Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc487ba-5727-3e5b-8714-4f33ccd8237a.roa
File: afc487ba-5727-3e5b-8714-4f33ccd8237a.roa (raw, json)
Hash identifier: FPRO4l8eXuUEGKaP4WtaRbTuNUE3DifTX2C1aucuVXg=
Subject key identifier: 20:3E:63:ED:8B:29:C7:D5:6A:E2:3D:4B:D2:E8:A5:85:C9:DA:CD:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E944E381050EA9458FB1D9400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc487ba-5727-3e5b-8714-4f33ccd8237a.roa
Signing time: Thu 14 Jul 2022 21:12:08 +0000
ROA not before: Thu 14 Jul 2022 21:12:08 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:4e:38:10:50:ea:94:58:fb:1d:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 14 21:12:08 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=a1fa36ca-c18f-4695-9144-6b5d954f7232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:12:e0:83:2b:ae:4d:c8:a6:49:e5:e9:e7:
85:52:f7:2e:29:13:b8:44:29:f7:27:df:ba:09:3b:
f5:90:a2:b1:c5:46:dc:20:d4:ab:64:86:40:c9:5e:
f6:01:07:74:a8:11:25:ac:1d:c7:95:d3:7d:22:21:
38:d0:d2:bf:6e:6f:ee:db:6e:67:2b:0b:57:7d:8c:
0d:cb:7d:c7:d3:9d:d7:89:6c:66:1e:97:d8:53:4a:
8f:08:66:c1:0c:b6:cb:58:e7:e4:4f:3e:d3:53:c5:
65:0d:af:9e:1e:3a:49:ca:6c:8b:54:f8:18:ae:ad:
98:a3:60:f8:a0:ba:9b:b5:be:ca:c2:eb:02:e4:99:
33:95:ac:3c:1c:a1:e0:08:da:34:bc:99:73:b7:58:
3f:d0:dc:af:a5:4c:72:66:ee:69:0f:59:88:7c:99:
b4:77:e2:2e:92:df:b0:42:45:26:6c:50:bb:f3:82:
bc:78:05:1c:9d:9d:a3:30:68:37:d7:49:15:50:44:
a2:f9:80:ed:3a:83:19:c8:fd:e5:db:08:67:e4:13:
fd:f3:13:43:2d:8c:56:d2:38:1f:a6:5a:e3:10:35:
2c:c8:50:85:f3:84:6d:0e:10:90:c5:f6:a7:34:7f:
80:5a:5e:79:5f:a5:ec:30:92:a9:e3:f3:62:59:4e:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:63:ED:8B:29:C7:D5:6A:E2:3D:4B:D2:E8:A5:85:C9:DA:CD:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc487ba-5727-3e5b-8714-4f33ccd8237a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:9a:32:78:52:b2:0f:74:4e:2c:b5:f7:97:15:31:7b:95:2f:
76:2f:49:60:ac:d8:04:af:27:fb:5a:aa:80:73:c4:6d:e2:4c:
50:dd:62:b5:7a:df:3e:55:9d:f9:91:59:90:59:5d:9f:40:79:
e4:98:55:35:23:7a:8f:05:49:9b:88:28:a3:82:5e:25:26:6f:
33:30:ae:f2:fc:51:4d:4a:d0:a9:26:44:29:b2:82:dc:29:90:
6f:e8:6f:4b:f4:82:b2:51:ac:3a:2f:20:8b:bf:47:b9:cc:81:
52:2e:b0:db:8c:e3:f3:2a:89:a7:8d:9a:51:be:4c:19:ea:cb:
b3:10:4c:0d:38:d6:81:a9:6e:c6:7c:67:ac:e2:ef:24:3e:29:
b5:f7:52:4b:7d:31:31:f8:5b:7d:49:2c:a4:7a:27:b4:37:89:
02:7d:23:a2:e4:9b:3a:1a:e8:53:47:fe:26:d4:e2:6c:a2:54:
41:57:65:ef:49:f2:db:b8:85:0b:6b:58:84:10:fa:2e:09:c6:
6c:e2:3b:b7:57:17:b2:33:32:2b:3c:26:59:72:cc:c3:5d:24:
eb:55:17:54:0b:e9:e9:67:5c:f9:7e:d1:7c:a1:e3:eb:19:ba:
88:02:b2:01:ed:0b:45:1f:f9:c5:64:7a:8e:23:91:b3:46:cd:
3c:42:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:29 2025 by rpki-client