Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4d0611f-ab76-30d5-81be-0dacb302b1dc.roa
File: c4d0611f-ab76-30d5-81be-0dacb302b1dc.roa (raw, json)
Hash identifier: A39GJlYDbZSIFn/IdsFp68ZFdo1j5UXWb38zMS59hp4=
Subject key identifier: 57:25:E8:17:EA:0E:83:3B:02:E8:A7:66:83:74:5C:07:68:7E:3B:90
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404383190C960AFC4B2721C520
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4d0611f-ab76-30d5-81be-0dacb302b1dc.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:83:19:0c:96:0a:fc:4b:27:21:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=d5b6d18a-cced-4ca7-9a2b-9f345e50cfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:72:3c:db:8e:3d:07:a0:06:1c:f7:45:da:
88:80:05:11:dd:7a:76:86:e0:e1:76:1b:3e:eb:0a:
9b:da:61:fa:03:cb:dd:72:9c:ec:78:e6:ff:9a:b4:
fa:f4:5f:82:d3:52:6d:0d:dd:1f:4f:b9:9c:b9:79:
1e:f1:58:5a:16:b0:c0:a2:e8:0a:8b:15:70:43:78:
3d:8e:97:8b:94:df:84:18:20:57:99:5c:1e:70:55:
64:4a:60:80:8c:7e:12:02:38:bd:54:24:e0:a9:08:
83:1a:36:3f:78:3c:46:ba:80:6e:0a:d4:23:82:5a:
b5:51:5d:21:70:84:8f:4f:21:f9:4d:02:c8:47:b7:
68:7f:d8:6f:09:76:62:6b:af:22:1c:87:f9:ca:19:
d5:a5:10:55:e1:0e:bb:d7:ce:25:9e:9d:d7:3f:fc:
45:88:ea:84:f1:ec:56:d4:03:1c:14:27:98:cd:aa:
61:17:e0:9c:59:44:42:13:df:e7:36:31:be:16:e0:
51:58:c2:75:cf:ab:f5:d9:68:0a:be:b4:72:c3:e8:
9a:73:35:00:ce:3b:a4:20:ef:31:7c:78:c2:6c:56:
de:0a:0c:8f:3c:13:2f:6d:38:3f:a7:93:b4:1b:0e:
e1:06:f1:63:3b:10:14:1a:53:6d:59:af:05:e5:b0:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:E8:17:EA:0E:83:3B:02:E8:A7:66:83:74:5C:07:68:7E:3B:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4d0611f-ab76-30d5-81be-0dacb302b1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:5d:4e:c4:70:f2:a6:72:93:b1:65:47:f3:2f:9b:34:d8:ae:
e7:20:ca:d0:68:ff:25:83:2b:67:1a:31:23:ce:8e:01:f3:30:
cd:e2:7e:12:22:4e:d6:d4:42:da:48:a9:72:4a:fa:06:0c:f6:
59:48:ac:f6:b2:b5:0b:66:b9:ca:e7:74:25:4f:db:b1:fb:3e:
4f:47:7a:d6:1b:00:f2:08:2f:39:18:ec:53:f5:87:e1:b7:67:
26:5d:9b:75:43:c4:63:57:f9:90:35:73:25:21:96:d6:60:02:
68:36:54:6e:96:4b:28:44:7d:80:f7:69:5d:48:4b:9c:47:cf:
96:ca:5f:7f:45:d4:e6:fc:bf:a0:30:9b:49:38:4f:58:66:d2:
3a:dc:be:66:1c:c2:23:59:0c:b6:d1:50:6d:c9:64:3c:31:4c:
67:f7:9e:e3:77:b4:19:1e:22:fe:e2:b7:97:89:d3:9c:a9:3d:
eb:07:48:49:af:96:f7:69:36:b9:c4:f0:d2:62:cd:53:77:d2:
d7:1a:8e:04:35:f1:e2:db:9c:c8:2b:91:96:bc:48:b8:13:dc:
dc:6a:11:54:f7:27:f8:72:64:5c:fb:07:50:36:33:8a:5e:77:
f2:e8:2a:2f:9c:1c:19:2d:ba:c9:f6:cf:d6:8f:9e:1b:02:e9:
4a:03:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:18 2025 by rpki-client