Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87c061b8-a09b-312e-ac7f-f54831114e3b.roa
File: 87c061b8-a09b-312e-ac7f-f54831114e3b.roa (raw, json)
Hash identifier: E4zjPRrCsnllBk+giXyPIeypGvU0XmSEXP9eiaraFco=
Subject key identifier: B1:FC:84:31:06:48:A1:32:DD:FE:27:A1:D5:CF:09:F2:6D:32:61:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C32359380BBEC73AE915280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87c061b8-a09b-312e-ac7f-f54831114e3b.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:32:35:93:80:bb:ec:73:ae:91:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=c9f03c72-ab65-4995-b91e-0560b217c9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:f0:eb:e2:e1:5e:bf:1e:bb:25:9b:37:8b:
88:4b:43:4f:5c:46:ce:98:d6:6a:7a:3b:78:41:a3:
ac:68:bf:b5:6c:8a:13:a2:e0:88:a9:8a:30:f9:f0:
ae:a5:68:0d:55:18:b1:82:37:62:3f:37:cb:ea:c8:
2a:55:c2:0f:41:2d:2b:90:53:87:cc:eb:67:96:c4:
b3:a6:32:a2:dc:b8:39:07:5e:5c:cc:30:c6:17:06:
7a:1e:7d:f7:20:d5:37:eb:9a:19:11:25:b1:5f:3b:
b5:53:28:47:23:1c:da:60:a1:b2:32:38:d9:e3:c3:
70:b4:a9:22:95:09:ad:41:b9:ea:86:e7:0b:40:d1:
9e:81:ba:5e:0c:67:41:f1:6c:09:f1:28:32:cb:50:
78:58:5e:72:4c:91:26:9f:58:01:d8:ee:7a:85:a8:
25:e4:b5:ad:6f:9e:5c:ac:7a:8b:f0:a2:f4:bf:16:
14:1b:79:4f:ef:84:f0:62:77:3b:7f:db:54:97:b5:
eb:8b:bd:af:7e:2a:c0:d9:d4:92:f2:a3:aa:ad:e0:
4e:0c:8c:ab:9c:fe:a3:b8:76:b3:8e:61:2b:fa:aa:
db:34:27:9a:73:3b:55:23:b8:f9:b8:18:38:25:09:
d5:59:50:c9:46:07:7e:ca:43:6f:d3:d5:de:bd:11:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:84:31:06:48:A1:32:DD:FE:27:A1:D5:CF:09:F2:6D:32:61:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87c061b8-a09b-312e-ac7f-f54831114e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:7f:5f:3a:84:99:c5:db:42:a2:cf:8c:42:41:8d:47:6b:1f:
fa:11:d6:b5:ef:f1:ca:8a:24:93:13:c6:84:bd:5f:f2:6d:c7:
97:83:b4:bb:d5:57:a2:5c:2c:61:c3:92:0b:75:41:8a:44:a1:
8a:f1:0d:61:89:33:80:66:97:f0:f4:b9:fc:ec:a5:a2:75:90:
f0:b2:89:d3:d3:80:b6:a7:81:e8:0f:de:1a:d8:60:4d:3f:86:
36:c5:1e:af:03:04:27:bf:06:94:8f:a1:9e:85:1b:fe:b8:7d:
5e:0f:46:82:dd:a3:e8:24:79:92:7b:7a:ba:87:77:1e:c3:db:
b1:f9:75:8b:eb:37:3a:4e:4d:43:b7:2e:63:75:12:b4:68:34:
f9:b9:64:86:6d:6c:6a:61:9d:66:74:76:b5:e6:e1:58:e1:63:
94:74:44:ae:c4:c1:aa:ac:61:6e:28:cf:b7:1f:dd:cd:93:ac:
cb:ce:ba:be:03:47:46:ea:f6:9f:e6:95:b8:28:c6:48:ca:d4:
e0:4f:a3:98:05:33:e9:21:d9:dc:64:8b:a8:96:5c:5e:fa:94:
5f:a4:59:85:73:0a:7b:5b:89:01:02:93:6e:6e:88:91:7a:01:
6e:d4:f8:69:d5:7f:55:8f:df:31:5b:60:66:dc:1c:b0:96:f4:
c9:4c:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:52 2025 by rpki-client