Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85b05caa-d7d3-3a0e-a4b0-346d6944b01d.roa
File: 85b05caa-d7d3-3a0e-a4b0-346d6944b01d.roa (raw, json)
Hash identifier: /2h5upKwaxtgBmm+vGFRbTbNdTj+iOUi/yi4olRmU20=
Subject key identifier: 61:DD:AF:1E:31:12:A9:66:5F:EF:6B:59:10:EA:B4:63:81:4C:69:A6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AAA97D64FF4483B4163EDF40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85b05caa-d7d3-3a0e-a4b0-346d6944b01d.roa
Signing time: Sun 22 Jan 2023 12:00:00 +0000
ROA not before: Sun 22 Jan 2023 12:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.46.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:aa:a9:7d:64:ff:44:83:b4:16:3e:df:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 12:00:00 2023 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=ffeca27b-fe03-4095-8643-d4626f7b8da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:df:40:25:da:31:e1:4f:05:64:98:9e:61:
7c:a8:da:e0:2a:04:20:70:30:c4:03:b3:8e:71:11:
2e:ad:10:a2:09:e6:ac:db:5e:7c:03:53:22:6f:a6:
a6:96:a8:c8:09:1d:5e:64:91:2b:7a:03:d5:fc:f8:
df:ef:e8:65:7c:da:82:98:96:98:97:82:3c:eb:63:
9e:6d:3f:2e:9b:05:f8:d2:fb:a9:0e:26:bf:92:79:
fd:4f:f7:7b:ac:07:dc:b1:b3:8b:df:3a:87:b0:c9:
c2:6f:c1:bf:c0:47:9f:f2:5d:12:d1:28:d6:ea:2c:
68:da:43:ca:35:80:22:6f:6e:de:2e:ee:af:98:1f:
20:80:70:9d:82:d8:f2:a8:c3:e7:c6:2b:53:01:17:
e6:6b:a6:e1:4f:11:e7:07:37:f9:63:e3:bf:58:a8:
fd:e6:81:02:fd:ff:bf:fe:a5:53:20:a4:07:55:be:
4e:23:ca:d7:dd:21:aa:04:fd:72:f5:c8:66:96:b3:
e6:21:da:67:d2:36:2a:42:25:6b:34:a7:d2:85:35:
8d:a9:5b:4e:ef:06:3f:f4:73:2d:47:8e:49:54:f2:
24:4d:82:e2:aa:2d:f1:c1:c2:7b:14:dc:d6:4d:14:
75:29:33:8c:96:fe:03:ef:f7:71:65:e0:85:98:37:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:AF:1E:31:12:A9:66:5F:EF:6B:59:10:EA:B4:63:81:4C:69:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85b05caa-d7d3-3a0e-a4b0-346d6944b01d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:66:af:1a:98:cd:84:00:b8:19:cf:37:a4:a1:49:9d:db:45:
4b:eb:46:51:36:b0:b9:b5:f8:78:55:6f:de:95:22:68:9d:6f:
0f:25:b4:6d:8d:fa:c8:e2:ed:53:b9:39:ff:f7:ad:68:85:b6:
12:22:8b:2c:23:29:10:6d:31:e1:9a:70:51:7f:66:b3:82:e5:
3e:0f:c3:3b:05:05:65:8f:60:33:b9:dd:bf:f4:83:34:ac:49:
eb:61:72:67:56:c7:a1:b6:55:c6:33:f9:36:d4:90:14:bd:cb:
62:c4:f6:4e:9b:44:de:98:f6:87:44:81:b3:ec:c6:21:95:40:
ed:c3:06:b3:df:76:35:66:a7:a9:27:71:4f:d4:56:f1:31:08:
4b:3c:d7:59:75:80:fd:1e:92:03:12:34:b5:64:21:5f:b3:cc:
25:dc:8a:59:92:97:06:cc:41:e6:32:22:cc:f0:16:4f:96:d6:
b3:46:d8:2d:38:6c:5e:40:49:fd:d2:7c:b6:fe:b0:31:d4:d4:
89:11:d3:d5:c1:c1:34:97:8a:c8:2e:8a:8b:91:1a:52:b2:02:
f2:af:dc:ad:55:6c:33:18:29:78:84:28:26:35:06:9e:64:a8:
28:b4:e8:69:a6:e4:c9:55:4f:e6:11:46:4d:6a:b1:ce:72:8a:
93:98:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:55 2025 by rpki-client