Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbb9aca1-e741-3561-9e8e-aa57a30b17e7.roa
File: cbb9aca1-e741-3561-9e8e-aa57a30b17e7.roa (raw, json)
Hash identifier: 3D3ya/I8GNXG6PjJblIcJXeYM7+ddZloy4c70QjWEq8=
Subject key identifier: 22:92:63:91:10:A7:A8:9B:68:F6:2E:8B:37:69:5C:07:61:5E:4F:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCE2C0B1393D2A4DCE9DB9B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbb9aca1-e741-3561-9e8e-aa57a30b17e7.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:2c:0b:13:93:d2:a4:dc:e9:db:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=f9afbe4a-98b3-4734-8efc-24e546d6c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:55:71:bc:b1:d3:69:1b:58:6b:3b:55:cc:
d3:57:9e:68:96:a0:2a:bb:92:aa:b9:e8:ab:3f:69:
30:68:3e:e2:c0:12:d8:26:94:4d:2d:41:71:9a:26:
51:26:5f:cb:e7:2a:60:e4:dd:62:66:88:37:64:64:
a3:47:b3:ce:57:2b:8b:81:5b:b2:e9:29:20:1c:5e:
ca:f5:66:07:75:8c:7c:0a:3d:3e:99:a3:3d:87:ba:
44:57:8d:a0:cc:e4:06:98:af:fd:64:e5:85:44:cc:
00:ec:18:9e:b3:88:44:e4:27:0e:5c:a0:62:f5:86:
a5:ec:fe:fd:86:76:ad:6a:0a:77:07:83:b4:61:8c:
b1:73:6b:6f:73:bb:7a:f1:1b:e9:dc:d8:17:14:b7:
90:27:b4:55:df:a3:9f:ae:55:38:7a:37:ab:83:58:
49:e7:3a:95:d8:2c:3c:25:42:6a:c9:41:b8:6e:d2:
c4:d8:49:5e:9d:36:9b:e3:03:1a:9a:05:0b:94:37:
95:76:18:59:d1:6d:ba:03:13:f0:40:82:30:ef:05:
0b:88:72:24:4b:59:ec:b4:06:df:67:5d:79:e3:f9:
cf:69:1d:83:80:35:7b:46:2d:8d:aa:47:c3:47:36:
73:67:eb:d9:a2:8a:8a:f3:5d:fd:48:d7:e0:8d:23:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:63:91:10:A7:A8:9B:68:F6:2E:8B:37:69:5C:07:61:5E:4F:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbb9aca1-e741-3561-9e8e-aa57a30b17e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a1:f3:fd:0e:c6:6a:6b:d7:5a:91:9e:fe:7e:5f:57:41:b6:
01:ea:f2:b2:6f:4c:0e:2f:f7:3e:e4:41:ae:34:91:cc:6f:1c:
78:7e:97:76:9f:ae:e3:98:4e:a9:29:5e:dc:ea:59:46:79:6d:
77:94:9b:49:e0:7f:c2:94:f7:63:74:cb:1c:fd:c5:ae:8f:5e:
67:3e:ab:85:d0:15:ff:62:bf:0a:96:96:b1:1c:73:ad:e3:ec:
0d:3b:60:c3:58:0c:b4:b8:24:05:84:3f:34:2b:2d:fc:6b:5f:
f0:64:73:69:af:0f:e8:5d:4b:ec:ca:f8:c1:1d:39:11:d6:6a:
2e:ae:13:22:1e:02:e6:fc:b1:10:40:d3:44:55:41:09:91:b6:
d3:34:89:bf:74:7f:ce:12:f0:0d:ef:cb:74:0f:60:d7:54:3a:
03:a5:1a:2b:6f:3d:b8:59:ff:59:a2:05:d5:d2:f2:3d:37:20:
c7:c2:1e:7f:a4:ff:5b:3a:e0:43:df:f3:6b:87:b2:16:cd:29:
38:f5:14:fb:f3:e4:10:89:00:97:ed:17:7f:40:7a:b3:61:07:
cc:d9:54:fe:37:b6:96:01:4c:be:25:f0:e8:26:61:f2:5a:7e:
36:47:7b:67:db:09:ba:80:d9:a7:81:59:da:59:35:eb:72:50:
5f:f4:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:54:48 2025 by rpki-client