Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba3c864d-61e6-3c00-aa1c-90617deeb52c.roa
File: ba3c864d-61e6-3c00-aa1c-90617deeb52c.roa (raw, json)
Hash identifier: srN7MgqQnxpAbDqzqHXYUshN3aPqva427yX7WRyk8jI=
Subject key identifier: D6:B5:47:4C:9D:10:5A:46:5B:2E:6A:DF:C7:01:BB:2D:22:57:08:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D45CC10AB46156EAF915C4C8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba3c864d-61e6-3c00-aa1c-90617deeb52c.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:5c:c1:0a:b4:61:56:ea:f9:15:c4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=cb7da9e2-158b-4c7d-94d6-796ad9bb8a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:3c:fa:c1:77:98:d2:33:8c:db:bc:4f:c1:
7b:bf:2c:6c:10:62:f8:80:dd:04:2d:5c:38:6c:55:
8f:1f:e5:23:27:15:b1:52:f5:f3:a2:e2:72:b0:20:
5c:c6:73:d0:92:75:72:d7:b1:74:65:2c:ef:d6:db:
f2:6d:11:e0:94:22:21:f1:09:55:d9:95:66:29:3c:
94:e7:de:6c:30:ca:c5:53:fc:b7:96:1e:d2:35:21:
d8:e7:9a:c6:a3:b8:96:b4:82:a4:74:ab:67:5c:4a:
a9:f2:5d:59:a2:e3:61:ea:04:08:71:35:fc:38:20:
37:5c:fe:c3:61:fb:f7:fc:54:3a:0b:3d:4d:75:29:
b2:19:3d:2d:80:b0:ac:e6:0c:06:e9:c9:ea:db:5d:
4f:99:23:de:32:c7:19:51:85:bc:d8:78:bf:43:dc:
0c:62:ed:ca:c4:7b:d6:ca:f3:c4:08:b4:3e:ee:38:
68:98:6c:c2:e6:5e:13:74:4e:df:72:30:08:b5:aa:
d6:9f:b3:f7:90:5a:55:74:86:a5:db:29:12:57:88:
d1:0a:65:c1:19:1f:a5:38:b5:f9:40:90:dd:8b:dc:
e6:cf:0b:33:0b:2d:d7:ba:82:c9:81:f2:b6:c7:5e:
91:63:c0:ed:df:0b:17:e2:93:fd:3f:e7:4d:f1:80:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:47:4C:9D:10:5A:46:5B:2E:6A:DF:C7:01:BB:2D:22:57:08:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba3c864d-61e6-3c00-aa1c-90617deeb52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a3:04:26:e6:10:fc:34:10:06:48:18:f9:ce:1c:3a:ef:e3:
11:60:b0:2e:a7:44:0e:57:99:17:b9:e1:1e:19:03:f1:fc:7f:
cb:89:68:72:4c:e2:08:4c:c6:87:f8:11:fc:53:57:67:5c:f5:
30:c1:a3:6f:4a:a9:41:79:11:5a:97:79:cc:77:fc:37:62:db:
bf:3d:73:43:30:fe:a5:3a:43:1b:a4:f4:e7:80:de:3e:fc:38:
91:93:51:6c:90:37:5a:ee:48:f1:43:42:49:4c:20:4c:7d:14:
e2:5c:b6:03:52:75:34:ed:fb:6e:a6:86:d2:6d:88:b8:c5:33:
d1:bb:97:18:2b:c8:49:2e:ca:43:68:69:5d:df:b9:37:d3:92:
05:2f:98:17:54:a3:f1:a0:e6:89:71:e8:73:bd:c8:de:0e:6a:
ac:06:27:d8:18:39:87:6e:14:26:2b:c3:63:d3:d2:9f:b9:75:
d3:f6:f1:46:24:b3:4a:0a:f3:af:9f:6d:31:66:d2:6d:51:4a:
b5:c0:46:0d:56:2c:86:99:00:74:0c:a1:56:21:dc:f3:e4:3b:
1f:08:27:01:83:34:95:a4:c3:0d:cd:46:11:64:19:f6:ba:0d:
d9:3e:15:40:50:49:7c:dd:54:29:a2:07:44:1b:28:18:ff:5d:
59:6a:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:44 2025 by rpki-client