Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a55af04c-50e5-32c1-8af8-d211f962ec97.roa
File: a55af04c-50e5-32c1-8af8-d211f962ec97.roa (raw, json)
Hash identifier: m5KZIg69/ZxEpfz3NBrVjUfbdw2IEZdUlbwbP5grMrw=
Subject key identifier: 2D:77:6D:53:7B:23:C3:C9:62:04:13:4B:08:18:35:DD:F7:EF:8A:A6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D45CC76E446718DDDE1BFB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a55af04c-50e5-32c1-8af8-d211f962ec97.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:5c:c7:6e:44:67:18:dd:de:1b:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=7ac9793e-c6fa-4cbc-83f0-a29a018dfeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:73:de:33:7c:21:73:93:d9:89:4a:c9:bd:
03:77:e8:82:b3:88:b9:fa:d9:47:b3:d7:a6:ce:0a:
af:03:81:27:45:57:7d:cb:32:3b:40:9b:b7:78:f4:
67:11:b1:88:6f:a7:1a:4b:ad:fa:e6:2b:2f:43:70:
b9:5c:7c:2f:69:b0:e9:4e:cd:13:14:10:20:78:f3:
78:7f:12:21:98:6e:b4:76:d7:8d:3e:80:7f:df:c0:
55:da:ea:87:b3:b6:89:59:02:fa:bf:7a:26:35:6c:
65:3d:a0:59:9a:78:16:88:a8:98:cd:2e:91:7e:87:
a8:e7:78:3a:5d:0b:6f:f9:60:bb:3f:00:e5:cf:15:
e4:06:a3:51:35:d0:53:f2:9e:34:d7:56:fa:3e:b2:
a4:6b:12:78:c9:f1:ca:e8:9d:7e:b1:43:e7:62:e9:
d7:a3:3c:d0:a3:96:97:95:4b:29:f5:5b:15:4b:6b:
fa:da:51:ef:56:7c:ef:8a:08:22:a9:b9:49:17:66:
61:94:be:7f:73:03:41:c8:6e:97:d1:e6:43:1d:d8:
0f:01:20:01:7b:c0:92:55:45:60:dd:9c:1e:c3:81:
06:b0:ba:0d:ab:9d:df:7a:dc:cd:27:b8:27:3c:3b:
dc:86:af:90:4d:22:14:34:85:ef:1f:e9:54:60:8a:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:77:6D:53:7B:23:C3:C9:62:04:13:4B:08:18:35:DD:F7:EF:8A:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a55af04c-50e5-32c1-8af8-d211f962ec97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:61:f2:7a:64:ab:56:c4:3e:a0:d1:41:3b:8d:7c:7b:ac:f9:
3a:ec:56:0e:72:e4:5d:db:c5:39:4a:f0:15:a7:74:04:f4:25:
00:c6:9d:79:31:df:d2:ad:5d:81:cf:f0:bd:7c:35:3f:05:8e:
9c:bb:fd:5f:e3:5a:e2:40:4e:a3:c0:28:81:82:29:e2:e7:dc:
93:da:f2:75:84:1a:a9:4c:38:ab:be:a0:54:61:12:97:70:f3:
8a:5d:1c:1a:7b:a9:a9:d1:ce:af:be:e2:9c:b2:30:09:da:79:
d3:3b:b1:ce:45:e1:7c:73:e5:24:74:6a:fb:82:6b:a7:87:b3:
b5:a1:46:80:44:54:34:2a:f3:a5:99:0c:e0:06:87:c9:7c:c7:
33:d5:f3:1e:34:42:6e:f5:b0:ba:f7:bd:93:bd:c1:00:0c:65:
a4:da:62:40:68:ef:68:47:29:11:da:ff:a3:2f:40:e6:01:3e:
d5:32:a8:8e:64:b8:ef:01:7e:82:bd:94:0b:72:e5:64:13:ce:
32:84:54:60:bd:0d:d0:d2:d0:20:ac:19:c2:ac:85:d7:a2:a2:
f1:66:30:57:d1:f9:1e:9e:55:48:82:8a:28:19:2a:d7:42:cd:
ba:92:20:26:e2:b5:0b:0f:00:16:ff:5e:c7:5e:03:61:d1:7b:
a4:e1:2f:80
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDUXMduRGcY3d4b+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNjEyMDAwMFoXDTIzMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk
N2FjOTc5M2UtYzZmYS00Y2JjLTgzZjAtYTI5YTAxOGRmZWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLhz3jN8IXOT2YlKyb0Dd+iCs4i5+tlHs9em
zgqvA4EnRVd9yzI7QJu3ePRnEbGIb6caS6365isvQ3C5XHwvabDpTs0TFBAgePN4
fxIhmG60dteNPoB/38BV2uqHs7aJWQL6v3omNWxlPaBZmngWiKiYzS6Rfoeo53g6
XQtv+WC7PwDlzxXkBqNRNdBT8p4011b6PrKkaxJ4yfHK6J1+sUPnYunXozzQo5aX
lUsp9VsVS2v62lHvVnzviggiqblJF2ZhlL5/cwNByG6X0eZDHdgPASABe8CSVUVg
3Zwew4EGsLoNq53fetzNJ7gnPDvchq+QTSIUNIXvH+lUYIpimwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC13bVN7I8PJYgQTSwgYNd3374qmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTU1YWYwNGMtNTBlNS0z
MmMxLThhZjgtZDIxMWY5NjJlYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfmHyemSrVsQ+oNFBO418e6z5OuxWDnLkXdvFOUrwFad0BPQlAMadeTHf
0q1dgc/wvXw1PwWOnLv9X+Na4kBOo8AogYIp4ufck9rydYQaqUw4q76gVGESl3Dz
il0cGnupqdHOr77inLIwCdp50zuxzkXhfHPlJHRq+4Jrp4eztaFGgERUNCrzpZkM
4AaHyXzHM9XzHjRCbvWwuve9k73BAAxlpNpiQGjvaEcpEdr/oy9A5gE+1TKojmS4
7wF+gr2UC3LlZBPOMoRUYL0N0NLQIKwZwqyF16Ki8WYwV9H5Hp5VSIKKKBkq10LN
upIgJuK1Cw8AFv9ex14DYdF7pOEvgA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:44 2025 by rpki-client