Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/960761e6-f35a-3e1e-b448-0449a83c4373.roa
File: 960761e6-f35a-3e1e-b448-0449a83c4373.roa (raw, json)
Hash identifier: XJTTuZGxdB/oU+JRrd3fUY0lLSSOsHuEPNnU/GBsI4M=
Subject key identifier: 66:62:2E:2C:5C:A4:CA:8B:A7:12:15:3E:62:2A:5B:DA:04:62:B7:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B880D49474749C11D204D6C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/960761e6-f35a-3e1e-b448-0449a83c4373.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:80:d4:94:74:74:9c:11:d2:04:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=547eb55b-3797-4992-947b-df25938248c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:d2:0f:0d:7d:26:c6:83:fb:76:19:07:94:
1c:57:7f:0d:d0:b3:0f:a2:87:32:05:56:56:b9:91:
0a:d7:a8:55:e1:d9:17:b6:0a:6b:55:57:9b:ca:bd:
d1:89:f5:a9:bd:d9:21:69:e9:f5:d9:31:30:bc:de:
9d:e8:3c:94:97:13:33:3b:c9:a4:c4:ff:18:8e:a8:
98:c8:fd:e5:a5:20:27:39:b2:48:74:9e:50:28:e6:
73:4e:58:db:97:ba:d2:71:da:49:3c:91:8f:3a:e1:
ac:56:69:8d:9e:23:21:68:30:84:ed:82:55:10:71:
6f:ca:3e:67:ca:8a:bd:58:bf:21:c7:db:41:01:2f:
fb:31:06:ea:da:b6:17:7d:d0:cd:17:89:32:16:31:
49:a9:cb:28:46:94:77:e3:a1:af:4a:df:fa:b4:9f:
fe:27:cd:97:48:62:44:c8:a8:69:f7:77:38:cc:cf:
8a:02:ea:4c:04:e2:1c:56:5e:11:d8:c1:e7:47:f1:
66:b1:bc:1b:1d:72:c1:28:e2:2c:dc:17:0b:28:4a:
0d:cb:14:a5:d8:2a:c1:37:4c:ca:d6:01:17:20:7a:
c4:6b:85:d1:fd:be:41:03:aa:4a:59:cc:6a:1c:db:
87:ed:39:c8:c8:b4:5a:cc:42:b8:a7:9b:88:8a:8f:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:2E:2C:5C:A4:CA:8B:A7:12:15:3E:62:2A:5B:DA:04:62:B7:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/960761e6-f35a-3e1e-b448-0449a83c4373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:8c:4e:6f:71:63:f0:3c:a0:e4:45:5b:7d:53:62:2a:14:52:
08:f3:41:c2:6a:b6:09:fe:38:8b:07:1b:63:98:b7:d3:44:cc:
ca:cb:ea:77:79:aa:07:40:7f:e7:36:a9:fd:52:ed:69:10:06:
67:4e:fb:55:5f:c0:80:77:f4:ff:7d:db:5d:d5:ae:35:11:72:
1e:e3:bd:d5:5e:4c:b1:fd:87:c9:47:6d:9b:0f:5b:ca:7a:e9:
5d:cc:9b:c2:5b:19:94:12:7f:57:b9:16:8b:d0:67:bf:19:97:
73:c3:26:63:ad:24:70:05:89:40:31:6e:40:93:b0:c1:eb:77:
02:f9:c9:6a:6b:ed:ef:41:6b:53:2e:d1:b0:ad:22:8e:41:a3:
73:5b:03:ba:46:a2:36:9b:e4:7a:d0:62:db:af:63:c0:89:41:
e4:7c:85:bd:ce:26:2a:96:b8:28:0c:7f:2a:fc:8b:ca:06:7b:
87:dc:b6:f7:79:a0:05:27:4c:e6:8c:1a:78:77:83:a8:57:39:
2a:4f:f5:38:51:74:94:02:d8:6f:d1:b8:6f:09:72:b0:a0:24:
41:1d:3f:aa:47:a5:ec:16:18:86:2a:c8:6e:1b:8f:d7:4d:94:
6b:04:a6:8a:d6:13:85:ab:3d:dd:bb:57:3f:26:13:c0:f7:20:
f7:8f:5f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:50:41 2025 by rpki-client