Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb4c7a62-7fc9-354d-b8ac-4fd0d1dd20c4.roa
File: cb4c7a62-7fc9-354d-b8ac-4fd0d1dd20c4.roa (raw, json)
Hash identifier: b1Jnvg33xMTEhmP5V06DXvjHIoA8mwfkzmrd+vh8jDo=
Subject key identifier: F6:79:4F:7C:52:12:AD:CA:C6:73:30:B8:6A:97:1A:AA:2E:C7:9A:4C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408692682342CFB65C66FA5E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb4c7a62-7fc9-354d-b8ac-4fd0d1dd20c4.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.0.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:92:68:23:42:cf:b6:5c:66:fa:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=77edc668-ee5a-4e74-a4c4-7741aac60991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:b3:1f:39:7b:1a:00:f3:d2:6a:31:7a:d5:
67:71:74:1b:d1:93:44:36:7a:30:35:cf:3d:ee:33:
a1:74:91:c6:32:3c:61:77:94:0e:20:41:da:81:eb:
b3:ca:ba:24:45:1a:67:04:74:20:4e:71:40:3e:16:
a2:bc:81:54:6f:b6:7c:7f:38:af:29:23:20:50:57:
37:c2:29:22:f9:6e:6e:20:12:33:50:95:c8:0f:ba:
20:2e:05:57:35:04:dd:33:b6:1c:21:d8:0a:7b:04:
50:0d:95:30:12:31:f6:cc:00:c0:65:ef:cd:0f:eb:
6f:2e:78:19:ae:a1:87:21:a1:6a:82:1d:fc:e4:06:
a2:02:31:7d:57:25:35:67:61:48:88:24:21:ca:cf:
41:dc:bb:f9:54:2e:b5:21:ed:b1:ff:59:59:b7:e6:
00:12:6a:0a:88:7a:da:4a:85:ac:b7:21:72:42:98:
fe:0f:2c:00:91:69:e2:c9:19:99:ac:80:c6:68:36:
73:e6:29:bf:e1:b0:27:6b:76:cf:65:03:27:d2:02:
a6:9c:dd:42:40:94:f9:42:08:30:4a:87:14:56:6a:
00:a5:5d:2c:97:34:0f:ec:08:ae:64:7f:dc:db:fe:
8d:a2:5f:28:27:9f:db:39:39:b9:1d:de:d5:a1:8e:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:79:4F:7C:52:12:AD:CA:C6:73:30:B8:6A:97:1A:AA:2E:C7:9A:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb4c7a62-7fc9-354d-b8ac-4fd0d1dd20c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.0.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:37:d1:b6:13:8f:72:90:aa:39:af:02:f9:2e:cc:e2:15:51:
a7:91:97:b4:42:9b:84:59:92:e5:eb:4c:84:1e:6c:08:13:0e:
50:68:a5:e5:81:12:22:e5:ee:f1:87:5a:54:df:7b:d9:85:1d:
77:a4:ce:14:77:76:93:b3:33:d6:3c:04:a1:a2:c5:78:42:da:
ca:b6:28:5e:7f:69:65:bb:8f:03:d9:3a:ed:40:1f:ff:7a:15:
08:e3:5f:42:26:21:fd:26:b5:fa:30:42:2f:ea:22:7f:f7:db:
ef:3e:54:e0:ae:b2:98:0b:1b:c2:fe:d4:42:5f:df:38:e1:e9:
c4:ad:fd:c3:46:e2:de:2d:f6:b8:0f:82:68:ff:3d:c7:a9:89:
9e:05:79:9f:a5:22:6d:7c:81:03:0f:26:af:5c:91:6b:01:05:
cd:8f:9a:d1:fb:39:53:fe:04:7d:34:a8:6d:c5:34:ed:e8:98:
77:11:84:d6:76:87:f9:e9:10:c3:06:9a:16:9a:1b:02:f5:c9:
c7:e5:ab:01:40:c0:44:a5:67:0a:a4:8a:6e:c4:8c:3b:88:37:
01:8f:dd:1b:a8:34:ba:c3:2c:59:50:7b:7a:b6:c5:fb:cf:42:
e2:be:3f:18:95:37:c0:7b:9b:bc:78:c8:1c:ef:9a:5c:74:51:
e0:b1:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:38 2025 by rpki-client