Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6f8dda1-88cd-35bd-a5bb-a5b5e0262670.roa
File: c6f8dda1-88cd-35bd-a5bb-a5b5e0262670.roa (raw, json)
Hash identifier: 4yV0OHDsUXHM8ZcQa6nNfDa3xgsFHXJDJ3ArCekILXg=
Subject key identifier: 11:B2:6D:3A:29:4D:B2:CF:96:0D:2A:4A:F9:F9:53:76:26:25:89:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D34061B82615B7F7C4EFAF060
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6f8dda1-88cd-35bd-a5bb-a5b5e0262670.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:06:1b:82:61:5b:7f:7c:4e:fa:f0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=f70242ae-84ec-4073-a203-6a32a22a5310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:0a:cc:da:19:30:3d:0f:09:2d:fb:ed:bf:
71:39:ee:4b:10:49:e8:87:94:d2:e3:55:c1:73:d1:
0a:d0:9f:87:9c:e7:9e:1c:e4:9d:a9:9a:94:1f:6c:
e7:6d:2c:1a:2a:52:73:99:d0:41:aa:70:f3:1c:e5:
9f:5b:92:fa:0e:5a:97:ea:40:ca:24:c4:a9:39:82:
36:ba:b6:51:4c:12:fd:a7:d2:e9:16:c6:86:6c:b2:
b5:e5:05:42:1d:e4:f9:9b:12:cb:9b:b1:15:e3:a5:
5b:3e:2b:70:39:0f:ad:d7:03:0b:ec:cf:2a:cc:ed:
51:b2:7f:99:75:0f:49:60:9f:70:17:8d:52:3b:83:
1c:36:53:75:29:b1:33:41:de:44:42:f1:05:b9:fa:
18:fd:a5:04:21:5d:1c:a4:ae:c2:b2:fd:e8:2f:87:
cc:43:32:ec:a1:27:9f:67:35:67:4a:2a:ef:cb:d0:
3f:5d:05:27:e2:d8:f6:2d:b6:78:87:06:6b:d1:4e:
05:6e:57:00:61:7a:2d:b3:b4:75:ed:69:8e:c5:e9:
cc:75:b0:fb:99:f2:87:ba:bc:0c:6a:43:41:0b:08:
f6:f8:23:08:0b:04:02:4f:80:1c:fb:e5:a6:e8:a5:
00:20:c0:89:3b:cf:d5:6f:e0:b0:60:be:9e:78:3a:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:6D:3A:29:4D:B2:CF:96:0D:2A:4A:F9:F9:53:76:26:25:89:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6f8dda1-88cd-35bd-a5bb-a5b5e0262670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:2d:41:d0:75:a5:12:00:ae:8d:e2:69:82:50:bc:d2:a5:87:
a3:6d:7d:e7:3a:73:a9:3c:1c:1d:74:9d:e5:0b:2f:85:2b:79:
50:e1:83:74:ee:99:2a:9d:65:d8:5e:be:48:0a:a0:50:8a:be:
24:59:dc:f9:f6:36:98:04:31:f5:f6:18:55:72:8a:3e:9d:12:
86:c2:3a:b3:d4:6b:58:ba:3f:d8:92:4a:01:fb:2d:ad:29:33:
c8:21:e5:da:e6:77:65:30:95:1d:40:79:c8:89:6b:52:00:0b:
2c:78:7d:f6:f9:ec:17:b3:ed:81:e4:ae:ef:b4:d5:42:a7:d5:
9b:69:92:64:a2:be:08:95:de:2b:96:b1:1b:68:c4:26:d9:e6:
dd:30:4b:3b:d3:61:aa:f2:0f:85:dc:c4:d0:43:2f:e6:1a:e3:
35:ca:0c:f9:6a:be:af:ad:09:ba:0a:d4:a9:3d:76:3f:cb:73:
f9:4c:f1:4f:ce:8f:cb:cc:37:1b:65:8f:1a:34:c6:ba:06:1a:
90:c9:44:71:33:49:73:7e:d3:3b:fa:ec:f2:0d:ef:13:6f:8e:
7a:ed:6a:3c:fe:d7:88:d8:7e:56:6e:d3:e7:9e:4c:f0:25:f1:
3c:46:bb:e5:f7:09:86:06:96:38:bf:63:94:5f:8a:8e:6b:b2:
b8:41:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:14:53 2025 by rpki-client