Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be8e2359-e9e8-3331-a851-4d35455a22ba.roa
File: be8e2359-e9e8-3331-a851-4d35455a22ba.roa (raw, json)
Hash identifier: /qvm3RnNKjBSgJNtC/fpCEN0AkF2KTpuZzfDdfAsyJo=
Subject key identifier: F5:51:F6:61:D2:CD:D2:BC:B5:AF:67:EB:50:5B:C3:23:BC:49:A7:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCCA1C10E950C923E4F6C2880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be8e2359-e9e8-3331-a851-4d35455a22ba.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:a1:c1:0e:95:0c:92:3e:4f:6c:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=986e4673-2922-43cb-8709-39391989b34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:63:e0:ad:62:df:c4:de:3c:56:21:89:7c:
7e:b2:a6:80:6e:a4:7c:f0:6f:99:46:86:5f:af:97:
73:23:2f:89:ea:da:a3:f6:42:48:bc:1a:54:4e:a3:
c7:3f:3c:6e:d5:c0:40:43:81:cc:de:f3:01:24:ab:
11:f9:6e:db:26:1e:24:46:da:f5:67:44:0d:4c:e3:
c0:43:f6:29:7c:2d:15:19:a6:3d:41:7b:33:d4:68:
bc:4d:c3:60:ec:24:82:23:50:cb:45:ac:23:54:ad:
97:55:aa:dc:94:8c:7b:4f:1a:25:35:8e:1e:36:af:
62:36:c4:93:04:7b:da:12:7a:d6:26:2f:37:f0:4a:
29:2e:28:42:3e:90:43:e8:06:f9:bc:85:07:0c:24:
98:63:e4:7f:1e:05:24:3d:f0:64:13:f7:74:39:a1:
6b:a9:39:e9:90:63:e9:de:6a:3d:7c:8e:53:44:25:
b3:ef:d5:07:57:fe:45:12:92:11:45:3d:26:ca:ff:
dc:48:cc:c1:9d:ad:20:2a:44:33:80:db:11:22:08:
03:b4:45:db:bc:90:ae:82:6a:aa:5b:2f:d1:8c:5f:
f4:18:59:f9:fd:28:31:17:79:b5:a0:80:2d:41:43:
bd:d3:59:91:71:a9:3d:e2:9b:02:86:40:91:08:61:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:F6:61:D2:CD:D2:BC:B5:AF:67:EB:50:5B:C3:23:BC:49:A7:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be8e2359-e9e8-3331-a851-4d35455a22ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:9a:b5:85:2a:06:1f:81:70:2c:99:55:0d:0e:a1:a6:d3:79:
3c:26:ed:cf:e2:6b:27:aa:72:a4:5a:51:96:63:bb:75:7a:b9:
8a:3b:24:44:fc:22:5e:3f:5f:2e:91:59:70:6a:cd:f5:4e:10:
9e:90:bf:d7:b2:fd:5a:5d:e5:a6:cd:4f:a3:7d:09:7a:47:46:
89:db:5d:63:ff:59:cd:17:10:16:ea:ca:c6:15:45:87:bf:9d:
47:00:66:7a:1a:a0:5f:44:e5:3f:49:cf:cb:68:45:f3:d3:b3:
22:31:a4:e0:1a:47:ef:c3:6f:04:24:b4:19:61:ac:ad:5d:cd:
de:91:70:ab:2b:8f:f1:cb:57:87:b9:c9:c4:60:1a:c0:00:01:
b5:5b:36:c4:19:52:cd:45:76:d5:c9:39:60:97:6a:61:47:48:
60:88:ed:3b:2d:ff:cc:e3:c7:dc:16:f3:73:9d:ae:d3:58:11:
1a:9a:e2:5d:fe:c2:4c:55:4c:47:b9:65:56:5f:36:d3:34:64:
96:da:48:ef:cd:df:db:ca:9e:11:fa:7d:b8:d4:7a:05:24:ae:
28:2d:77:91:8b:59:01:a8:45:8c:d7:98:f6:7f:13:b1:82:20:
8a:fb:2a:af:d8:9a:7a:43:fb:fb:09:10:f3:9a:8f:64:e1:47:
04:49:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:03 2025 by rpki-client