Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/868efa23-9774-3b28-b5d2-5ece8c25e395.roa
File: 868efa23-9774-3b28-b5d2-5ece8c25e395.roa (raw, json)
Hash identifier: jZCkhJy/KMHPjxawtTbKdJ35ri5TpHLOp+X8PhvIq+U=
Subject key identifier: CB:91:92:91:38:17:E7:0E:CE:1A:25:71:28:34:41:4D:2B:86:D7:21
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCC74D18952DA549BD938D140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/868efa23-9774-3b28-b5d2-5ece8c25e395.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:74:d1:89:52:da:54:9b:d9:38:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=ef233a6a-dcb0-4773-9bb2-f593cf68d304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:fd:e4:64:32:80:8a:29:0c:dc:8e:35:22:
13:cc:09:ec:96:cc:dd:dc:a4:64:7d:62:9e:bb:10:
5f:c6:e0:6d:63:cd:fc:c8:2e:3c:80:5e:19:59:b5:
ff:22:34:cc:e7:b0:99:47:3f:19:bf:2c:88:39:95:
b2:bc:b9:76:d0:f4:60:e1:8b:6d:33:11:48:9b:4c:
d0:ec:74:73:04:14:91:ef:6f:55:65:bc:66:dc:16:
f9:29:89:43:86:22:8c:83:5f:b6:3f:18:bc:c0:6c:
d0:7a:2f:8a:df:00:10:87:2a:23:87:25:e4:11:45:
0f:0e:79:ce:f2:75:74:dd:bb:98:c7:e5:bb:07:83:
bb:ce:a1:63:3e:37:83:af:97:11:13:9d:91:7b:e5:
f7:26:f0:8f:bc:29:07:1c:a0:0f:36:af:ff:68:f8:
4e:88:42:82:26:43:fd:5e:eb:59:09:f1:7c:f7:f6:
2d:1c:f9:73:e8:c5:cb:48:a0:c5:d2:c0:39:50:7f:
4e:94:85:01:34:d6:c9:2f:9b:16:f4:e9:ac:52:98:
d9:42:47:ae:a4:e7:85:ba:90:7d:de:ad:74:d3:1d:
04:2d:46:4a:20:c4:b2:55:e3:48:0b:0a:ed:0b:1e:
84:68:1b:e2:e0:3c:ba:60:19:f8:0d:94:33:69:10:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:92:91:38:17:E7:0E:CE:1A:25:71:28:34:41:4D:2B:86:D7:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/868efa23-9774-3b28-b5d2-5ece8c25e395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:26:3e:c7:fb:ff:3c:cd:01:b6:e5:53:0a:92:8b:19:da:27:
12:57:7e:8b:06:50:57:5f:40:d8:48:f7:d1:ec:ef:a1:b9:bd:
60:1a:48:76:00:4c:a8:8f:6f:49:35:08:e1:8a:f0:67:7f:08:
f0:96:2a:4c:07:f4:9d:2d:03:64:27:7f:59:14:c3:a7:7c:2c:
0c:74:94:d0:e8:d0:ec:5d:91:5f:ce:ce:c9:26:60:92:66:bc:
c9:d9:06:ff:e3:58:59:32:3b:ab:a9:b7:03:2f:b4:98:2b:c9:
2b:e4:41:aa:41:2e:0c:e9:b0:60:15:e0:cb:f1:81:5b:be:e0:
81:53:8b:64:c3:4c:34:64:f2:ad:ab:a3:b9:95:82:2f:06:c8:
b1:e1:5a:36:c9:e3:93:23:38:61:49:1a:ff:b8:4e:ab:4b:43:
cb:dc:a8:1a:3c:5a:c9:63:ee:85:f4:67:65:3e:03:56:9c:5e:
7a:26:35:af:33:f7:2a:27:7f:26:50:aa:86:91:35:62:6b:36:
6d:16:3c:f6:fe:5c:d6:64:98:0c:1e:05:f6:26:9b:42:8f:72:
58:45:51:e9:0b:fb:cb:d8:be:d4:17:b8:e4:70:ad:d5:fa:8e:
a1:f2:c1:1f:68:a6:28:8f:6d:90:3b:e2:19:22:f6:50:6e:9e:
06:50:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:57 2025 by rpki-client