Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8159d33c-51ea-3285-a73d-60d3b29ff756.roa
File: 8159d33c-51ea-3285-a73d-60d3b29ff756.roa (raw, json)
Hash identifier: Ec1DuWdSuORPHkspFn6wu8k6muXJwnvfoOl5Xd3CIZw=
Subject key identifier: CF:3F:51:AF:4A:ED:D2:30:0E:CA:09:A9:3E:8F:0C:2B:90:0A:F1:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840386ED1F3C8FEA686BF7983C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8159d33c-51ea-3285-a73d-60d3b29ff756.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:6e:d1:f3:c8:fe:a6:86:bf:79:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=b302d991-fa66-4a70-ad5b-3ec795134ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:16:55:3e:f7:71:e3:76:7c:1c:24:c7:79:
f8:6c:fb:c5:eb:67:a6:b7:c9:59:8d:e4:ad:3a:c0:
82:91:a0:51:34:8d:64:37:bc:08:90:bd:d7:98:28:
58:38:31:1a:99:63:37:12:49:9b:1a:a9:52:d3:9f:
e9:1d:fe:c8:70:4c:cc:bd:8c:a8:9a:fa:8d:44:be:
03:e0:ae:66:4a:55:e4:1f:91:91:dc:a4:2d:d1:36:
25:a9:da:86:3e:51:cd:2e:bc:b3:d1:88:63:68:b6:
7f:41:71:0e:0f:72:19:55:2a:a1:28:fe:3d:0a:bf:
f7:cb:bc:7c:23:ea:d2:73:1e:69:7c:c7:c4:e8:d7:
4f:4a:b3:dc:fd:e0:ac:e4:77:a8:6d:dc:55:fc:b5:
0a:c9:2e:eb:c6:c4:cf:f5:67:78:94:8d:e1:96:73:
be:3b:25:6f:2a:ff:2d:f9:10:a0:43:6f:de:fb:3d:
e8:fb:0d:4a:91:93:8c:34:b0:6e:5a:9e:dc:bc:60:
6c:ae:2c:83:31:cb:4c:64:70:69:f1:42:b2:90:5e:
d0:71:69:f8:1e:72:e8:ca:e2:76:12:48:68:f4:91:
88:b5:f2:4a:dc:7a:ff:89:fc:94:6b:fd:b8:e9:e9:
cd:24:52:a5:47:b4:a4:bd:75:fa:3b:d6:d5:f6:44:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:51:AF:4A:ED:D2:30:0E:CA:09:A9:3E:8F:0C:2B:90:0A:F1:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8159d33c-51ea-3285-a73d-60d3b29ff756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:74:81:50:e4:8e:96:66:8a:ee:4f:de:e3:b2:57:3d:57:45:
a3:db:84:a3:3a:a9:8d:af:35:c2:c0:4c:c7:57:73:eb:6b:06:
77:bf:ac:ae:e5:1a:23:54:7a:80:ad:9b:57:33:00:b1:07:0b:
9e:9e:9d:8f:bf:98:c4:4b:bc:a3:58:a6:fe:5b:0d:c7:d4:0d:
0b:a3:52:71:41:6e:25:9a:45:e6:da:fd:f0:de:ca:6c:aa:1a:
ec:f7:00:d8:ea:93:29:fa:42:44:12:67:34:1c:40:3d:28:1d:
6d:15:a3:a4:35:89:00:66:a6:78:cb:5a:ac:e6:78:3a:75:6d:
c4:79:9a:84:79:00:32:e0:93:4e:89:81:c6:4d:b0:f3:16:ef:
6f:f7:f7:d6:7a:a6:3d:41:e2:32:bb:9f:49:f6:48:5c:b4:e4:
1b:12:21:f3:ed:98:2f:65:e1:df:1d:3c:3f:67:fd:a4:c2:b5:
b5:f8:1a:27:57:d1:cd:b3:6f:ef:d6:a7:15:1b:dc:5e:04:56:
3a:43:a0:e4:d1:d3:d2:b0:21:0d:5d:50:3d:a7:8c:af:c5:aa:
20:41:d5:02:db:a6:7f:46:99:a6:72:64:43:86:bb:ac:7e:d0:
f5:14:57:84:b0:8a:d4:9d:fc:dc:0a:49:41:14:a1:a3:de:d8:
52:a4:1f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:29:04 2025 by rpki-client