Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a568bacc-2ea9-326e-8400-d14b4a0fbd68.roa
File: a568bacc-2ea9-326e-8400-d14b4a0fbd68.roa (raw, json)
Hash identifier: tWe1ZgtKQf+Ym/ppUVyllobKx2obnAdJjteZ/RKsDes=
Subject key identifier: 94:4E:3C:91:17:E1:74:81:30:12:8B:3B:0E:A9:B3:DC:7D:5A:A8:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019B1B0D50A15DF02DDB4E840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a568bacc-2ea9-326e-8400-d14b4a0fbd68.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 57.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:b1:b0:d5:0a:15:df:02:dd:b4:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=9be369a1-2e0e-4cda-a868-67a354aff266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:23:94:ac:b3:a4:01:6e:f3:d5:ee:6a:fc:
13:c2:ce:a8:c1:38:06:55:47:2d:da:b4:7c:6f:bd:
67:74:95:6d:11:41:44:63:bc:70:a8:fc:9e:35:7d:
f1:62:19:cc:31:ca:63:d7:bc:fc:ac:cb:61:21:df:
b1:b3:15:bf:b7:db:cf:ae:fb:9b:88:cf:f7:53:c8:
0f:cc:d2:36:d2:02:e4:e1:fc:c3:9f:e4:08:4f:4b:
c4:ed:55:90:86:b2:e8:c4:bc:ac:b8:5e:72:a5:1a:
57:fb:ea:71:55:ed:c2:cc:93:f7:6e:44:54:2b:b1:
d8:45:7b:5d:ff:2c:0f:02:1f:01:86:cb:fe:b4:af:
76:d5:9c:99:d8:f7:e5:54:1a:bc:35:55:c9:c0:23:
cf:66:6e:1f:79:f6:8a:63:cb:46:59:68:c1:e7:1f:
92:1c:3d:3c:a0:b6:32:36:f1:8e:5c:e7:06:d5:1a:
ac:be:bc:ca:94:ca:a4:dc:7a:b2:a5:7d:51:95:9b:
0f:e4:0c:39:1d:0f:ee:46:30:be:64:a7:37:1a:0f:
51:be:5d:9d:05:db:62:11:46:f3:a3:9f:81:ae:d4:
a0:ed:f2:e6:9a:82:b9:a8:3d:77:d7:a8:a1:3a:ba:
76:aa:bb:5b:7e:7e:a4:22:16:7c:ca:33:fe:84:4d:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:3C:91:17:E1:74:81:30:12:8B:3B:0E:A9:B3:DC:7D:5A:A8:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a568bacc-2ea9-326e-8400-d14b4a0fbd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f5:9e:be:ae:5e:e7:c7:3a:d2:a0:66:88:92:81:c3:45:32:
20:22:2e:4a:46:b2:a1:ef:33:8f:b0:9c:30:77:f6:31:0f:7a:
2b:d3:96:7b:b2:4e:14:cb:3b:26:2d:10:8f:6c:15:11:22:f1:
61:26:39:e4:c1:67:49:25:16:a3:3a:6c:e1:6c:db:4d:93:88:
6d:7b:84:a5:32:67:01:19:9b:42:97:34:7b:cf:98:01:f4:7a:
86:3e:19:91:d6:99:9c:ca:a0:b9:5f:84:f4:71:68:58:65:f9:
c1:60:17:80:ea:64:a1:9e:f0:be:92:3e:11:45:81:fa:c9:f1:
ab:c1:92:8e:75:81:b7:9a:a3:cb:f2:52:ce:52:ee:80:99:1a:
e0:81:a0:d3:ed:64:f3:2f:a3:b2:d9:39:11:69:e9:c0:a2:69:
55:77:7a:bd:21:9c:b5:e9:b1:32:59:f1:09:e9:a0:0e:e2:3c:
fd:2a:83:79:79:28:65:38:d5:45:25:9d:19:5f:8a:05:7a:60:
8b:53:04:15:a2:90:24:02:e7:39:81:7a:65:a4:eb:69:95:46:
5c:43:4f:d6:31:95:d7:8b:1c:1a:7d:b0:40:4f:f8:43:16:ed:
df:21:e5:1a:65:1c:d6:c6:f2:12:4f:54:58:f7:e0:10:90:e9:
ef:f9:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:25 2025 by rpki-client