Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a95a9d0-4342-36f2-abe9-2982defe1e88.roa
File: 9a95a9d0-4342-36f2-abe9-2982defe1e88.roa (raw, json)
Hash identifier: ZnaXHFdcWH9x2hbZNT63KaFetR4qP/i8FWoN8TIh1y8=
Subject key identifier: CA:DE:15:A0:AA:AA:96:A7:A6:D4:65:33:EA:17:63:1B:BF:C4:C2:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BE7B73DC89827EDF9E01D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a95a9d0-4342-36f2-abe9-2982defe1e88.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:e7:b7:3d:c8:98:27:ed:f9:e0:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=86b6e1ed-6fe4-40f1-9a05-fbda1bd3c117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:71:72:29:44:ee:58:a2:b7:c4:b7:3c:67:
90:b0:4e:c9:0a:b2:af:f5:9a:62:22:b0:f1:b3:20:
a6:53:57:24:92:70:4a:dc:e6:7b:94:56:f8:af:3e:
d7:d5:27:f7:34:94:7a:97:9f:25:42:a9:17:7d:b7:
b2:fa:dc:50:d3:18:de:65:87:20:27:26:1c:01:2d:
e2:9b:1f:4d:76:6d:cb:5a:4d:19:02:70:4d:48:10:
db:f7:83:9b:b6:58:a3:bd:74:f7:e4:f3:50:e0:d8:
ce:5d:ff:7f:66:f3:b6:8f:4c:96:ba:3a:8b:d5:40:
d2:95:85:29:4d:ec:da:21:e9:f8:bd:13:52:9e:51:
53:8c:b4:44:c1:cc:4f:c8:b1:80:a3:bd:c0:fb:54:
da:04:a2:b3:72:ed:b1:2d:4a:8c:f8:76:00:5f:9f:
41:bb:41:02:0d:2d:7a:29:cd:77:82:e1:b7:82:de:
83:79:f0:4a:f8:92:41:2c:e9:19:29:ac:b7:60:64:
2f:4d:c7:e6:84:e2:84:b3:79:6f:da:a2:56:d7:a2:
d7:a8:f3:ed:9e:2a:86:ce:50:6c:ab:b3:1f:40:b3:
7d:4c:53:c9:e1:9d:3e:1c:7e:ec:cb:d6:e1:2b:24:
16:94:b3:51:92:33:87:82:d4:be:50:2d:28:eb:20:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DE:15:A0:AA:AA:96:A7:A6:D4:65:33:EA:17:63:1B:BF:C4:C2:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a95a9d0-4342-36f2-abe9-2982defe1e88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:18:5f:24:58:68:89:6c:86:ab:3a:be:9a:70:88:2d:43:2e:
ab:5a:cd:7a:a7:d0:05:31:3f:1e:29:30:47:1e:b5:83:96:1e:
e0:de:31:98:25:3c:50:3b:00:29:93:f0:36:54:e6:8d:d5:ea:
33:f4:5a:84:bf:d1:2e:b5:75:77:59:fe:d1:9a:ee:cc:e2:ee:
c3:2e:4e:83:9f:37:f5:56:ae:38:df:ec:88:7c:e1:0a:cf:95:
62:18:08:c5:fd:5b:e4:04:67:f0:00:5d:41:f0:ec:fb:a3:fe:
e8:a2:66:d4:81:28:2c:c9:4e:5e:9d:a0:2f:9f:b0:04:4a:39:
34:dc:0f:36:53:8b:c9:4d:ae:9c:c5:90:6d:85:92:6e:11:41:
d5:b9:b8:cb:ff:ec:8c:4a:8c:21:82:73:db:1f:14:f9:48:e2:
2a:38:e6:ab:23:7d:b6:00:bd:c0:58:00:39:1a:5d:0b:20:e1:
a1:ad:80:89:08:ea:64:2a:84:69:bf:fc:d5:bf:d1:15:3b:91:
90:76:ad:58:97:75:75:90:9b:a8:bf:a1:2d:05:d2:1d:20:78:
7e:4a:7f:8e:31:38:0f:f0:1a:e3:3f:23:38:4f:f0:41:c6:e0:
d2:4c:9b:06:68:ab:a9:e0:c1:c6:59:ba:07:80:01:6d:79:66:
bf:64:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:44 2025 by rpki-client