Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b33f13f-3fc5-3b1a-99fe-2a568ab9348d.roa
File: 8b33f13f-3fc5-3b1a-99fe-2a568ab9348d.roa (raw, json)
Hash identifier: fKfdZ+ED8rYBN+ODFwq4lX8DJU+rw408xo1DQ6+yplo=
Subject key identifier: E4:C9:36:8E:31:C6:E4:DE:E9:64:28:C5:AB:8F:E9:43:77:5B:AC:BF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F23796322B8A6BCAF6DD030
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b33f13f-3fc5-3b1a-99fe-2a568ab9348d.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:23:79:63:22:b8:a6:bc:af:6d:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=b3c069fd-d724-46b2-bc58-fa6a6f441506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:ae:fe:68:00:34:14:49:69:8d:60:7b:3d:
c3:fe:29:03:65:ef:8f:f5:82:cf:53:d4:e9:c6:fb:
eb:95:0c:03:b3:7c:84:00:8c:94:56:93:82:b4:bf:
8d:4f:21:80:a7:de:61:c4:2a:62:d8:4c:03:e8:a7:
54:5b:6a:2d:f4:50:31:76:8b:9c:1a:c3:71:15:c6:
c9:c3:d6:84:a3:a6:67:f5:9e:22:90:37:aa:a4:fb:
b6:ed:33:6e:18:f4:45:8c:42:99:e7:d6:34:05:29:
02:14:8b:5c:5c:ef:1c:b6:23:f3:79:da:b7:35:dd:
e9:10:f8:ea:fe:ec:bf:79:b4:18:e5:04:5b:0a:51:
fc:62:a3:ec:e0:4c:aa:b7:89:90:0d:17:56:3a:a9:
39:cb:15:9b:9c:a9:77:2d:74:dc:f6:3a:ae:af:7d:
41:71:29:22:2b:9a:a7:96:c4:23:82:c5:61:49:e8:
a7:fc:4d:01:3f:af:3f:4e:da:f4:39:7a:e0:36:07:
04:f1:77:26:9c:fa:49:dc:66:fd:79:03:b4:50:3c:
cf:94:4e:2b:3a:39:ab:41:3f:a6:23:88:d6:d5:39:
e9:86:83:e7:64:6f:75:81:70:8f:03:f6:cd:bb:26:
e3:cb:f7:1b:dd:f4:69:1c:83:7f:09:9c:5c:df:36:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:36:8E:31:C6:E4:DE:E9:64:28:C5:AB:8F:E9:43:77:5B:AC:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b33f13f-3fc5-3b1a-99fe-2a568ab9348d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:40:41:67:99:d1:63:d0:84:75:92:42:af:36:b4:c8:bb:ba:
c8:9f:5e:54:9b:36:92:29:4a:f4:31:ec:da:68:9b:80:96:08:
61:41:30:f3:07:1e:c3:db:ed:fb:aa:06:91:cd:c2:b2:f5:ec:
57:0a:ab:f1:4b:29:58:43:51:57:f4:7a:92:14:37:d1:a5:dd:
2f:e7:2c:03:d6:99:6a:66:e9:0f:ca:30:8d:c2:9a:96:6f:f8:
6d:82:19:8f:9d:ff:20:f7:ae:b1:b4:44:91:00:81:8a:f2:35:
13:27:cb:4a:23:80:5f:73:0c:33:f6:4e:09:77:b9:2a:21:6d:
c2:14:6a:e5:31:65:c6:c7:fa:d2:0a:68:d4:14:76:87:48:80:
e9:3a:7f:9d:54:45:e2:b9:4c:62:76:1e:4f:cc:92:00:b9:fa:
82:90:1c:c1:01:12:1f:d6:a8:50:86:66:42:7e:74:23:11:70:
61:43:9e:ec:8f:ba:fb:9d:fd:c2:d2:cd:7c:35:8e:ff:ba:b5:
22:e7:d3:5e:64:1e:a9:f6:09:e7:db:3d:d3:8c:fa:80:b7:23:
d0:35:37:8f:a3:bb:0a:af:9b:41:ec:24:7e:d8:0a:97:06:fc:
3f:8a:0c:fd:d2:ec:94:8e:7c:31:54:18:7e:fc:53:6d:75:f8:
20:f7:ab:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBfI3ljIrimvK9t0DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YjNjMDY5ZmQtZDcyNC00NmIyLWJjNTgtZmE2YTZmNDQxNTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyziu/mgANBRJaY1gez3D/ikDZe+P9YLPU9Tp
xvvrlQwDs3yEAIyUVpOCtL+NTyGAp95hxCpi2EwD6KdUW2ot9FAxdoucGsNxFcbJ
w9aEo6Zn9Z4ikDeqpPu27TNuGPRFjEKZ59Y0BSkCFItcXO8ctiPzedq3Nd3pEPjq
/uy/ebQY5QRbClH8YqPs4Eyqt4mQDRdWOqk5yxWbnKl3LXTc9jqur31BcSkiK5qn
lsQjgsVhSein/E0BP68/Ttr0OXrgNgcE8XcmnPpJ3Gb9eQO0UDzPlE4rOjmrQT+m
I4jW1TnphoPnZG91gXCPA/bNuybjy/cb3fRpHIN/CZxc3zaoUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOTJNo4xxuTe6WQoxauP6UN3W6y/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGIzM2YxM2YtM2ZjNS0z
YjFhLTk5ZmUtMmE1NjhhYjkzNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATUBBZ5nRY9CEdZJCrza0yLu6yJ9eVJs2kilK9DHs2mibgJYIYUEw8wce
w9vt+6oGkc3CsvXsVwqr8UspWENRV/R6khQ30aXdL+csA9aZambpD8owjcKalm/4
bYIZj53/IPeusbREkQCBivI1EyfLSiOAX3MMM/ZOCXe5KiFtwhRq5TFlxsf60gpo
1BR2h0iA6Tp/nVRF4rlMYnYeT8ySALn6gpAcwQESH9aoUIZmQn50IxFwYUOe7I+6
+539wtLNfDWO/7q1IufTXmQeqfYJ59s904z6gLcj0DU3j6O7Cq+bQewkftgKlwb8
P4oM/dLslI58MVQYfvxTbXX4IPerEw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:40 2025 by rpki-client