Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bab2a035-54e9-3581-af74-9827422d0ddd.roa
File: bab2a035-54e9-3581-af74-9827422d0ddd.roa (raw, json)
Hash identifier: nrpENBz6C2n5qNFQZXq8+uhWD3UnqkXAkJdyIow5aEU=
Subject key identifier: 6F:0F:C3:92:D5:31:9A:2D:3D:7D:D4:A8:7D:9C:7C:83:F8:C2:57:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBB63D7B848B6CADD2CC53800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bab2a035-54e9-3581-af74-9827422d0ddd.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bb:63:d7:b8:48:b6:ca:dd:2c:c5:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=7150b829-0dca-49d2-a39e-1013778b6996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:45:75:e8:ed:5b:76:99:69:66:9e:a5:5b:
ff:9f:64:2f:20:ca:29:1c:da:ae:2b:a8:bb:33:7f:
5d:c0:c4:87:f8:e0:28:17:15:12:6e:b4:a8:11:bb:
a6:a1:e2:09:66:a6:fb:be:c4:02:99:f0:45:89:09:
04:bf:e3:91:d4:3f:f6:73:13:98:64:16:68:44:49:
e0:8d:5b:60:a9:c1:6d:17:09:c8:dd:a8:ff:49:0d:
32:1d:96:72:87:08:38:c3:93:c0:aa:b1:87:e7:2d:
10:b8:34:a8:d2:55:9f:a9:02:76:dc:bb:16:25:d0:
09:ed:53:89:a7:50:ab:56:e3:36:68:fc:2e:2a:44:
8a:24:4b:9b:15:2d:34:c2:6b:62:3f:37:6e:19:15:
62:05:fa:b5:a7:af:e2:41:2f:f0:99:00:c1:83:a1:
bb:f8:26:59:d2:e8:d4:0c:e5:40:dc:e0:c9:4d:1b:
e1:1d:a8:75:2a:c6:7f:70:48:70:bf:ec:2a:77:ce:
01:2d:5e:86:47:99:4c:a7:14:21:6b:8a:11:1c:8c:
3e:11:73:e2:31:c4:7e:c5:c3:74:b9:b1:19:69:63:
a4:d8:1a:73:5e:1b:23:f2:d3:b8:79:bb:dc:11:21:
29:7e:30:d4:88:ce:30:60:49:16:5c:1c:78:72:45:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:C3:92:D5:31:9A:2D:3D:7D:D4:A8:7D:9C:7C:83:F8:C2:57:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bab2a035-54e9-3581-af74-9827422d0ddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:e2:48:9c:d0:e7:0b:63:d6:69:52:a4:8a:5f:1d:7e:ae:23:
fc:ef:83:e8:fb:ef:b8:de:97:61:91:b7:b5:05:29:91:04:96:
f9:0d:d9:6a:7e:7b:de:15:50:88:e2:64:95:49:fb:bc:fc:e8:
04:77:0e:25:0d:22:e4:41:62:53:cf:ac:4a:b3:ef:ff:52:17:
e2:35:32:e8:f7:68:ef:eb:cb:f7:65:fa:8c:eb:19:4d:06:67:
65:b2:e4:0a:1e:2e:17:45:c9:ba:51:49:8c:6d:db:08:29:0c:
ad:69:5b:7a:b5:87:46:af:72:cc:ce:14:3c:4c:c1:19:d0:37:
11:ca:9f:c1:5d:ac:4b:01:b6:67:32:13:36:d0:e7:b4:f2:0d:
cb:43:c4:f5:a6:76:cc:a8:9d:cf:56:7e:cb:84:fa:dd:58:01:
86:f7:1f:7b:c8:42:79:4f:ee:fb:e1:77:ef:2b:ea:9a:e5:97:
c0:b9:50:42:d2:c6:cc:d1:7f:a3:b9:7f:fa:43:cd:f1:80:ff:
71:ca:f7:38:31:86:34:27:29:22:d5:19:a2:37:16:68:0d:0e:
5b:a2:91:7d:a3:98:0f:19:67:a8:ed:11:04:00:6a:83:90:bd:
7d:94:6c:e4:7a:6d:79:cc:08:21:41:65:27:e8:f1:0f:9b:ee:
7e:3f:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:19 2025 by rpki-client