Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72de33b3-9ec8-3e49-b582-613167f2f07b.roa
File: 72de33b3-9ec8-3e49-b582-613167f2f07b.roa (raw, json)
Hash identifier: 2P8WzutOdsxOkhs8L9g/zZGbzGoIyxJ4wcnE/EkZjT4=
Subject key identifier: A5:AB:14:69:EB:1D:8A:7F:84:B4:F8:4B:0B:C3:85:FB:26:BB:D3:24
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584034F90820318E6FC0260FBF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72de33b3-9ec8-3e49-b582-613167f2f07b.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:34:f9:08:20:31:8e:6f:c0:26:0f:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=c8313c56-d835-4601-8c7e-87e137ffe98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:70:96:7f:ea:d6:6a:77:22:97:e8:41:f8:
81:57:d7:f5:34:41:cf:ca:4d:b6:16:9d:fd:e8:b5:
25:45:62:8f:26:23:71:70:9c:f3:59:87:ee:a8:9c:
ab:90:91:62:50:b0:a1:89:5b:d3:fc:df:12:cb:e7:
cf:56:65:36:0f:96:d1:65:35:a5:8c:89:cd:79:34:
dd:00:76:bf:a5:49:d1:5d:b4:0b:f5:c7:fc:1b:a2:
81:f8:74:bb:fc:8e:82:e3:9e:9f:35:23:da:0b:2f:
f2:53:ef:1a:0e:8c:2f:a7:86:92:c0:44:11:9e:ee:
1b:f5:e2:aa:b5:46:35:81:4f:b4:c8:98:f9:a8:61:
d7:7a:ac:e9:97:58:31:2f:5b:0c:4e:29:f0:c3:71:
d6:dc:70:fe:41:75:af:6c:e4:e0:8e:89:02:17:a0:
3c:a1:26:50:10:73:8d:2c:7d:00:14:02:2b:87:a4:
cc:3b:46:a5:37:ed:1c:1a:f3:c2:43:ad:0f:ae:2b:
d0:74:ee:00:c2:77:7c:97:f5:a7:ca:ec:a0:f1:07:
54:37:ce:99:92:58:e4:59:78:17:4c:d4:9c:f5:0c:
02:41:4e:18:cb:bf:83:16:b4:4b:45:7f:84:04:98:
76:95:32:2e:b7:19:ad:2e:cb:1c:90:39:58:9c:a6:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:14:69:EB:1D:8A:7F:84:B4:F8:4B:0B:C3:85:FB:26:BB:D3:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72de33b3-9ec8-3e49-b582-613167f2f07b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ba:01:e0:59:38:cc:ff:80:f5:fe:a0:70:8d:18:8a:61:ca:
d1:2e:2d:ac:d3:ac:6f:b1:da:e9:c6:51:4c:7c:35:af:a9:d4:
6a:e2:64:c0:29:66:47:62:51:de:39:9d:13:6b:92:a3:c4:f8:
cd:58:d2:c4:5c:5c:3d:9c:b2:99:89:31:47:de:01:0b:e3:4f:
15:83:97:19:55:ae:c0:74:ef:d7:e8:24:0f:ec:3c:67:e5:48:
49:95:e2:19:50:95:f1:5b:cd:57:a1:18:cb:1b:6c:c6:d7:a2:
77:9b:20:88:d1:73:51:06:d8:67:d0:f2:a9:c8:6c:95:3b:15:
be:01:4a:48:c8:2f:8a:6b:f3:de:de:c6:9f:33:94:ff:f4:90:
47:10:d9:65:a8:92:fa:37:6d:00:c6:95:dd:67:e2:2a:b2:c3:
58:9f:21:a6:56:c5:20:c0:23:ca:eb:f8:5f:9f:9f:24:d3:f2:
c0:11:45:c2:90:e0:30:93:f1:a9:64:c8:3f:df:45:91:41:83:
a0:24:22:ce:75:06:60:f8:d6:ed:1b:89:f1:1c:87:cc:ec:ca:
fd:fc:58:48:f2:cd:c7:e4:8a:18:c5:80:0c:a2:f7:95:57:c6:
ca:79:81:35:75:9d:23:38:59:fa:9c:04:e1:f5:45:da:b3:fc:
6e:e0:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:46 2025 by rpki-client