Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/952983e6-1af9-3f27-bdb7-6472dbeff882.roa
File: 952983e6-1af9-3f27-bdb7-6472dbeff882.roa (raw, json)
Hash identifier: unnCXv2wXztS1aHxI3eEPosFXw0SPu6rEgPstTM/5ZI=
Subject key identifier: 91:6E:CD:80:5F:22:62:E7:45:8D:39:B1:C3:52:D8:B8:67:22:16:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9B65B971391C9F3F9CA2EE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/952983e6-1af9-3f27-bdb7-6472dbeff882.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:65:b9:71:39:1c:9f:3f:9c:a2:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=9504781b-a99e-4f32-86dc-1c9bbb651d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:53:2d:e6:f0:29:5c:3e:40:60:33:20:fb:
5d:0b:a7:e9:70:20:f1:2a:7f:b5:c5:7f:18:a8:89:
2d:9a:cc:fe:d8:a6:1b:66:79:25:ae:5e:80:73:93:
8c:8c:30:76:a8:6b:06:74:d1:b6:72:d2:f9:24:47:
0b:b9:f2:0c:b8:31:88:62:54:08:9c:b7:66:bc:61:
bc:1d:d2:2e:2e:7f:85:e7:36:34:62:e5:d1:93:4b:
6b:59:83:0a:99:05:08:67:b0:8c:51:37:11:d0:7e:
57:98:53:e9:20:4f:1a:86:a0:ff:28:db:89:61:2b:
9a:0d:04:34:46:70:82:33:f0:e0:27:91:3e:9a:19:
8d:ae:0b:cd:ca:f3:bc:17:a8:bb:11:73:66:46:89:
96:d9:33:10:1e:ad:b4:c4:9f:26:58:98:46:92:16:
1d:d4:76:0d:0c:be:69:e9:81:ba:a5:f5:44:dc:a9:
cf:e2:af:d9:57:7f:34:b6:5e:be:76:24:cc:37:20:
d7:8d:60:3a:cc:e9:37:4e:d3:67:62:c2:f0:fe:2f:
60:75:8d:fa:ac:90:8d:e6:62:f7:57:97:ea:05:8d:
df:a8:d5:65:1e:7e:7d:75:e9:39:d7:d4:dc:50:9a:
1e:80:43:36:a2:67:39:90:69:ca:70:47:63:b4:4a:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6E:CD:80:5F:22:62:E7:45:8D:39:B1:C3:52:D8:B8:67:22:16:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/952983e6-1af9-3f27-bdb7-6472dbeff882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:df:af:31:97:90:11:71:8b:a7:11:6d:24:ee:56:bd:71:4d:
5d:f1:1c:3d:6f:65:b5:1e:6e:a6:4c:e5:72:6c:d8:e6:da:94:
6a:9b:51:31:48:e0:ea:78:51:3e:4c:58:e9:96:da:72:25:9e:
07:36:f6:72:c2:2e:d1:aa:ab:3d:51:92:c8:1a:0d:6d:bc:21:
d2:20:63:3c:a4:c4:3d:61:57:fd:a4:d6:ff:51:50:37:a4:c6:
e5:27:2f:df:b7:3e:c3:e8:bd:d8:67:76:51:e8:6d:a2:2b:2d:
be:40:4c:28:0a:e1:49:63:64:c8:40:3b:7c:12:af:bc:36:69:
d9:9d:44:37:87:8e:59:ae:61:32:d4:04:27:11:97:fd:02:84:
a0:89:16:8c:78:12:12:fa:84:2c:07:67:ae:67:e4:77:a9:0f:
17:e2:02:9b:15:57:fc:d9:de:49:73:38:94:48:f2:39:45:29:
e6:51:53:e3:c0:b5:25:dc:26:b0:7f:51:0b:92:c5:6f:d8:a6:
5a:d0:a8:5e:0a:58:a9:ea:a8:b0:56:40:92:58:d6:d9:4e:19:
da:9e:16:bf:f1:60:41:52:ba:d1:61:78:38:71:54:84:4d:fb:
d8:53:04:5a:fa:d5:ee:a7:6b:f6:f6:03:97:58:a2:ed:12:d1:
2c:a9:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:23 2025 by rpki-client