Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e747ad-1337-3e5d-9fda-885a3d22a0c5.roa
File: 85e747ad-1337-3e5d-9fda-885a3d22a0c5.roa (raw, json)
Hash identifier: ij+OWC+CaWQLijCdQBhsqz2PevTGYdbZvOUqkEXny8U=
Subject key identifier: EC:0F:9A:CB:27:50:1A:0F:94:18:94:D0:4E:3F:50:AE:8E:83:80:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD0BD4194FCC8ADFEC3EDD3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e747ad-1337-3e5d-9fda-885a3d22a0c5.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:bd:41:94:fc:c8:ad:fe:c3:ed:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=ee1e16b5-53d1-420e-b2ad-ba250a056576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:34:fb:06:66:cf:61:3a:36:d8:3a:cc:c9:
45:55:40:85:e4:c0:dd:5d:14:97:76:32:dc:f6:80:
5b:42:1f:37:41:2f:ed:95:82:77:01:a2:1e:ad:ff:
48:29:76:e3:e0:8a:9b:36:be:af:2e:b8:e6:7e:9d:
d0:13:0a:76:81:ca:42:60:1f:b4:46:95:70:46:80:
b1:ad:6c:8e:d9:b5:12:c3:f8:91:1e:6d:19:a0:66:
71:14:46:d4:a7:2b:78:a8:52:72:37:7b:94:1c:a0:
2d:f4:5c:79:d3:be:93:49:83:23:37:0a:a9:c3:c1:
42:8a:64:be:45:44:d8:ee:f5:48:dc:bc:31:38:37:
6f:12:fc:a8:e3:22:df:d5:9a:95:77:c6:c3:f6:31:
d0:69:c5:c2:af:68:d9:a9:9c:f2:fb:e5:f8:6c:ff:
77:ac:1e:93:a8:15:d8:6d:5a:fc:fd:0f:7b:f6:24:
8e:be:fa:ea:55:67:2f:e4:1d:16:34:2e:da:46:04:
63:43:6a:12:fa:b3:75:40:53:75:39:c7:a4:fe:da:
46:0d:55:b7:0c:84:58:ec:df:5c:35:4b:06:86:91:
75:0f:83:85:61:11:b3:1e:a4:de:a2:e1:fe:1a:46:
02:69:a1:1c:b5:3f:37:3a:5f:94:9e:a0:36:27:85:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:9A:CB:27:50:1A:0F:94:18:94:D0:4E:3F:50:AE:8E:83:80:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e747ad-1337-3e5d-9fda-885a3d22a0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:43:a3:dc:82:d9:47:79:da:d5:9a:36:77:b8:af:ba:8d:b7:
06:88:9a:13:1b:ad:ea:3f:cd:1b:20:b0:61:4c:38:54:94:94:
bf:89:50:fa:77:50:36:5a:2d:b8:87:ac:12:6e:5e:59:38:23:
c6:26:38:cc:2b:6d:3d:4d:1c:f9:16:fc:37:d2:ff:b6:f6:e7:
70:7f:4b:4c:60:18:84:f3:aa:50:b0:0e:d9:c5:1d:a6:c3:f9:
6a:d4:66:2a:a6:d9:ea:71:34:ff:95:67:25:d0:9b:4e:3e:ef:
b3:8a:91:c3:68:da:53:31:73:f3:ef:3d:72:78:7d:9e:95:65:
c4:c9:02:64:49:03:46:56:63:b3:31:ee:98:0d:ed:55:a3:52:
d3:04:40:3b:3e:79:eb:ae:61:f1:5b:ec:f9:4f:e0:13:42:46:
90:c4:fc:1c:97:00:78:b6:91:2f:66:ed:f3:8c:bd:d3:9a:ed:
66:1c:99:6b:73:67:9f:8f:7e:41:9b:ce:3f:eb:12:39:de:8f:
d6:44:c4:2b:87:5a:3c:28:1b:bd:54:e0:91:db:16:b8:c5:8e:
75:68:a9:d2:a3:76:a4:f3:09:b6:2b:95:a4:07:04:cc:ae:84:
89:0a:0f:ed:02:46:db:8f:05:ab:3f:f5:69:2e:2d:e6:bd:37:
79:c5:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:43 2025 by rpki-client