Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a3ae60e-9f89-3450-8995-c0775ca37ef6.roa
File: 9a3ae60e-9f89-3450-8995-c0775ca37ef6.roa (raw, json)
Hash identifier: frKeh35MCRPr8DM2RfkqbrgRjuAqBzEDdu/DaazsL8Q=
Subject key identifier: D7:D8:F4:AE:75:25:78:09:48:2A:98:F3:F2:D0:64:92:8E:36:64:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F30BB0FB37A1E317DABE0876E
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a3ae60e-9f89-3450-8995-c0775ca37ef6.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:bb:0f:b3:7a:1e:31:7d:ab:e0:87:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=65cf9907-df9e-46a0-8ae8-76cfaa7c8cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:b3:38:6d:1e:df:7f:88:8a:42:65:02:84:
de:fc:d4:76:31:07:25:de:7a:f4:78:70:4a:96:03:
95:6a:4a:8d:81:cb:0e:39:9e:76:19:9f:b4:93:14:
c2:1c:a5:e8:30:c4:78:31:60:24:09:8d:33:e8:da:
c8:7e:02:2b:c5:6e:3f:df:15:ac:9d:6d:91:ad:a2:
3d:74:64:fe:6b:0b:c7:dd:7f:cb:3a:98:ec:49:e2:
f1:62:8e:db:3a:da:69:98:d2:8e:c2:ea:f4:b8:92:
07:1e:cf:5d:6c:4d:b6:7a:d4:7d:aa:0d:30:6f:fa:
0f:c4:2a:c7:77:c1:54:56:65:e8:a4:3f:45:76:ed:
ef:36:d6:20:82:1d:e5:fa:c2:cf:ae:c2:76:6b:8f:
0e:f7:50:50:f0:29:ee:43:73:87:c8:67:b9:2a:0e:
2f:3b:3d:0a:30:25:d5:36:b7:5d:60:d6:1a:1e:3c:
2a:23:01:16:23:40:0d:27:3e:b8:51:e0:6b:98:56:
8d:82:f0:83:31:14:0c:3e:a4:1c:db:16:e5:92:3b:
60:50:8a:ec:a5:0d:59:7f:66:6e:1d:26:12:9b:e9:
da:ba:d1:17:e3:3b:5b:e3:82:ef:5e:e6:af:94:31:
f0:f1:60:28:8e:63:d3:49:0e:dc:d3:16:16:c5:09:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D8:F4:AE:75:25:78:09:48:2A:98:F3:F2:D0:64:92:8E:36:64:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a3ae60e-9f89-3450-8995-c0775ca37ef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:88:fa:7f:99:5f:f4:6a:1b:b5:9d:ea:ab:0e:40:6e:b9:f4:
1e:0b:bf:93:7d:2d:f0:04:fb:7a:a3:00:9e:34:5e:30:af:37:
cc:00:70:3d:64:62:69:67:03:d7:60:0b:dc:f4:60:61:75:2e:
53:d3:fa:d3:39:e3:c0:ad:f6:75:71:38:c8:c8:60:fe:d2:eb:
45:2f:66:57:f5:70:48:cc:37:21:ee:ae:e2:88:f3:5b:01:a6:
54:49:e9:75:3b:a1:b2:38:bf:27:b9:b1:d2:5c:9f:5d:01:a8:
65:15:0a:a9:da:61:15:4d:88:db:fd:b0:ff:76:90:6f:96:2a:
83:03:a1:24:ea:1b:ff:96:8d:39:65:05:e4:0b:2e:34:24:34:
e8:aa:fc:10:5e:d1:51:0e:a3:93:e7:4a:53:56:bd:e2:da:ae:
3b:f1:6f:89:a3:bb:46:95:3d:47:94:b8:f6:2d:ac:64:08:d7:
c6:88:1e:c3:90:34:bc:a2:5c:12:e6:1b:64:42:9b:c3:79:45:
ba:f9:0c:a9:1d:3c:cb:f7:f7:ab:21:7d:9f:e4:5e:50:b4:fd:
85:1e:b2:42:ca:11:b4:39:31:26:8b:92:a5:b4:d6:87:3e:4d:
80:73:2e:7e:01:01:80:56:be:ac:e5:0c:fe:41:52:93:ff:6f:
97:a4:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:00 2025 by rpki-client