Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a5a0186-1bca-363c-8c64-9da5b69cfe54.roa
File: 7a5a0186-1bca-363c-8c64-9da5b69cfe54.roa (raw, json)
Hash identifier: qpjUhhEWdcrEbeOTlt1yQywTlj8P4N0d1G2DO76vA5c=
Subject key identifier: 4E:D2:9E:58:EA:0E:65:D9:F4:F4:D8:93:98:F0:7E:84:46:2C:82:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9BB0623D23B25CBA75F4CB40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a5a0186-1bca-363c-8c64-9da5b69cfe54.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:b0:62:3d:23:b2:5c:ba:75:f4:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=d8ee427d-d532-43e6-aaf9-75f31cfcd31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:db:b4:08:bf:b2:79:e8:38:d1:05:3e:6e:
d2:c1:6f:d9:df:d9:ea:eb:58:f8:a3:ec:84:42:10:
06:cd:89:e7:98:d2:f2:11:39:f6:da:81:81:0d:ee:
b5:15:fe:d0:bc:48:a1:c6:99:30:31:5d:e7:47:77:
e9:b9:fa:34:32:92:8c:b5:c0:c3:96:69:98:05:cd:
96:3e:41:54:20:a2:4c:b5:9f:62:35:3e:98:b4:f4:
17:00:8a:0f:84:17:9d:a2:68:fd:e0:07:b1:95:ee:
d7:60:3b:f3:79:a6:ba:00:f6:57:1c:a3:d5:26:08:
5f:2f:20:37:22:a6:ab:b4:cf:2d:ab:de:49:d6:e8:
89:6c:0c:73:0e:e6:a8:ba:43:8c:b2:fc:eb:b8:49:
f6:36:c1:28:43:ae:86:37:bb:5e:cf:c4:1d:db:e1:
e3:4c:60:f2:50:f5:1c:76:a2:b9:4f:9d:81:3b:26:
6b:24:2c:1e:74:d2:c1:7f:75:c5:79:db:29:2b:df:
7b:19:8e:1d:5c:13:4b:74:d2:cf:af:28:90:8d:6c:
3f:8b:cd:ba:ed:d4:15:25:05:0e:57:cc:1e:0b:84:
aa:39:88:de:e3:d7:da:88:9f:45:b8:23:11:e8:5e:
10:56:73:09:51:00:11:e7:bb:70:ce:96:e4:55:0d:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:9E:58:EA:0E:65:D9:F4:F4:D8:93:98:F0:7E:84:46:2C:82:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a5a0186-1bca-363c-8c64-9da5b69cfe54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:c5:59:32:ac:df:53:da:a4:b5:b3:94:a6:ff:51:23:92:be:
82:95:4f:0e:72:4e:01:05:44:fc:71:9a:92:c6:45:2d:3e:c5:
10:07:4f:8f:4b:5b:09:d0:89:39:72:0e:84:fd:b5:14:a3:4c:
00:1f:30:82:18:e3:4a:6d:e4:bc:ba:62:03:8a:25:b2:d5:10:
85:cd:bc:fd:03:6a:c0:7e:8a:c2:b1:12:be:d2:6d:87:8c:1f:
63:18:83:a4:33:15:8d:96:43:bd:d1:8b:16:3c:7f:b9:66:b5:
a4:06:3a:4d:18:47:4c:bc:c8:38:f3:55:08:20:29:8a:63:73:
60:73:90:b6:b8:98:b6:59:0d:46:93:3e:c5:ff:5a:a5:f4:4c:
29:08:38:e6:20:29:36:a9:a3:8c:73:45:5a:34:ec:83:a1:cd:
90:fa:bc:8e:48:02:4f:50:55:35:81:77:6b:16:47:73:3c:af:
de:24:a5:3e:1c:58:b9:25:66:dc:80:88:73:84:83:dd:6d:4b:
bf:2a:c5:56:7b:2f:ca:03:fa:b0:c0:8c:e0:3f:05:63:73:3b:
19:50:3d:90:b9:2d:12:c8:ee:9f:f2:9c:b7:a1:c2:9f:2b:73:
f1:50:24:75:6c:74:e5:fc:12:eb:23:d5:a2:e4:ee:3e:f7:d5:
7b:d5:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:36 2025 by rpki-client