Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd27c1a7-0cb5-3ce5-a002-fa134db08eaf.roa
File: cd27c1a7-0cb5-3ce5-a002-fa134db08eaf.roa (raw, json)
Hash identifier: sg+IzruGiCOg0+kFVz0/cH4ayo4wCQelmsFtnMqUm60=
Subject key identifier: A5:25:16:5C:BA:42:BE:A4:8B:B5:1A:15:5F:7F:F1:4F:02:54:EB:A2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D824034EFBD04BE981AB7A700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd27c1a7-0cb5-3ce5-a002-fa134db08eaf.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:82:40:34:ef:bd:04:be:98:1a:b7:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=002c1bb5-eeca-43c3-a1be-aca7abf5de63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:11:41:e6:e3:ef:c6:d6:59:23:aa:93:f8:
19:10:7e:35:8b:18:ce:ef:31:c6:47:da:2d:79:ba:
43:e0:7a:57:5c:7b:9a:36:0d:e4:d2:f8:04:ff:d2:
a7:08:81:0e:e1:58:d3:11:99:8a:a5:f2:81:ab:43:
b6:53:63:7d:a0:c1:e6:4e:77:1c:1b:08:14:1c:6f:
f5:be:fd:ad:a0:84:d4:00:96:4d:3c:00:64:71:1d:
8f:fa:d5:48:8c:93:a5:28:03:bc:d8:a3:74:05:aa:
18:aa:c9:21:c2:af:ea:f4:12:d4:67:80:04:b6:38:
ec:9d:9b:8f:93:10:65:45:3a:e2:d3:fa:62:aa:8a:
0b:f4:ff:ee:98:be:a9:77:88:f5:02:a8:5d:b6:48:
70:2b:7a:b1:20:68:39:c7:af:98:69:5e:96:22:35:
a1:be:d6:85:19:a5:f3:c0:33:6e:a8:dd:fd:ad:ea:
1b:65:a1:19:8c:88:d8:b7:c3:88:1b:04:93:af:35:
7c:18:0f:d0:6a:84:6c:38:f4:02:aa:36:21:d3:eb:
65:de:79:8f:9d:32:1e:95:16:1d:41:a0:3c:02:21:
04:ec:45:88:88:b3:1b:8b:9b:bb:e7:cd:2a:be:c1:
ec:f7:c9:5c:e8:eb:9b:c1:e5:49:60:a5:a5:6a:94:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:16:5C:BA:42:BE:A4:8B:B5:1A:15:5F:7F:F1:4F:02:54:EB:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd27c1a7-0cb5-3ce5-a002-fa134db08eaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:16:c9:0a:db:fa:a2:d8:67:5d:00:62:b7:f6:d6:a1:6d:4e:
3c:98:c9:35:a9:b1:42:ec:f2:a4:65:55:cc:94:69:43:02:de:
31:45:2a:85:d1:04:c6:3b:ed:fd:a7:07:b7:cd:ff:4a:7e:9b:
d7:8f:45:fc:ef:1c:ed:52:e5:d4:82:c0:c2:d1:40:2a:79:60:
1f:9a:98:10:0b:48:05:3f:37:ad:f9:0b:a4:02:cf:8b:10:88:
eb:22:4f:24:4c:17:40:f7:54:0c:07:c0:02:2b:84:1e:33:f8:
70:50:c9:d4:d5:f8:fc:3b:8c:fb:2d:45:c6:1d:b2:a1:70:12:
ee:dc:27:70:41:93:82:6a:52:69:07:3b:1f:4a:b3:35:cd:14:
2b:7a:08:71:bc:bd:6c:d6:a6:57:4d:cc:bd:6c:52:02:05:78:
49:ef:b5:59:94:94:af:1d:2c:9e:b9:b0:24:f0:07:ad:ad:41:
3d:65:33:9d:f5:b5:50:60:9c:2a:9f:88:24:e3:05:96:12:74:
d9:cb:7e:06:f0:10:0e:91:35:3e:d8:f6:10:22:0e:89:7d:ce:
a7:e7:4e:71:ad:6e:e8:7b:51:58:d6:bf:59:19:6f:72:32:7c:
45:4f:a7:d4:bc:b3:55:48:ce:39:88:ca:1b:00:55:b9:7f:90:
eb:b2:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:23 2025 by rpki-client