Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bac0d432-58de-3c63-90b3-f864ca58471b.roa
File: bac0d432-58de-3c63-90b3-f864ca58471b.roa (raw, json)
Hash identifier: 037NYhRVuTkq5eNuFwaBD+tX/s4JA2mjfGR2Eh8hSRY=
Subject key identifier: 8C:02:44:76:6A:12:33:72:C8:D5:81:B8:0E:71:21:65:A3:DB:64:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840863914090B24B9A8E31DABE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bac0d432-58de-3c63-90b3-f864ca58471b.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:39:14:09:0b:24:b9:a8:e3:1d:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=1fc3a7bc-2b7f-4c91-963d-d7cee38c9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:21:fd:d9:42:31:e5:5b:da:31:72:c0:43:
7a:79:7d:c5:f0:f2:43:58:f7:b8:c4:e2:fa:b2:d6:
f1:d1:89:5c:96:0c:ab:67:1f:e7:bc:69:67:5e:8d:
b2:42:1d:83:4e:67:fc:0d:34:15:ca:60:ba:1c:88:
48:d6:07:2d:85:63:0f:74:b2:a3:75:72:7d:33:fc:
91:51:77:d2:76:6d:6d:77:b8:1d:46:79:b1:e3:f5:
09:a6:3e:93:10:05:db:86:68:e0:5c:45:a0:c2:01:
ee:06:47:45:3d:23:43:a9:42:cf:b8:5a:f9:96:53:
53:9c:3a:4b:d2:27:af:dc:6a:b2:7a:2a:63:87:b8:
e4:c4:96:53:30:86:a0:dd:02:51:87:8d:6d:34:23:
8a:e0:8c:b3:9b:81:20:0d:f9:a8:95:90:dd:ce:35:
c8:1d:cc:78:35:79:f6:71:84:e2:fb:3e:ae:b9:ad:
40:a2:d9:df:c4:51:65:dd:7e:ab:d7:1f:f6:14:b4:
a6:4d:3c:0a:82:85:08:71:c5:51:e0:10:5b:61:02:
db:83:e4:14:3c:98:d0:37:8e:a9:3f:37:42:fc:90:
b2:bb:81:e4:a3:2e:01:de:d2:7d:0e:8a:bf:5d:7a:
a3:18:88:91:9e:4d:35:95:94:40:28:9d:52:96:e7:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:44:76:6A:12:33:72:C8:D5:81:B8:0E:71:21:65:A3:DB:64:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bac0d432-58de-3c63-90b3-f864ca58471b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:8a:61:cf:a9:d1:fc:98:55:ee:c2:eb:c1:e6:5e:97:a7:71:
16:9a:07:26:d6:a9:5c:0f:2c:96:53:3b:45:14:64:57:ea:81:
0d:8d:58:9c:f7:8e:37:9f:48:a0:21:01:57:0b:e0:6f:f3:26:
9f:45:f6:af:9c:f4:2f:a4:5f:b6:a5:fb:71:4e:e1:c2:40:01:
ab:29:2f:1b:35:fa:b7:81:fe:2c:26:58:ea:42:ff:c3:5a:b5:
39:3a:3c:b5:86:95:9d:c8:00:b0:35:2b:1f:17:ca:26:2a:a0:
90:a0:56:99:fc:aa:7d:4c:5b:c9:3d:9b:19:30:bb:42:e1:53:
b1:18:b8:b4:66:cb:3b:f2:0e:8d:1f:09:0b:87:9e:6a:82:52:
d7:a8:3d:1b:9b:e6:bc:45:42:71:45:57:d7:0b:f6:68:63:a8:
f4:10:87:d1:f4:46:2f:c5:32:bb:b9:79:22:c9:db:a1:1e:ce:
7c:68:81:6f:cc:52:31:4e:8d:31:7a:f3:21:33:16:4c:7c:d0:
44:f0:f3:24:ac:13:e7:60:a5:b7:99:06:76:25:78:eb:f8:fa:
ee:bc:e5:81:87:b5:1a:70:94:b2:48:af:a3:61:a3:16:b7:b1:
41:44:48:82:f8:c4:67:c5:3b:0f:3c:50:aa:92:86:92:65:23:
ba:60:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:07 2025 by rpki-client