Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96b2d2e6-7260-31e6-8254-df74d664f5e5.roa
File: 96b2d2e6-7260-31e6-8254-df74d664f5e5.roa (raw, json)
Hash identifier: Rj/dwprktD5sIh4QaH86XBSOz74w282kLlmnsPruwDw=
Subject key identifier: 96:89:74:5E:F4:BC:F0:94:92:EB:FD:B5:BC:2E:57:D8:8F:E4:0B:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE5CBF74B0C2C3437E1421A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96b2d2e6-7260-31e6-8254-df74d664f5e5.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:cb:f7:4b:0c:2c:34:37:e1:42:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=7011a4e1-d8ae-44f1-b76c-3bf8dd0cf01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:cf:ea:c1:14:43:80:77:9b:8e:e4:21:c0:
30:fa:61:6b:81:e8:f3:32:b6:fe:80:ff:19:de:e2:
06:3c:c9:38:26:57:3e:f3:c6:c1:bd:34:4f:84:32:
2d:70:a9:8c:57:a0:51:b8:16:57:e9:84:51:76:d5:
a9:a3:4c:de:11:79:32:d8:58:d9:00:66:74:6d:9b:
60:55:a6:54:6a:f8:c8:d6:76:2f:c6:99:82:9b:16:
aa:78:35:67:d1:ce:8c:3a:be:ed:f9:b4:60:63:12:
1d:f6:5f:47:b9:3a:e3:ad:ed:c4:0b:7d:27:05:21:
83:25:d5:ef:d0:4d:a3:99:df:53:7e:b7:e9:fc:87:
8a:4f:fa:ba:b8:c1:e1:86:d1:29:1e:7d:6c:64:97:
55:ed:4d:e4:3c:ee:5c:f6:82:04:1d:39:1c:43:ff:
2c:e6:e6:85:d6:64:cf:44:0c:12:cb:c6:53:44:cc:
70:31:63:a9:bd:6c:27:41:81:7a:72:10:9a:01:5f:
a5:39:35:c5:b7:a9:12:70:dc:d0:09:8e:a7:fa:bd:
77:27:3e:ce:37:5b:ce:c3:9c:d7:04:d3:69:93:42:
0f:47:19:eb:43:29:61:2d:25:72:3a:c8:f4:e8:18:
4c:06:1c:64:ca:10:69:34:e5:59:b7:8a:14:bd:4b:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:74:5E:F4:BC:F0:94:92:EB:FD:B5:BC:2E:57:D8:8F:E4:0B:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96b2d2e6-7260-31e6-8254-df74d664f5e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:9f:39:a8:8b:64:13:fb:05:a6:2b:6d:f9:7b:33:ac:c7:29:
6d:52:63:c1:15:24:90:42:92:5c:0b:a1:89:d9:27:5b:98:a9:
5d:f5:ba:98:5f:d7:8a:96:c8:18:f1:5e:e9:74:63:e9:87:2e:
bb:19:88:44:fc:42:87:04:f5:be:e1:7a:15:81:6c:9c:6c:c2:
cd:45:5b:6f:5f:cf:65:96:e9:ac:47:55:3a:40:58:94:fb:24:
c4:10:a6:01:1c:51:73:fd:a7:29:f1:b8:d1:5d:9a:6a:a6:14:
dd:c2:c9:f9:3a:bd:89:16:83:8a:5f:28:1a:f6:e6:14:83:a7:
51:48:4d:99:d8:1b:f9:94:e1:48:05:f2:cc:ab:5e:33:0b:bf:
85:0d:b1:35:50:a9:97:86:da:43:78:10:22:b4:44:a5:7b:bc:
a1:7c:6d:df:ae:07:8a:33:e0:51:9e:ab:f4:10:42:ee:3e:45:
75:a3:c3:df:3f:71:5f:db:1c:04:1c:2b:62:07:f7:ee:cc:10:
10:a1:10:e3:09:47:28:4c:6d:9f:f6:20:05:2c:9d:f4:7d:b1:
47:d5:b3:b2:e9:4b:3b:98:da:82:51:23:89:53:ad:2d:da:b4:
07:03:56:ee:9b:7c:ec:72:b8:9d:68:be:1a:1c:e3:08:4d:65:
b4:0d:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:55 2025 by rpki-client