Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99c5ec5d-0c78-37b5-9064-084482d797e1.roa
File: 99c5ec5d-0c78-37b5-9064-084482d797e1.roa (raw, json)
Hash identifier: Xh3I4tVXzwNxDTe+F9T+SFohWtn3eEVkx1RpFn2oHOE=
Subject key identifier: 4E:BC:E5:10:89:86:43:7B:C7:2B:4A:3D:75:58:88:19:3B:90:59:F2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA515091E7F84176B1CD84480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99c5ec5d-0c78-37b5-9064-084482d797e1.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:15:09:1e:7f:84:17:6b:1c:d8:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=3c6721e2-41a5-4862-aa64-22f2680e7e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:cb:72:11:34:7d:79:26:40:37:ad:4a:43:
46:42:4f:d0:28:7b:6c:1d:f9:d6:17:ea:3a:46:12:
d1:ba:02:31:d8:b7:ba:bf:5b:e4:04:10:c3:50:4e:
9d:19:8a:d9:b4:56:40:c5:7c:1e:b3:f9:c8:b3:f2:
66:bc:97:ea:23:90:b0:6c:e3:a7:56:3f:d3:fa:da:
10:e9:48:96:f6:6d:15:51:a4:2d:47:c3:95:cd:dc:
59:a2:6c:c6:d9:64:b5:4e:90:05:47:d7:0e:50:cc:
36:97:67:78:75:68:ef:de:d6:2e:bb:f1:2e:5a:18:
57:10:2a:47:51:38:93:19:98:dc:05:09:eb:95:75:
69:34:59:dd:f9:7f:15:8d:20:d2:f8:86:95:1b:7f:
cf:48:ea:a9:30:e5:39:1f:86:c0:ef:28:09:5b:eb:
5d:bc:b9:ef:02:be:db:8d:fa:c6:49:64:eb:0c:74:
65:95:24:9b:ac:ce:01:c5:f9:fa:0d:24:65:0a:38:
25:38:6f:90:38:c1:89:72:e6:bd:08:e7:70:96:e9:
b8:5e:3a:ff:31:b3:99:09:b6:fd:2a:6e:8c:1e:eb:
71:0f:b3:d5:44:d4:52:b0:62:0d:62:27:57:b3:80:
d4:ed:64:d9:2c:58:a2:b9:cd:a0:16:7a:95:27:3f:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:E5:10:89:86:43:7B:C7:2B:4A:3D:75:58:88:19:3B:90:59:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99c5ec5d-0c78-37b5-9064-084482d797e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:3e:24:f0:28:dc:b4:e4:52:51:09:bc:37:e7:9d:00:7b:7d:
3a:ab:c2:99:b5:cf:6d:bd:da:67:8f:6b:aa:92:67:e5:82:51:
95:3b:e3:12:5c:63:49:45:84:88:0d:de:b0:64:14:4e:c7:99:
a7:de:35:25:67:2f:74:df:b3:f3:39:c0:28:59:7c:ab:1d:0f:
23:69:8e:73:0e:54:69:b0:fd:80:f5:d4:49:20:42:36:1a:d2:
a0:4a:6d:f5:2d:55:ab:29:f5:b4:c9:92:76:49:89:c0:c1:0b:
39:11:64:f8:81:a3:b3:ea:70:56:2f:a7:56:28:e3:56:db:c0:
f4:54:b1:d3:cd:38:86:e2:e3:ef:bd:45:24:21:2a:21:34:94:
3e:d5:a1:f4:1a:15:7f:4e:5f:74:f0:77:06:d2:f0:cb:7f:fd:
b2:8b:aa:ca:8f:c8:f7:f1:a6:82:df:96:bd:4a:45:57:b2:c2:
e3:86:19:2b:e2:5f:0d:df:32:5a:96:b3:4a:3e:d1:01:15:c2:
1e:33:2b:63:7c:42:2b:33:ff:21:20:f8:be:a8:ea:68:81:53:
3a:a8:78:91:f4:3e:c5:be:1c:5c:19:a1:e3:bc:35:1e:05:df:
6c:e6:0b:2d:79:e6:19:53:ce:19:ca:e2:30:7e:0d:73:3d:61:
3b:0c:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:09 2025 by rpki-client