Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac9b4e58-bddb-3352-90fd-6b77cb979f1c.roa
File: ac9b4e58-bddb-3352-90fd-6b77cb979f1c.roa (raw, json)
Hash identifier: Otrtt0ejJbHMvxInK6Cg21365jCOkqmIuMejDNav54I=
Subject key identifier: B7:1A:B8:0A:3C:45:D1:85:65:58:47:11:56:AE:D5:43:F6:24:CF:0B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBEEAAC040EAE21E09137B300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac9b4e58-bddb-3352-90fd-6b77cb979f1c.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:ea:ac:04:0e:ae:21:e0:91:37:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=6921068d-2f75-4c47-b91d-cb92f24d9dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:10:21:bc:dc:e7:eb:6e:52:eb:1b:bd:97:
50:b4:11:b9:ed:8e:a3:69:01:91:e0:47:74:74:3e:
96:04:a8:ed:e4:96:33:84:f1:6e:78:4c:86:6d:a4:
69:43:4d:10:c6:74:a8:97:29:96:84:49:da:c4:6a:
36:b4:a2:61:81:c9:68:57:c9:d9:f6:7f:47:2f:35:
87:f9:18:de:d8:d5:96:62:80:e0:b9:46:7e:90:98:
8d:ce:ae:ba:4f:d3:f4:31:80:f2:68:62:7a:f8:9e:
f5:19:15:4d:26:88:5e:6e:50:ef:e7:6c:67:f3:8e:
de:c8:b9:44:14:26:96:18:6d:ac:70:8a:fa:c7:d6:
08:38:d8:7b:41:9d:03:d9:dc:a9:47:ca:01:68:0b:
2e:d7:30:76:54:9e:40:75:9c:17:70:f4:bf:77:66:
5a:3e:da:0a:e7:42:94:83:0e:6c:c1:dc:06:15:9e:
3d:42:d2:38:38:54:25:7a:b6:77:9a:46:1a:c8:21:
85:45:fe:7e:d5:5e:b6:50:70:23:10:ef:99:aa:dd:
f8:13:97:99:66:b2:96:2d:bc:fa:75:9c:cd:fc:5d:
f7:8a:40:bc:c5:a6:a5:df:7d:3c:49:13:b7:9c:b1:
3a:34:4e:8f:72:92:c5:3e:ed:07:17:7a:93:a5:a0:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:B8:0A:3C:45:D1:85:65:58:47:11:56:AE:D5:43:F6:24:CF:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac9b4e58-bddb-3352-90fd-6b77cb979f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:40:85:62:2e:94:6b:02:db:19:31:51:99:49:89:5d:56:3a:
3a:63:ab:41:f4:8f:0c:bb:e4:24:de:66:52:3a:45:7d:89:2a:
51:ca:76:c7:df:e1:3b:a7:50:cd:91:0a:de:76:56:67:67:b7:
f9:46:ad:ac:0a:9c:e5:94:27:93:76:c6:a6:98:29:90:c9:87:
fa:4b:30:ce:ad:58:82:83:d1:87:38:df:a9:71:9d:54:ae:12:
51:90:ef:df:95:ee:9e:5e:82:32:7e:5a:e3:4d:b3:09:e6:0d:
37:dd:62:0a:3d:f7:f0:65:85:1e:ba:1f:e7:6a:e6:75:65:7a:
f0:b7:cd:44:ea:8f:9e:6f:b4:e1:da:16:85:f7:e5:fd:c5:2d:
54:a8:a3:8f:31:97:af:5a:ad:c4:3f:12:1c:ba:54:99:92:70:
cb:55:d4:87:e3:68:3c:b5:04:fd:23:ab:69:cb:36:df:5d:8e:
50:23:1c:52:4b:b3:98:52:ae:d3:58:d7:ee:6a:66:23:46:17:
e9:32:f9:9a:76:c0:ce:e9:22:06:3f:59:56:e7:41:d5:f4:ea:
52:c0:1f:d9:a0:f5:e1:27:bf:d9:cd:19:63:1b:7c:0e:ed:77:
66:c8:7e:86:93:56:d4:96:1e:c8:58:52:d3:ab:34:c2:b0:d8:
9a:6f:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:10 2025 by rpki-client