Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0ecc416-8ec4-3952-a8ee-bf006b9070ac.roa
File: a0ecc416-8ec4-3952-a8ee-bf006b9070ac.roa (raw, json)
Hash identifier: FwJh8+O7Pa0KDAuQ7h+JSQzpUZuZWC7pgqCPo1/B8sQ=
Subject key identifier: 0C:1C:0F:13:1F:E2:39:15:2E:CC:EE:BE:5B:38:F9:EA:75:FD:CD:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403568AFE341AA5FA2F1721180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0ecc416-8ec4-3952-a8ee-bf006b9070ac.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.46.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:68:af:e3:41:aa:5f:a2:f1:72:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=e0ac38f7-2576-43c5-8db6-f237a8a5cd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:2b:6d:ad:7e:d9:2d:29:41:08:74:a4:de:
78:2b:d5:f3:0b:91:9a:86:8d:73:75:6f:62:01:e8:
68:38:17:b6:6a:c9:2f:56:54:d5:2a:07:30:33:f5:
63:cb:b6:a9:aa:2e:b1:90:4c:28:28:c1:45:75:f4:
f2:b9:ab:23:9f:f6:d2:5f:9c:a1:7b:1a:69:8f:94:
f4:30:cd:3d:c5:14:d6:95:16:81:49:ce:17:0c:d4:
a4:9d:55:21:20:44:b3:c3:fd:e7:5d:e8:03:83:3b:
7f:41:a0:5f:11:f8:3f:dc:82:fe:4e:39:1a:87:4f:
50:11:ef:a3:e4:b3:91:f9:05:08:e7:49:c5:27:50:
a8:44:d3:60:34:fc:17:17:96:9a:1d:02:87:b2:42:
39:1c:ae:84:2f:2d:00:62:9c:98:38:32:66:1e:32:
51:3c:1b:01:51:7d:96:65:4d:05:4f:5c:78:1f:25:
f7:cf:be:0f:cc:aa:40:b0:d4:e1:a6:34:b1:9b:d8:
aa:11:b8:a6:c4:2b:9b:2c:42:16:8b:a6:c4:ff:83:
66:42:78:6b:23:12:61:6f:89:29:dc:bb:c8:49:0b:
1f:b5:d4:fe:37:b1:31:f3:c0:1f:7b:35:fe:ca:93:
db:20:f5:47:ac:b0:16:1f:21:40:64:17:df:ba:6e:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:0F:13:1F:E2:39:15:2E:CC:EE:BE:5B:38:F9:EA:75:FD:CD:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0ecc416-8ec4-3952-a8ee-bf006b9070ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:51:34:eb:35:31:66:bd:c4:97:30:ee:ea:d2:46:08:2a:7e:
9e:f1:3b:57:50:3e:dc:6d:63:1b:04:3c:47:d4:d5:30:33:09:
fb:fe:4b:8d:36:4a:df:10:a3:53:50:6d:bf:84:07:65:e4:c7:
c8:7e:d5:d2:38:4a:74:e1:05:0e:3c:64:aa:39:2c:e3:1a:09:
77:b5:cf:f9:59:37:d4:02:e7:2e:26:8f:c1:54:19:09:a8:40:
0d:3d:9c:c7:d3:a3:47:3b:87:99:d9:d0:42:22:16:8b:0c:58:
67:8c:39:40:1b:6e:5b:58:d3:36:2a:dd:d0:fb:49:2f:85:9f:
88:d0:6b:dd:33:84:af:e5:58:a3:37:ec:b7:50:ae:83:00:6d:
de:01:f1:49:a0:32:3b:79:bb:a0:c7:d1:12:fa:2e:f3:88:e6:
cd:84:01:d6:1d:ac:a6:f1:8f:c1:cd:3a:fb:4d:1a:44:8e:25:
e0:b2:12:b4:02:a3:bf:d1:05:49:45:ae:cb:dd:c6:5c:e2:00:
03:a7:d7:ab:ea:57:53:f2:43:f1:46:c8:36:32:2a:d2:43:52:
da:61:34:0c:51:a1:db:be:7a:6a:bb:9d:5c:57:23:7e:bb:e8:
87:05:da:d2:38:94:4f:7c:83:8e:f9:b6:1c:b3:88:b2:31:3b:
45:5d:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:51 2025 by rpki-client