Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8955eb77-f80a-34c3-ac12-e58ddb26d596.roa
File: 8955eb77-f80a-34c3-ac12-e58ddb26d596.roa (raw, json)
Hash identifier: aM9Zh2D4IDeHdoNT71H1aycVu5UCYYRXL4JiF2BrgfM=
Subject key identifier: 91:1D:E5:83:73:59:D9:D8:19:59:39:6C:18:A6:9E:E2:75:86:16:E3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D826D0E4452578B770D123920
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8955eb77-f80a-34c3-ac12-e58ddb26d596.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:82:6d:0e:44:52:57:8b:77:0d:12:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=a2a01589-b946-44b3-ae54-f6a4b1a26f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:55:29:68:dd:72:9c:ea:0a:5c:59:1f:ab:
28:a4:34:8b:47:6b:9a:d3:d4:90:bb:c7:d6:4d:9d:
83:1b:f7:d1:94:c1:d9:5e:fc:64:42:69:9f:e3:29:
c0:8a:d7:3d:1e:75:ee:db:cf:6e:1b:43:b4:30:5c:
0e:f5:5b:e4:0c:38:c6:52:dc:06:11:1c:c4:b3:bc:
ce:44:c7:04:ac:06:20:d7:d2:9a:21:2c:17:f9:bf:
ec:28:7d:de:e4:6f:f8:f4:d1:04:b1:d8:36:84:fe:
9d:bb:28:ae:a1:2f:5a:9b:9e:df:68:42:97:50:6b:
61:95:fa:5f:40:6d:f4:33:1b:c4:e6:51:c6:2d:d5:
cf:e7:56:ea:1f:85:df:e6:71:d2:dd:24:2c:87:9c:
a1:fe:9d:dd:ca:84:28:00:ce:74:5b:99:9f:70:d6:
0e:b1:9f:2f:6c:0a:66:05:f7:a1:03:f8:2b:88:37:
d1:cf:a9:1d:9c:1e:fb:58:11:e1:27:0c:40:73:ec:
41:05:92:eb:64:37:56:b5:de:a0:86:3b:48:f0:a8:
ad:d0:87:73:75:00:24:c2:ac:8a:59:80:8a:10:4b:
d3:11:77:f6:ac:ab:3d:d3:d1:af:dd:98:98:7b:59:
e0:90:9a:7c:6f:d2:71:aa:04:79:80:b4:f6:87:ce:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:E5:83:73:59:D9:D8:19:59:39:6C:18:A6:9E:E2:75:86:16:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8955eb77-f80a-34c3-ac12-e58ddb26d596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:91:b7:4a:1a:51:89:72:95:27:ae:4e:4f:a2:81:fc:bf:c4:
ce:32:64:54:bb:6f:e0:6d:a3:d3:0b:56:c6:c5:81:54:85:7b:
15:e5:74:a9:92:e1:fb:60:e4:f0:c1:09:7f:28:ce:c9:82:60:
ac:7a:a9:d0:ec:07:0a:26:f2:e9:9c:0a:f4:1b:f0:32:99:85:
7e:cd:6b:6d:56:49:e8:d0:ff:9a:b9:3a:95:9b:d9:59:8c:33:
59:37:a9:74:1f:98:0a:a5:ed:17:df:86:19:a8:e8:af:bd:c3:
c0:d3:dc:b4:3b:84:ed:2e:7e:eb:19:89:fe:46:42:8a:9e:5b:
5f:67:20:db:99:a4:66:1c:a9:40:6e:49:58:a3:73:9b:ce:55:
e7:e0:3e:e1:aa:4b:00:98:7e:28:25:3e:40:fc:91:4f:b1:91:
da:9a:9d:84:1c:a2:96:70:a8:be:69:ae:66:9b:b1:53:5b:32:
d5:e8:ce:a6:a7:fa:63:a2:6b:60:4e:06:12:61:f3:29:57:d7:
af:10:db:c9:2e:d0:40:5b:5d:43:15:1b:e8:f7:b6:ca:b5:ce:
27:ac:9c:82:5f:a0:c7:ec:1d:1f:eb:6c:bf:57:fb:48:50:25:
22:60:47:ab:29:09:a2:e6:8f:07:4b:55:34:9f:b5:97:7c:74:
73:6b:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:04 2025 by rpki-client