Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa98d9ed-4afa-3a06-b653-6284e779a38d.roa
File: aa98d9ed-4afa-3a06-b653-6284e779a38d.roa (raw, json)
Hash identifier: ksIUpexDn2DNbWu8hljwV1u1PmcgYu5Y46jyQgeZDjo=
Subject key identifier: E5:E7:94:F0:4B:5C:09:D5:7E:02:CD:5C:F7:BA:7E:DA:38:09:30:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D341C7EF163234F5F790ACBA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa98d9ed-4afa-3a06-b653-6284e779a38d.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:1c:7e:f1:63:23:4f:5f:79:0a:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=2a4f4154-fcc4-4d39-9d03-078ff94de89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:5c:dd:da:93:44:c3:39:4f:4f:16:af:04:
89:5c:8e:8a:15:c6:dc:0a:a2:04:80:4a:00:79:de:
2b:89:03:7c:cc:08:77:74:c7:b0:7c:d1:ee:83:9e:
86:ce:fa:48:43:34:e2:dc:e8:02:1c:3e:f9:1d:dd:
1d:f1:51:b9:ab:57:b7:b1:2e:13:e2:ec:69:22:db:
d6:78:4d:21:d7:66:12:33:10:e0:70:a3:d2:92:6c:
29:88:e5:ea:4c:b3:01:4f:fd:6b:af:5a:0b:8b:79:
93:ce:19:b6:75:29:aa:0c:67:08:f1:d2:62:15:47:
c9:23:9b:48:94:04:40:67:f6:54:96:4a:44:b3:90:
be:40:69:c9:71:da:92:5d:e5:51:67:7b:fb:8f:64:
f4:fa:c0:e6:e1:c3:a6:c5:a8:30:19:9d:6b:16:12:
06:7f:54:60:18:cd:d0:8a:58:66:67:7e:c3:75:d2:
21:89:fe:2b:97:8a:e8:a0:ac:bb:c2:62:66:35:70:
aa:57:4b:24:71:57:ca:91:80:cb:0a:b7:a6:e2:21:
9c:0b:d9:6f:36:f7:37:25:c7:4f:63:8f:0e:ad:e2:
9f:75:59:33:69:78:71:4b:4f:eb:fb:1c:fa:30:5d:
44:b1:2f:34:bc:66:00:d1:58:4b:9a:13:d3:a2:b6:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:94:F0:4B:5C:09:D5:7E:02:CD:5C:F7:BA:7E:DA:38:09:30:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa98d9ed-4afa-3a06-b653-6284e779a38d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:34:36:99:2b:f2:a7:0c:90:4a:42:f8:b5:5b:4e:d7:76:8c:
6c:ba:9f:32:e1:a1:34:93:29:f3:b5:af:14:50:d4:c1:fa:61:
74:9b:42:c0:eb:25:e6:2f:26:f4:1a:81:4f:bd:b0:7d:c7:a7:
25:d6:0d:f3:4c:bb:7c:cf:52:11:6f:b0:9f:a8:90:4e:6a:de:
6a:82:e2:89:a7:9a:ad:78:a6:eb:69:c6:67:4f:5a:6a:8b:5c:
9e:6b:7b:d6:60:cc:98:d1:66:3e:af:66:e1:75:fd:3b:79:78:
70:cd:5f:ac:37:de:0c:9b:a5:34:37:71:66:46:f7:18:a3:74:
43:b7:9c:e0:de:8c:0a:4b:d4:65:f3:fb:e3:b7:67:be:47:cf:
ae:e4:a5:0f:09:d2:ef:95:45:3b:04:09:9b:b4:ac:82:8d:8b:
05:49:d7:ac:cd:a1:41:5d:63:29:66:b9:2c:1a:d4:9f:c5:d1:
a5:a7:f8:59:cd:5a:13:f8:0d:6b:47:bb:40:38:31:d8:f5:aa:
db:88:7a:2d:66:2d:0d:7b:88:32:b1:87:31:65:51:2a:5b:8a:
55:78:f1:d1:08:aa:7c:97:03:cf:f9:d3:ed:f3:3d:66:86:ef:
a5:50:d0:ff:4a:85:45:81:fd:c2:a9:51:1f:e3:dd:ac:f0:f7:
62:45:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:28 2025 by rpki-client