Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85de4a52-32ed-3b3f-84ed-6b721405742a.roa
File: 85de4a52-32ed-3b3f-84ed-6b721405742a.roa (raw, json)
Hash identifier: Rfds6vyAr1A9xJTlal0/ogISpTuNuZIerZYPuXHX5dg=
Subject key identifier: B9:63:0B:B8:BF:1E:C5:CE:26:9D:3F:14:29:65:E6:8C:80:86:42:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCC6D84AEDF43E72B493EDD50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85de4a52-32ed-3b3f-84ed-6b721405742a.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:6d:84:ae:df:43:e7:2b:49:3e:dd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=c2c20ea1-d3dd-42a1-bade-99b3a9618baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:c5:06:53:79:ec:3b:81:a7:ca:24:3f:fc:
cf:20:59:88:eb:4f:6d:24:b7:25:11:2e:b7:0a:f6:
44:f2:70:fe:bc:b2:3e:68:99:8f:84:dc:5a:15:fa:
e5:f0:f3:64:df:9d:3c:e7:24:42:d9:ec:81:53:3b:
1b:0c:30:fc:aa:63:7d:18:d2:62:3d:f0:a3:db:ea:
7e:f6:b5:fa:0e:d4:aa:d0:bc:41:80:22:5b:80:a1:
be:01:a7:17:95:6b:d8:c3:34:b0:ed:68:90:73:6f:
6e:f2:ef:2a:ed:df:33:bb:4b:61:4c:7d:4f:ae:74:
9e:df:0b:ac:4d:fc:17:56:3a:9a:34:cc:f8:e2:87:
e2:b9:4a:c3:39:a3:9e:b2:8b:d2:e7:01:79:f8:be:
c4:b3:65:b6:df:17:bb:eb:43:d0:22:8d:e1:f8:aa:
7e:60:51:d2:6d:d0:78:ce:7b:6c:40:27:0e:93:06:
7d:f0:f2:ef:fb:6a:4a:38:f1:3c:94:3c:46:0b:11:
df:79:a7:0a:2a:8c:3b:87:ba:bc:bb:38:b0:2c:cd:
39:4f:c8:f6:85:4e:20:da:67:74:87:a5:8a:2e:c6:
bf:cc:47:36:ab:51:69:ed:5e:8e:0d:f9:ce:21:a6:
fb:85:59:5b:64:6b:92:e1:43:48:36:c9:ee:41:4f:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:0B:B8:BF:1E:C5:CE:26:9D:3F:14:29:65:E6:8C:80:86:42:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85de4a52-32ed-3b3f-84ed-6b721405742a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:95:48:71:c5:7e:67:83:d3:69:01:13:af:02:9a:27:2b:f7:
70:98:0e:48:8a:f1:ae:ec:a0:1f:84:c3:d1:ea:a1:88:8a:90:
86:2f:bf:19:a4:64:70:c4:37:d0:ee:1d:6e:8e:86:94:7b:9f:
67:41:e7:c4:ab:1f:96:30:0f:be:f3:3a:2b:b6:38:69:98:fe:
25:fc:7e:ad:7f:ba:18:17:ab:21:b1:36:11:2c:9f:0b:8a:03:
77:fb:0a:08:dc:b9:53:66:1a:27:7d:ba:31:92:6c:74:61:28:
20:39:0f:1d:9a:2b:3c:ba:ee:73:1d:73:8d:58:a0:53:8e:9e:
08:75:63:19:a0:d5:7b:57:6e:8a:03:e9:f6:05:6b:70:89:69:
c1:b4:2c:f0:20:90:93:78:bd:bb:73:91:7d:50:39:79:36:b3:
d1:89:46:3e:79:af:fa:ac:37:8d:c6:bd:7a:50:5e:4f:c9:79:
3a:82:d2:08:00:b7:bd:2a:a2:00:21:2b:d5:d1:12:f1:55:1c:
a4:02:33:95:37:1f:a9:f7:be:16:10:f7:78:89:5a:64:e7:3e:
37:74:f5:21:a5:56:a6:18:b3:7b:8e:57:2a:f6:08:22:25:78:
f4:fa:83:cb:38:5a:d0:07:c4:e7:f8:8a:18:44:51:86:83:fd:
2c:88:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:06 2025 by rpki-client