Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce64d617-c838-3af6-aa46-eaf5217d6ba5.roa
File: ce64d617-c838-3af6-aa46-eaf5217d6ba5.roa (raw, json)
Hash identifier: 4Kv+9oHy4Sk/e/GYVxYJdigYZXUQp/PbSqxqczZBiZE=
Subject key identifier: 79:86:57:07:96:22:68:8A:7C:0E:5A:35:78:C6:E6:51:E2:60:81:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584010C43984392A7C625A51D3D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce64d617-c838-3af6-aa46-eaf5217d6ba5.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:c4:39:84:39:2a:7c:62:5a:51:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=6831fed8-a493-4710-bbee-662e58b4c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:13:0f:23:03:1b:24:40:cc:31:1c:7e:bc:
b3:8e:5f:97:cc:de:b2:ee:4e:6c:cf:71:2b:05:ee:
e3:46:8d:a0:98:ce:aa:5c:3e:f4:9e:f8:b6:91:8b:
cd:31:c8:7e:f5:2a:ac:f8:e1:75:00:e6:f9:68:a0:
7c:f3:a9:21:e6:54:21:9f:27:e1:a4:1a:61:86:e6:
5a:60:85:b7:c2:9d:b3:40:4e:b9:75:28:dc:41:88:
b1:d0:a4:cc:e2:e1:52:50:21:33:6a:99:4b:c4:e4:
f0:c8:5f:e9:1d:d3:fb:5d:80:ef:68:40:cd:e5:6a:
ee:aa:0c:cb:dd:1b:bd:2d:bc:7d:af:fb:ed:88:8c:
2c:f1:21:ed:86:24:64:72:65:55:5a:e0:85:72:30:
fe:9e:79:73:32:a7:aa:fe:d3:03:c9:f1:54:c1:1c:
f9:8f:e3:c6:08:be:d7:7b:ce:88:31:0a:0d:ad:35:
5c:ac:bd:ce:30:94:2e:c4:5e:df:59:d5:53:8c:1e:
e5:a9:69:08:da:d1:5a:fb:ac:f8:66:45:d4:50:c8:
27:46:67:38:ad:a5:fa:0a:f2:33:86:18:de:f6:a7:
65:5a:fc:ce:c0:96:39:33:89:60:63:b6:e0:93:02:
e7:d1:b9:1e:71:5c:f5:11:44:5d:6e:cd:4f:40:f8:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:57:07:96:22:68:8A:7C:0E:5A:35:78:C6:E6:51:E2:60:81:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce64d617-c838-3af6-aa46-eaf5217d6ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d9:de:ac:e8:00:d5:03:14:34:13:1b:8f:94:2e:cc:45:c2:
28:40:8a:0c:e1:cd:d5:dd:85:24:ae:58:56:b9:98:9a:73:b7:
98:60:7d:91:24:62:f2:57:d8:fe:59:10:25:64:c9:e1:46:53:
d1:a9:a6:6a:45:66:56:81:9a:e0:fc:19:ac:3f:86:2b:00:4c:
d5:b7:b9:30:c0:f2:4a:01:3e:ca:6d:81:ce:c7:b1:9a:20:d4:
06:40:2c:9f:23:08:d9:78:58:d9:d8:6a:02:57:2d:02:13:48:
db:00:3a:3f:b9:32:cc:d5:ed:63:a0:90:bb:cb:b6:e5:25:e8:
97:f9:b4:36:83:28:a2:16:5f:75:fd:b9:c0:fc:bc:5f:82:c2:
f3:8b:94:56:63:58:a2:65:de:5e:32:4e:31:15:55:10:15:1c:
f0:e4:42:7e:5a:d0:1f:58:84:bd:5b:75:ef:82:49:d6:30:c0:
fb:84:72:2b:cd:c2:38:2c:b1:6d:1e:9c:63:2d:09:dc:c6:91:
2c:f0:51:42:1e:49:94:2b:15:07:0a:bf:08:bb:59:62:58:9f:
bf:4d:35:34:7a:c2:78:f5:03:f6:b5:aa:81:ef:ed:69:3b:af:
16:98:70:69:bc:7b:c5:cf:26:4f:fc:6a:ea:a9:e5:e6:9c:e6:
33:6a:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:26 2025 by rpki-client