Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a672a14e-6fd7-3959-acaf-1e8ccd829f7e.roa
File: a672a14e-6fd7-3959-acaf-1e8ccd829f7e.roa (raw, json)
Hash identifier: KHvcPz3fkZ967t+pqECd8ahShoRlijAY1Z3qKr/Gxzw=
Subject key identifier: 72:76:2D:3C:CF:6E:DC:DA:0E:3F:C7:3C:6A:0F:00:4E:6F:A0:FF:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840383ADFAB1E4F555266EA7740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a672a14e-6fd7-3959-acaf-1e8ccd829f7e.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.0.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:3a:df:ab:1e:4f:55:52:66:ea:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=85306c97-de01-482c-beab-cf8cc80fb74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:2a:e5:77:8c:4e:4d:32:f8:ca:b7:84:00:
70:fa:da:d3:18:87:4a:b9:a5:ba:81:a0:79:4a:b0:
f7:8b:25:95:36:93:0f:6f:ae:e0:40:42:13:74:f1:
cd:0f:44:44:23:80:37:57:8b:d7:b5:dc:8a:43:ef:
70:cd:83:4d:6a:6b:31:e9:25:0f:ca:63:fe:45:a2:
c4:ff:e0:dc:98:cf:b7:c8:47:43:5f:4d:86:39:26:
1d:a0:8d:bb:98:67:b8:ee:b0:48:2f:f6:66:55:99:
0d:27:73:6a:be:93:2b:94:d9:9c:2f:33:8b:f4:19:
1d:d5:37:f0:92:92:b9:fb:3c:f3:a0:5e:f7:ff:a3:
71:11:85:7d:e2:4a:bd:1d:da:79:2c:c0:0e:be:0f:
54:58:2d:a2:49:09:b7:77:e6:0e:a1:ae:69:8a:25:
e2:55:1f:71:75:9d:e6:79:ca:be:8e:fe:eb:05:e4:
aa:7f:53:18:00:02:30:18:4a:52:cd:44:bc:83:95:
c0:0c:16:dd:91:05:f0:54:a2:41:ba:a7:a7:2f:83:
76:b6:24:b0:6c:52:00:aa:5a:98:12:26:01:c1:12:
12:34:64:70:dc:29:35:03:f7:ba:28:57:e6:c1:8a:
4b:84:b4:c5:3d:0b:17:27:ae:b6:b2:c7:67:80:0a:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:2D:3C:CF:6E:DC:DA:0E:3F:C7:3C:6A:0F:00:4E:6F:A0:FF:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a672a14e-6fd7-3959-acaf-1e8ccd829f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.0.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:c7:6d:8f:45:f8:9e:1f:cd:8d:97:94:9a:ec:a2:37:ab:f3:
1b:16:91:a1:74:f9:50:e6:65:01:2c:5c:80:33:c9:71:da:9f:
1a:62:5c:ec:4b:a3:67:bc:2c:7e:f6:18:1a:16:cf:ed:28:c3:
a2:82:12:4d:f9:8c:26:c9:5f:71:4c:93:c3:00:6c:53:79:44:
2a:7e:37:6e:98:ed:16:fb:39:81:29:85:83:53:05:8f:1d:30:
32:01:29:2a:0a:9f:9f:a0:c6:00:72:8f:ba:b8:8c:b3:af:00:
c5:0c:09:e5:ae:2e:4a:22:9a:cb:4e:47:f5:c3:0c:c5:63:f2:
ba:34:4d:b1:93:3e:85:1b:c6:d7:c8:13:39:58:c7:6c:c9:c4:
f0:6e:9b:fa:f8:18:4c:f5:fb:e9:d6:7f:6d:30:6d:26:58:0f:
85:85:1b:5d:f6:91:63:30:09:54:0f:24:fc:41:ab:d8:b5:aa:
79:e3:cb:3b:c6:54:0e:cc:4e:16:53:1a:e7:ab:a6:e5:07:95:
d1:80:ff:b6:12:78:ad:d2:34:44:46:f1:c8:ba:35:11:df:47:
37:fb:68:dd:56:ed:6b:09:39:78:32:1c:8f:91:aa:09:27:98:
02:8d:22:76:8b:2c:8f:9c:d4:87:12:59:b0:26:97:9d:ca:5f:
34:0f:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:01 2025 by rpki-client