Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf8ea231-a254-3947-b6a9-bd2f1380f4a6.roa
File: bf8ea231-a254-3947-b6a9-bd2f1380f4a6.roa (raw, json)
Hash identifier: 21UZq98YKm0FGS+6Ojmf7BNLN7tE7SI2SW71nLj1jy8=
Subject key identifier: 50:AE:CA:4C:46:D9:5E:55:34:87:7D:C2:D4:0C:C0:45:3B:97:00:7E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D82A0CA05EEB8E4A2A4C05B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf8ea231-a254-3947-b6a9-bd2f1380f4a6.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.46.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:82:a0:ca:05:ee:b8:e4:a2:a4:c0:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=d1810dbd-387f-4b5a-a377-bc84ca6028ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:78:3c:42:ae:e3:ab:a4:1d:8d:13:e2:2c:
db:b5:e6:34:e2:d7:34:01:22:36:f0:b0:e1:f5:02:
9d:2a:3e:0a:c2:db:f4:6b:79:08:52:a6:2f:d2:d2:
97:fa:bb:60:33:f9:b1:da:f1:bc:21:7c:d9:37:49:
c7:c2:f7:21:ed:4f:38:b5:86:f6:ce:91:22:42:c8:
40:fc:58:31:bf:21:15:d4:34:e8:e1:6c:89:ab:38:
7f:8b:a6:2f:01:bc:55:62:cc:58:19:41:67:18:31:
84:cf:88:d4:6e:9f:bf:0a:e1:37:75:0b:1d:e6:94:
dd:e4:a0:d6:db:e9:75:bd:2f:95:91:9c:b1:87:ae:
af:1a:0d:65:57:b1:d4:35:9e:17:e1:3a:f4:e0:57:
5f:78:a8:07:06:a8:d2:7d:80:62:e0:19:5b:79:9c:
bc:ee:6c:e1:f2:ed:8d:cb:77:16:13:bd:61:7f:7e:
34:ec:13:11:46:cc:cd:a5:09:77:4f:ce:19:a1:d5:
56:d0:ad:cd:eb:28:bf:d3:b6:ab:51:85:e1:34:41:
3c:f3:35:93:b7:9f:ea:d1:bd:f0:c0:91:65:82:a6:
87:74:9c:ad:79:dd:51:2d:e7:c4:84:93:0a:af:ca:
a9:8e:c1:6a:dd:18:f5:b2:59:07:6a:e0:70:e1:5a:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:CA:4C:46:D9:5E:55:34:87:7D:C2:D4:0C:C0:45:3B:97:00:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf8ea231-a254-3947-b6a9-bd2f1380f4a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:e8:73:3f:0b:eb:9f:31:af:09:13:83:80:4b:51:ed:a8:5c:
fb:c1:78:fa:00:b3:e2:18:56:14:0c:cd:10:d8:ee:e7:77:27:
c1:58:8d:13:cd:b7:dd:36:c9:95:61:36:4e:b6:c7:1d:e9:0f:
87:14:ea:76:a6:fb:2d:ef:0b:12:1e:1b:da:cb:bc:98:ca:02:
07:46:5c:81:e7:e2:6b:ea:0e:1f:34:96:df:79:af:51:d5:34:
ea:f0:ed:63:b6:a7:0c:8d:1e:44:db:17:73:c7:4e:cb:a8:08:
f3:fc:33:34:81:dd:4f:ce:56:69:6d:7a:79:8b:9f:8b:1d:03:
c8:eb:df:02:89:ac:b0:9a:a7:1b:f5:4e:6b:d5:00:1c:e3:44:
e9:e4:fa:fa:f5:c2:54:ab:bb:01:d2:01:6f:4e:0f:7c:d5:17:
8e:a9:f6:5e:18:e8:97:0e:24:4a:72:27:ed:94:eb:39:20:f4:
ce:84:ca:87:a5:73:a3:e8:a3:ab:9a:b6:49:de:d1:51:00:70:
f2:ec:1f:b3:f5:d8:89:a2:cc:fe:19:0f:be:a7:de:a0:5d:47:
c8:f0:55:7e:4f:13:f6:8a:ba:f7:ff:62:33:1f:f0:cc:16:0e:
8e:ff:12:c3:f9:9e:44:22:0a:94:0b:e6:29:53:e6:0d:b8:11:
e2:4e:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:53 2025 by rpki-client