Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b928e0ed-5e57-39b4-afbf-a5b89e1516d2.roa
File: b928e0ed-5e57-39b4-afbf-a5b89e1516d2.roa (raw, json)
Hash identifier: xbDwzb1S8ykn7tJJznvDxUQUK//kp3/VXgn0rpmaOaQ=
Subject key identifier: AE:6E:55:B8:F5:EE:E7:7E:06:04:F0:C6:2F:FA:25:A6:96:02:BE:41
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9B837FABEF57A4908C31D000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b928e0ed-5e57-39b4-afbf-a5b89e1516d2.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:83:7f:ab:ef:57:a4:90:8c:31:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=994f4a65-94e8-40d7-9b21-c84390bc6c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:8c:0a:ec:9a:d8:8c:ae:93:42:51:d5:c3:
c6:0e:fb:bc:d5:1e:49:9f:c6:80:2e:82:f0:1f:f3:
3d:43:50:9c:00:af:7e:3d:b1:02:a8:1b:27:3d:6b:
c4:8a:4e:84:69:7f:0c:a9:5b:ff:b9:f2:3c:9d:67:
84:24:f4:56:29:84:02:a8:be:f4:d2:d1:3a:f5:2e:
6e:1c:a2:37:b9:0a:47:b2:a8:4c:44:bc:34:5f:02:
a2:5c:2e:ac:63:d6:bb:68:08:57:b0:61:48:cd:85:
0f:eb:fe:b0:1e:fc:6f:13:ec:54:b2:12:24:88:29:
1d:b9:e4:41:11:fe:59:6c:b2:73:5c:46:86:04:f7:
08:20:1b:17:b9:48:52:31:3c:76:49:ce:c3:11:e8:
8a:73:33:bf:a5:02:86:54:b1:0d:4d:1e:53:0a:3e:
42:ac:3f:30:d9:1a:17:00:7a:bb:e7:c8:76:a4:e5:
32:ff:cf:94:72:16:6b:47:e2:68:75:3d:13:fa:00:
f4:fa:75:e4:5c:a3:fc:02:42:d2:1c:00:bd:e9:bb:
51:6c:fa:63:87:36:bb:31:76:43:49:0c:09:c6:b4:
81:b6:d0:b6:3e:70:d0:0e:7e:74:54:ce:27:d6:0e:
9a:15:19:2b:64:85:86:12:a6:66:28:49:e6:03:64:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:55:B8:F5:EE:E7:7E:06:04:F0:C6:2F:FA:25:A6:96:02:BE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b928e0ed-5e57-39b4-afbf-a5b89e1516d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:97:0c:34:1c:a7:b3:75:9b:9d:f9:71:37:8f:7f:48:e9:eb:
ab:c6:3f:f1:85:aa:87:26:7e:05:ce:48:65:5d:a4:62:8c:eb:
30:7f:30:2a:59:a7:20:db:f6:36:9b:87:cb:7f:5f:26:44:35:
70:39:8c:ed:64:b6:bc:d3:73:6f:3d:c8:fe:27:45:a0:6f:63:
52:7f:7f:de:4d:f4:0e:3f:b1:bb:99:31:3b:04:27:9f:64:d1:
9d:ea:37:d3:89:b7:de:c9:74:38:7d:ce:91:e1:c6:41:f2:39:
99:16:96:82:2b:ff:5b:5a:42:44:70:bb:22:83:2f:d5:a9:e9:
cc:ab:fc:7f:3d:53:73:c8:65:86:c6:fc:7f:84:92:84:8b:fc:
35:e2:12:af:22:0a:ab:8e:3c:0b:db:be:b8:19:c5:b5:0e:b8:
40:02:21:5a:10:c0:43:9a:60:7b:71:1e:86:f9:40:6b:31:ef:
34:c5:b5:ef:60:38:ec:e0:ba:5f:bf:86:99:b5:94:e2:b3:c0:
81:8a:3e:d1:f4:49:06:60:00:16:e0:7d:77:58:28:48:ff:6b:
85:72:6d:07:58:e4:14:1d:97:8d:8f:ca:c2:f4:21:5e:66:29:
f9:22:7c:cb:c0:64:cc:d8:58:97:e5:05:7c:97:29:14:21:64:
81:93:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:15 2025 by rpki-client