Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac966359-0ced-343e-aa8a-6949bca6a592.roa
File: ac966359-0ced-343e-aa8a-6949bca6a592.roa (raw, json)
Hash identifier: UHdV86prmVdbydayh24Uj5ovAQIDEq4lxs9BsurDdBk=
Subject key identifier: C9:CA:AA:EE:65:29:FA:87:7C:79:3E:F6:5B:D0:54:87:32:7A:D3:41
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A645E2587DFE922CBEAE640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac966359-0ced-343e-aa8a-6949bca6a592.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:64:5e:25:87:df:e9:22:cb:ea:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=cd996f15-1036-43e0-b1b9-164ca4af54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:64:09:d2:e5:74:42:c8:85:82:12:e9:06:
d2:c6:e3:46:59:07:9a:c8:c7:01:d9:af:d7:1d:5d:
48:2f:2e:c3:be:10:18:57:d2:97:84:2c:87:5e:64:
5f:ec:f8:3a:45:47:6a:9d:2f:f6:ae:93:55:94:d6:
d8:45:e0:2f:a8:d5:33:ac:57:f4:72:88:0e:1f:20:
f4:47:9b:8a:09:4a:63:15:b3:56:df:69:02:99:5d:
9b:f0:8a:b3:1d:ca:5d:59:c6:9f:5c:bc:8d:e8:2a:
44:14:82:31:1e:72:8e:bc:12:a5:9e:26:0c:9a:d2:
0d:1f:b6:01:0e:78:fd:38:f2:15:90:cf:48:cd:89:
d6:ee:09:68:15:cf:08:8e:4b:36:a8:29:3d:4b:0e:
d2:4d:79:ae:a0:fa:c0:0a:5c:3a:3b:e1:57:4e:16:
de:d2:45:ff:66:4c:e0:77:80:73:1c:85:4e:fd:43:
2d:f7:37:2a:08:d5:9d:41:b1:17:eb:31:da:1e:00:
d0:a6:9b:98:e1:cf:a8:1c:76:62:1a:db:5d:04:09:
78:cb:34:b2:98:6d:67:d3:6e:b5:eb:8c:c2:73:51:
78:36:ee:a2:6f:68:fc:ea:1b:4f:ae:37:2e:0c:39:
7d:89:de:bf:ab:80:e9:ec:86:f1:8d:82:57:bc:b5:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:AA:EE:65:29:FA:87:7C:79:3E:F6:5B:D0:54:87:32:7A:D3:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac966359-0ced-343e-aa8a-6949bca6a592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:9c:ee:5c:ed:ea:d9:d5:29:5f:de:b8:96:3f:cd:cc:3f:5f:
97:fc:e8:4b:11:53:b2:b0:44:b5:01:c4:00:17:f1:fc:05:96:
4b:22:7d:34:ea:dd:b8:84:df:0c:c8:e1:ee:e7:4d:af:c1:84:
4a:a0:5c:f8:7b:e9:e5:96:84:2b:af:fe:3c:41:f8:b3:14:24:
c4:15:27:ad:a1:44:9b:79:92:73:8d:ea:40:2e:32:33:ce:db:
2f:25:f1:ea:62:ce:71:83:f4:f8:4d:20:ed:2e:6a:a3:e2:69:
3b:9b:7f:24:40:45:08:05:cf:f0:37:b1:56:8b:25:32:8e:eb:
18:87:e0:0a:5f:63:43:2b:76:7f:d2:e2:28:32:99:74:82:fd:
31:18:28:ec:4d:13:9e:1b:a4:ac:dc:13:88:53:af:90:2c:16:
3c:52:9a:18:00:6e:51:92:d2:53:9f:ca:b2:bd:39:6b:93:95:
80:22:f6:00:38:b2:7d:28:42:e3:fd:9a:3e:95:6c:b4:50:4b:
0f:c4:b0:be:77:47:61:9a:a0:9e:d1:f1:b5:c0:1d:55:6d:03:
1b:3c:21:2d:71:70:06:07:d8:b5:56:e3:52:a1:5b:58:f5:d4:
af:e0:af:eb:ea:ec:15:52:97:90:72:c4:e7:36:34:e3:da:ba:
04:88:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:25 2025 by rpki-client