:95:22:9C:9F:B6:E9:65:0E:04:11:2A:1E:46:21:58:5D:BF:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F307F6FA0A6559BB83F21B980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/709b118a-5203-3ea7-8124-919ab4240ec9.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:7f:6f:a0:a6:55:9b:b8:3f:21:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=18e7ffd4-bc71-4889-a065-401ec47c16c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:b6:f7:d8:c6:22:1c:2c:c9:f8:79:83:d7:
64:00:fa:79:f2:a1:ac:55:bf:a4:2e:7f:16:9b:14:
01:aa:f9:3b:2d:b2:85:fb:bd:be:b9:6e:47:26:07:
b1:7b:f3:a4:e2:a6:03:fc:9d:aa:e2:03:8d:c7:c4:
18:a9:16:cf:68:ae:dc:3a:cf:2a:a6:a1:7e:85:25:
5b:ad:c1:0b:fe:4b:62:81:d7:9c:e5:81:7d:68:1d:
d4:82:50:a8:aa:c3:81:00:71:10:74:07:53:27:c7:
22:21:d3:e7:61:14:4a:9b:1f:43:54:27:97:87:be:
61:60:d3:2e:d3:47:45:3e:95:87:db:e3:ac:a9:17:
5a:ec:d5:05:78:e8:03:c0:b8:01:c0:05:6d:de:58:
09:5a:1d:b8:ab:12:ec:a7:10:17:4e:4e:bc:b7:60:
ac:7a:11:21:d6:ec:b2:08:e8:93:d8:b7:a0:67:ce:
00:88:17:95:3b:c0:17:bf:ed:e7:22:0f:e6:31:75:
0c:d4:1f:f5:af:25:77:ce:91:d3:bb:ae:c9:83:7e:
8c:dd:89:3b:f3:87:d7:3d:18:c6:d9:0d:8a:86:b4:
8c:b6:c6:b6:73:74:86:34:3a:b0:ef:9a:d6:36:57:
f3:93:0c:05:ab:b4:51:55:0a:69:ff:75:7f:c9:75:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:29:95:22:9C:9F:B6:E9:65:0E:04:11:2A:1E:46:21:58:5D:BF:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/709b118a-5203-3ea7-8124-919ab4240ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:af:f4:8f:54:f7:c5:04:80:b4:2a:8d:3d:b4:cf:ab:84:34:
46:f1:15:88:da:9c:07:8d:54:94:92:e5:51:d0:2a:74:39:c7:
6b:d3:b2:7d:ca:5a:99:5d:e6:4d:ed:01:f1:d1:c1:bf:9b:45:
a3:03:ff:18:00:1a:96:9b:de:f4:ee:af:55:84:1d:4f:35:0a:
92:e8:c0:d5:a0:f6:1b:8f:da:dc:1c:04:dc:1a:86:c0:75:6a:
c0:4f:21:95:77:c5:0a:d0:c4:00:c0:72:aa:98:25:3d:5d:20:
41:d3:5e:67:63:12:8a:16:90:0a:06:2f:bf:f8:37:30:93:ad:
32:86:9e:b8:13:d1:28:d9:03:82:50:f6:0a:d7:32:83:3a:32:
2d:0c:de:cb:db:ca:c3:ee:66:ed:57:b7:a4:18:ca:ea:5c:ea:
3a:83:aa:1b:03:28:05:a5:9e:b0:29:e4:90:e8:3f:cb:e1:9c:
9a:0b:b3:aa:7b:67:ba:66:0e:ec:5b:20:34:3c:cd:fd:81:65:
ee:82:c6:b3:ca:71:02:b6:5a:c9:18:be:10:78:dc:c4:6c:1c:
2e:a8:36:73:ab:57:e7:1b:de:15:c9:1a:27:42:4e:a5:ac:82:
c0:17:dd:30:64:75:94:dc:0f:e7:8e:d5:07:0a:ed:51:18:2c:
8f:0e:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:32 2025 by rpki-client