Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bd12cfe-4d6a-36ab-8884-26161f9d42c3.roa
File: 8bd12cfe-4d6a-36ab-8884-26161f9d42c3.roa (raw, json)
Hash identifier: 2c7XTleMQMD/jgD+d9ixSWkiT/2sg6t4qHd8L61xz7A=
Subject key identifier: 81:6C:56:62:0F:67:51:12:2C:16:19:2A:5D:86:56:BC:AD:2F:51:C3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584083242C66047AB629679511C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bd12cfe-4d6a-36ab-8884-26161f9d42c3.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:24:2c:66:04:7a:b6:29:67:95:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=eb3f1b64-c974-44fd-9130-e4a5dd01e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:01:6c:ca:79:ae:c9:5e:12:53:be:d6:49:
ab:56:62:bc:db:eb:5e:e1:75:38:78:c5:b9:7e:2f:
26:d5:7c:10:38:da:a8:57:a4:8d:07:be:a2:41:ca:
35:9d:1b:78:f8:f5:49:0d:8f:01:f1:a4:ab:6f:b1:
7c:76:a5:16:1a:91:7b:a9:a4:5f:cf:d1:47:6c:61:
19:19:65:3c:a4:70:9d:33:72:6d:81:bf:76:47:d6:
2d:41:4c:fa:f9:4d:6c:36:bc:9a:09:fe:f9:32:80:
fc:9d:e7:0e:a7:fc:45:b1:8b:2e:0d:fb:18:97:af:
ab:59:98:b4:46:c5:8b:cc:7f:e7:1f:e8:16:9d:0f:
c0:e4:e6:18:31:1c:08:2d:ee:51:ca:ed:42:c3:60:
98:51:8e:15:31:16:3e:ad:46:af:48:33:d0:f4:dd:
fa:5c:d9:cf:75:39:a9:39:44:f4:98:e0:09:07:dc:
51:24:de:97:fe:ad:8c:5e:83:34:43:11:54:8d:7c:
88:0e:76:24:11:78:4d:c0:46:c0:91:21:1e:b3:64:
d9:8e:ac:05:97:3c:37:22:03:b1:cc:00:20:0a:fa:
a8:88:e7:00:58:9c:ca:d2:ab:e3:11:81:53:d4:c9:
a6:ae:19:5a:0d:5b:f5:97:7f:51:fe:e1:1f:91:0d:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:56:62:0F:67:51:12:2C:16:19:2A:5D:86:56:BC:AD:2F:51:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bd12cfe-4d6a-36ab-8884-26161f9d42c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ff:b8:38:68:39:9b:b1:89:1f:92:6d:de:1d:25:f0:c6:34:
51:7c:6a:51:6a:8c:fc:ce:51:3e:c1:87:41:68:05:29:6b:37:
b5:68:d9:35:54:b3:5c:ef:e9:96:2e:ab:ae:f9:3c:78:3d:78:
50:2a:b2:38:c1:58:72:1f:3b:ba:f0:66:1a:39:4d:96:0b:7b:
92:b4:9d:00:78:f5:f3:68:f8:af:03:16:4b:bc:3e:d3:2c:a0:
83:af:96:cf:b1:ac:3d:67:71:b0:a0:72:4e:68:af:af:b7:bd:
95:a6:0a:18:2e:68:cd:24:61:fa:60:05:11:c0:16:c2:74:cb:
ab:ab:56:bf:f9:8d:41:e7:74:de:96:d4:b2:82:ea:b4:6e:7d:
05:4e:53:a7:d5:c2:d4:84:be:c3:57:50:a9:14:a1:5f:fe:e7:
a1:a7:fc:ed:0a:51:66:63:5b:c7:75:d7:8d:90:20:e2:3a:e5:
ec:60:ef:e2:a7:33:c2:51:4d:90:86:c4:a8:f1:93:11:2c:5d:
fd:84:0f:38:0d:8a:8c:1c:7a:ca:dc:d6:7e:c6:c1:8d:81:7a:
39:13:03:c4:b0:be:43:ea:ae:7d:34:8c:51:eb:a3:28:2a:71:
56:14:c7:69:28:fb:12:f5:98:29:fe:91:a7:3e:cb:65:e7:bd:
b4:1e:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:21 2025 by rpki-client