Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8de7009-50c1-3553-acb8-5c3d1c3dca5f.roa
File: b8de7009-50c1-3553-acb8-5c3d1c3dca5f.roa (raw, json)
Hash identifier: R7KcEvsfBU+tKM3eK6JUGv5F6lMiwe/DlGbIFyixB/I=
Subject key identifier: 90:0E:91:C4:9E:65:6B:F2:41:E8:12:5F:33:61:CD:BA:8C:A3:29:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584041F88079D7B025108A90E600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8de7009-50c1-3553-acb8-5c3d1c3dca5f.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:f8:80:79:d7:b0:25:10:8a:90:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=3a665a73-0bc9-469e-9a99-3984a74a704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:f0:4b:e3:5b:91:85:65:24:95:b5:06:f1:
fa:39:20:9b:1a:ea:e3:cc:25:ad:0d:39:e4:d1:cb:
db:8d:f9:03:98:00:71:fb:0b:17:b6:ea:b4:85:8d:
1b:07:2e:e7:0c:04:4e:82:cf:96:01:b9:f2:35:fb:
0b:04:c8:2c:be:6f:d8:24:ac:5d:b0:98:51:c8:c1:
15:df:46:66:c8:36:9f:73:0c:b2:7a:b2:c8:99:5c:
60:25:4d:97:b9:34:00:f2:a0:52:44:db:40:f7:01:
20:0d:f9:17:55:a3:6d:89:e8:74:3f:58:90:26:8e:
41:39:41:ce:e0:ac:00:28:af:6a:a3:34:fb:ac:84:
38:74:72:d1:08:9c:35:63:87:8a:65:4f:41:b0:e2:
0f:a0:be:ef:69:42:e2:01:4f:3a:8a:93:e5:6e:b0:
21:1b:69:45:b8:c6:3a:6e:a3:ea:0c:01:bc:2c:a1:
e4:7a:61:12:5c:c1:67:ee:c8:2b:c5:73:6a:93:2e:
f1:b9:66:4c:80:c5:82:04:c7:09:ef:02:7a:02:3a:
8c:71:4e:58:38:be:84:36:5e:24:45:d6:e9:63:d9:
57:b1:83:04:f3:d6:9d:a7:96:07:3b:90:ba:36:77:
88:d1:dd:8f:7c:10:14:8d:df:69:fa:d6:94:69:08:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:91:C4:9E:65:6B:F2:41:E8:12:5F:33:61:CD:BA:8C:A3:29:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8de7009-50c1-3553-acb8-5c3d1c3dca5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:51:df:45:8f:a6:21:33:e6:12:89:5a:b2:39:1f:54:14:41:
05:84:e8:e4:3b:32:55:1e:c2:4c:ab:8f:18:9d:12:e6:5c:f8:
36:f0:21:d2:51:64:71:f4:28:59:4c:33:f2:22:56:3e:ab:0f:
ba:67:2d:c3:47:02:d5:6c:a0:33:b7:ed:5c:fa:45:80:5a:7d:
3e:6a:e8:57:ac:5b:1e:4b:18:1c:a0:ca:14:0d:c8:8f:ac:dc:
94:9b:35:c9:e5:a0:02:da:8d:04:50:c3:24:91:0b:e3:5f:1f:
51:75:62:2f:e1:eb:08:c4:7a:53:b6:54:c9:b9:80:e3:28:c0:
43:52:15:01:cc:d9:82:d0:23:35:80:b7:9b:db:65:ad:ba:20:
b3:3b:ff:d8:fa:bc:83:2c:4f:35:57:03:bf:cc:ae:ed:e6:70:
f7:37:a7:cf:e0:d3:e2:b8:99:e3:e5:9a:6c:8d:00:b7:05:2c:
b6:1a:61:3f:05:95:ee:5a:42:6d:37:f4:c0:2f:a0:2e:2f:83:
58:cc:62:66:bf:2d:15:25:e0:65:08:31:2c:10:4b:1c:62:69:
06:0a:7c:b8:bb:54:a0:d0:2f:76:20:5b:7d:7f:e2:60:35:99:
8b:da:8d:30:b8:06:33:1c:da:f9:0f:40:6b:2a:39:53:c5:2a:
65:d5:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:56 2025 by rpki-client