Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2958e04-d86b-3387-ad85-60a1b226b9f5.roa
File: c2958e04-d86b-3387-ad85-60a1b226b9f5.roa (raw, json)
Hash identifier: tb9LSiaAbQeIFcCJtSNrTk5GKkpUCsVi8ZT+Ne/x1dk=
Subject key identifier: 74:5B:08:F5:C1:54:2D:23:DE:4A:DF:E3:31:03:E2:47:6F:97:E2:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408393EB7BD1D3A368ECAF4A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2958e04-d86b-3387-ad85-60a1b226b9f5.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.46.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:93:eb:7b:d1:d3:a3:68:ec:af:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=5dae11a0-e7b3-4a29-a15c-46981423c9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:fa:ff:25:76:01:ce:c2:cc:a2:55:5c:45:
a2:74:c4:7a:f3:11:8b:f9:81:a5:f2:05:08:df:3e:
65:3e:e0:26:b5:1a:32:c0:98:ab:7c:4b:dd:fd:0a:
c9:52:2f:ee:15:a8:48:43:60:4e:7e:31:0c:9c:da:
71:2f:5f:cd:ce:eb:22:07:fa:50:c1:c4:4e:4d:b2:
e3:e1:05:05:e4:5a:74:86:d6:aa:6c:a2:c3:62:fe:
76:5f:9a:df:77:13:17:73:52:cc:57:ee:59:f3:9e:
5e:06:f9:e2:07:c0:6a:71:be:21:97:a7:3b:65:f9:
85:39:b7:ba:14:38:e4:87:03:c5:d5:7d:3e:7e:04:
9b:1d:ed:98:dc:ac:2f:f2:e1:06:71:c8:5b:e8:bd:
bb:cc:78:9d:95:f8:ea:0e:0c:e9:cb:b5:cc:26:63:
fc:96:27:ae:c9:6e:8a:df:60:26:b4:32:b4:f6:26:
84:04:e7:53:a8:25:28:c5:e5:49:66:f3:d7:59:39:
66:82:58:5b:25:41:1d:67:7b:96:eb:ca:72:85:ce:
3c:c3:31:7a:3e:e6:95:9a:e7:ac:f2:d5:76:12:dd:
0a:10:42:ee:12:60:33:a1:ad:43:80:5c:73:e3:52:
ee:a2:94:05:f7:21:5a:df:a7:5e:b0:82:08:f7:dc:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:08:F5:C1:54:2D:23:DE:4A:DF:E3:31:03:E2:47:6F:97:E2:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2958e04-d86b-3387-ad85-60a1b226b9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.46.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:ec:b3:74:21:7c:7b:e5:97:b6:b9:82:80:ca:3f:53:79:f1:
86:17:8d:ca:97:6e:eb:44:b5:05:86:10:c1:dd:0a:77:29:39:
6e:39:48:5b:1e:25:d5:49:a3:c2:cb:d6:03:8b:dd:13:83:dd:
83:3e:f4:9f:2f:fb:fa:32:e8:85:4f:93:0d:c4:0c:93:aa:21:
d7:74:3e:e1:4d:98:3e:95:b0:4e:12:89:56:ff:81:a5:bb:81:
7e:fe:d4:f0:6a:c3:6f:65:03:d2:1c:82:2b:62:9e:9d:ee:12:
7d:e5:29:04:c6:ba:cd:2f:65:ac:56:5e:4b:d5:33:f2:5e:22:
1b:c7:ef:64:62:35:96:43:f7:f8:83:97:65:b0:5b:86:be:48:
30:88:d7:69:72:dd:72:0c:6a:21:1d:82:17:f1:ee:57:16:fe:
a3:7c:04:00:3b:84:5f:0e:61:48:62:53:51:c3:ef:18:6b:a0:
3c:b8:ad:cc:7c:57:17:80:cc:ab:a3:72:34:de:5f:7a:c2:af:
c0:67:64:ed:fe:b7:ca:f7:8d:53:74:f9:63:54:34:cb:b4:be:
f4:f8:4e:cd:24:e0:9f:de:7f:ba:a9:3d:b0:47:f5:90:8e:76:
fc:e4:e0:ad:e8:99:2e:41:9b:1f:e3:69:9c:2b:70:82:3b:30:
0e:9c:7e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:44 2025 by rpki-client