Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a30352b6-5675-3b68-a8a1-c88a11aea3ed.roa
File: a30352b6-5675-3b68-a8a1-c88a11aea3ed.roa (raw, json)
Hash identifier: pxZUVopmZH81/bpMXLWqybXArko1zemWqNgmYvcSV7k=
Subject key identifier: 51:AC:52:BF:21:50:66:EC:6A:51:FF:B9:ED:F0:8A:95:7E:B8:1A:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C7528A5F6C5F0ADBC5E2340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a30352b6-5675-3b68-a8a1-c88a11aea3ed.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:75:28:a5:f6:c5:f0:ad:bc:5e:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=915fe358-e8c5-43c5-a282-bf84c7bdd7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:f1:d8:1e:dd:b2:c9:0e:c3:94:eb:37:ea:
22:d4:b1:1d:06:3e:02:af:36:db:47:9b:62:f6:40:
3b:61:95:fd:0a:42:46:1e:44:95:f9:c4:fe:34:1a:
10:74:99:be:fc:3d:b2:de:bb:f3:d2:fe:50:f9:de:
09:15:35:fd:89:16:16:61:c3:8c:d7:28:c1:9e:3d:
fa:7c:88:45:2a:d4:d4:a0:58:22:9b:6b:a1:99:7c:
1a:83:02:ae:01:c7:52:94:09:f2:2a:dd:c9:bf:14:
04:c2:52:95:08:30:3a:d6:e3:8a:f4:67:07:96:a9:
a7:f6:14:0c:66:db:ae:85:62:19:fc:95:86:b1:8d:
dc:79:e3:d1:e1:e2:d1:b4:8a:34:6b:62:7b:3c:07:
b6:18:30:34:fa:d4:d5:63:aa:de:71:52:eb:f3:c8:
34:7b:c4:89:ae:8f:3f:16:1c:7d:ce:bf:59:45:a1:
e6:76:cf:21:ce:bc:c7:e9:d5:e4:09:f2:de:56:72:
8d:b2:6d:2c:44:a1:04:ee:47:d3:35:c4:3a:cb:48:
9c:db:87:d8:ee:49:4a:9a:b6:10:de:2e:a6:ae:30:
1e:89:f2:e6:5c:21:da:58:ea:4e:32:6e:95:a3:e3:
69:c2:1c:04:59:ea:34:7b:40:b9:e3:cb:5e:bd:35:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:52:BF:21:50:66:EC:6A:51:FF:B9:ED:F0:8A:95:7E:B8:1A:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a30352b6-5675-3b68-a8a1-c88a11aea3ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c5:2d:e3:40:2f:94:4c:65:a9:0c:d0:7e:7c:d4:5e:8c:19:
41:1b:4e:6b:eb:69:32:db:de:3b:ec:dd:c1:a5:66:63:8a:f3:
94:73:8e:c2:8d:63:4a:b1:27:a7:d1:14:59:da:ac:32:42:27:
fa:42:18:60:65:79:cc:a6:b8:3b:1f:43:46:1a:ba:d9:97:3e:
dd:59:5b:77:4c:c5:f2:53:ef:da:1d:9e:88:df:45:56:60:d7:
b9:9d:03:a1:90:bd:ec:ca:f1:64:b2:fc:5d:4c:aa:22:1f:da:
3e:e5:90:99:aa:aa:c1:1e:4b:45:b5:66:68:90:fa:c9:d2:00:
76:08:28:fa:d1:ec:4b:8f:c5:06:74:86:fc:fd:84:86:76:1a:
6d:d4:f0:f0:12:28:84:a8:75:ad:e6:43:c6:38:90:b4:24:27:
d4:81:6a:28:89:b1:f0:85:5b:5e:aa:82:0f:d1:81:42:4d:3d:
49:9b:dd:8d:58:74:f1:30:35:1e:84:05:a8:99:63:7c:bd:37:
e7:e0:4f:1f:ef:35:9b:4a:7f:40:bf:d5:e5:b6:7b:4d:1a:ac:
ff:56:c6:c2:38:ce:fb:c7:d4:06:23:81:18:34:b8:11:94:b3:
7e:fa:5f:cd:12:0a:dc:b6:48:6e:cf:80:c0:ee:23:d0:84:46:
6e:85:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:28 2025 by rpki-client