Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb8ffc75-ebe3-30cb-9f98-fbdcf94b645c.roa
File: cb8ffc75-ebe3-30cb-9f98-fbdcf94b645c.roa (raw, json)
Hash identifier: Glpow8nAqPxp7E8RPPYZmgy+ZTjaqvdnljfdQo+BPWo=
Subject key identifier: 8C:81:7C:AC:C4:80:5E:A3:71:42:D4:05:5C:2B:7D:66:E7:F6:FE:E4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BBAC7FA2D98213CBE28092C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb8ffc75-ebe3-30cb-9f98-fbdcf94b645c.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:ac:7f:a2:d9:82:13:cb:e2:80:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=4a7be5ee-1361-4699-80ba-3c2df8301801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:ab:3b:3e:1f:fe:8c:0a:02:41:b3:f3:84:
63:a4:26:ae:72:be:58:58:fa:53:8c:08:b8:02:9b:
a1:a4:1e:81:dd:30:87:5c:a0:ad:27:7d:2d:be:c2:
bc:a4:c1:66:ea:03:2d:14:bf:1c:b3:b3:e3:67:c6:
ab:e3:54:fb:85:ee:ff:98:fd:a8:37:26:43:33:b1:
3b:b7:ab:9e:af:79:37:e3:6f:e8:0c:93:e5:3b:6e:
1f:68:a3:06:84:00:1d:69:6f:6d:9f:02:df:4a:1f:
88:0f:fe:73:7d:ab:a3:78:a7:b1:c1:6e:e4:c4:d9:
5e:54:33:5c:7c:e7:e6:df:4c:42:cc:02:36:3f:48:
97:25:b6:51:c3:02:19:25:14:16:ef:49:c4:33:34:
1d:b1:19:66:51:f4:27:89:70:e9:9e:ef:90:bc:86:
7b:2c:35:9e:ec:32:c3:17:7b:db:8d:93:c4:59:f4:
78:01:94:49:2b:e5:da:8e:7d:fa:c8:b1:2e:be:44:
00:d8:00:4f:7a:d3:49:99:05:dd:66:0d:fd:4d:cf:
c2:e7:a8:ef:49:73:31:b9:40:2d:13:b9:88:fd:94:
f1:99:b5:8d:48:d7:e5:8b:d1:4b:10:2c:a6:58:16:
4d:a8:a6:89:29:ea:ee:c3:87:79:3e:94:cb:a4:94:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:7C:AC:C4:80:5E:A3:71:42:D4:05:5C:2B:7D:66:E7:F6:FE:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb8ffc75-ebe3-30cb-9f98-fbdcf94b645c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0a:04:8f:07:02:5a:3d:54:f6:87:a6:cd:f1:1d:f0:45:6c:
9f:b8:49:ad:ce:60:c1:3b:22:da:98:34:bf:cb:b5:dd:cf:3e:
b6:9b:7b:4d:8e:1c:40:15:a0:c2:9e:11:28:92:6d:a8:66:55:
89:21:c8:b9:55:09:4c:60:b9:6d:f4:a3:cf:4c:c9:f4:24:41:
ae:ae:f4:97:cd:f6:b1:f9:94:15:e3:7b:1f:66:83:a0:bd:cb:
82:5f:6b:a4:76:ee:93:a9:1e:b1:bc:ef:95:bb:88:7b:06:12:
17:3d:7d:ac:aa:cb:77:e4:ad:fe:a4:da:3b:71:74:6a:82:45:
ed:29:58:1c:e2:0c:9d:2f:11:c9:17:59:a5:b7:6f:58:22:2e:
70:c6:55:0b:f2:f9:97:80:6f:79:22:36:bf:7c:62:80:8a:65:
46:86:e8:6e:b0:6e:93:f2:37:47:d9:1d:d5:be:30:ad:97:84:
ea:bc:59:48:98:99:d7:0d:4f:b6:86:9a:fc:81:13:40:d6:31:
d6:70:8a:67:50:54:e6:9e:54:c1:46:33:dd:e0:97:8a:00:92:
a8:82:2e:6f:34:fa:e0:9d:16:73:6f:7f:c5:cb:35:99:db:49:
3d:ae:af:b7:d9:d0:76:6c:0d:e1:07:f9:56:cb:2b:62:e9:04:
22:ff:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:31 2025 by rpki-client