Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfabff17-17c2-3ece-9263-4aae60ecb25e.roa
File: bfabff17-17c2-3ece-9263-4aae60ecb25e.roa (raw, json)
Hash identifier: FnHhpmrpGn7QNpnBfeq1iqD32uZc+7rJd5bmbjug5jo=
Subject key identifier: D4:16:A7:D1:CE:2F:83:E2:B3:AE:BA:9B:37:D4:75:2F:34:F9:7A:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F75CFB3EF0504CD00AA6F2FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfabff17-17c2-3ece-9263-4aae60ecb25e.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:75:cf:b3:ef:05:04:cd:00:aa:6f:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=20a21ed7-e40b-47a7-bff8-af1c6032f24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:cc:fe:ca:fe:ad:4a:04:de:57:73:fd:0e:
57:85:76:46:be:90:22:4a:49:8b:d4:7c:fd:68:d9:
36:9a:7c:f0:9f:6b:3f:ce:cf:7a:b1:06:73:a2:b4:
db:5d:aa:0d:c9:14:7b:5a:2c:08:5b:95:4d:f2:ff:
58:42:aa:50:47:30:65:60:ce:02:3a:02:65:41:e5:
b2:19:ad:75:81:18:2a:2f:30:11:ed:1a:80:37:1e:
42:2c:eb:f8:86:77:b5:c7:7d:31:83:27:ca:4e:1c:
16:42:99:7e:6d:42:8a:87:d2:4b:60:a2:fb:a3:fb:
49:76:28:8b:c9:c1:e2:85:cd:15:6c:41:b9:10:7a:
e9:98:e7:0b:52:e7:2a:bc:54:23:12:7e:ec:f1:57:
8a:2e:bf:25:f8:fc:c7:02:f3:e4:6d:5c:6a:3e:b6:
2e:36:a7:8b:c6:63:b5:17:e4:3d:07:c8:51:cf:5f:
7e:68:0e:b9:e1:d8:a4:e9:e0:39:58:05:f2:fc:c5:
68:17:25:60:50:81:bd:eb:21:e7:eb:5f:45:88:37:
0e:b2:49:1a:c9:01:25:40:e4:fb:f8:eb:c2:1a:51:
78:eb:9a:5f:9d:7a:ac:bf:31:e0:e0:45:40:29:f5:
96:86:37:fe:56:2c:e2:40:43:c9:f0:7b:34:bc:82:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:A7:D1:CE:2F:83:E2:B3:AE:BA:9B:37:D4:75:2F:34:F9:7A:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfabff17-17c2-3ece-9263-4aae60ecb25e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:1f:7b:19:ff:5a:85:43:54:65:88:3d:01:0f:b7:84:15:3a:
ff:4d:39:02:67:73:bf:87:5f:ac:80:45:65:fa:e3:ca:5f:e7:
01:1b:7d:30:45:f9:a6:ef:66:25:3c:bb:b1:8f:4a:b6:fb:ec:
0e:e2:f4:6c:95:1e:cd:f0:a8:8b:51:81:e7:03:83:3a:e2:d7:
9d:dc:43:1f:31:71:e2:6b:04:52:45:05:1f:68:87:df:3a:7d:
88:ae:38:dc:cf:c2:b7:39:77:99:55:53:e4:a8:f0:86:3e:a6:
1c:00:be:32:b9:5e:5f:4a:00:99:fb:8c:a6:70:57:6e:1b:47:
6b:92:27:33:0f:4b:ac:23:a9:55:4f:b7:ea:53:2e:d6:3d:56:
05:5f:f9:bc:c1:0b:fd:52:30:a1:b3:92:c9:a0:95:b9:72:77:
cf:27:85:1c:9c:da:8e:8d:f5:e1:59:da:2f:b9:0c:bf:11:7b:
ce:86:ab:63:e2:80:a5:0d:aa:7f:ea:fb:f7:63:7e:b0:4f:e0:
41:9c:e7:8a:44:e5:68:a6:91:02:f2:ad:1d:b6:cd:e3:aa:74:
c3:a1:2e:fc:1c:7c:27:35:11:7c:7c:7a:67:7e:e9:88:ae:3a:
58:28:11:bf:31:c1:17:8c:b6:f0:c6:51:25:c2:97:9c:29:18:
eb:d7:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:56 2025 by rpki-client