Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf40d627-ef29-34f5-acf0-524e6673b381.roa
File: cf40d627-ef29-34f5-acf0-524e6673b381.roa (raw, json)
Hash identifier: UgtenVW6Rh9qAqvESBrHhjpPjilsWpGYAhVvUvZH2zQ=
Subject key identifier: DE:22:07:02:96:20:00:C7:22:52:03:5F:47:B5:94:F1:28:1B:89:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D4558BCE585A71381F2BA800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf40d627-ef29-34f5-acf0-524e6673b381.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 54.26.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:55:8b:ce:58:5a:71:38:1f:2b:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=d4c77156-3bf7-4f58-8dd8-0275244ff83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:5b:87:b9:db:81:95:30:40:31:fe:45:2f:
f6:98:ab:50:a8:e2:b7:c8:8f:f2:c3:52:f9:49:3d:
cd:f9:af:49:49:89:45:fd:7c:9a:15:95:88:81:07:
e9:63:09:b9:3e:f5:fa:80:60:3b:bf:90:48:df:52:
6c:93:30:6f:70:6e:20:7a:a8:7e:cb:4d:6a:4c:5f:
fb:fc:ee:de:d7:9c:4e:16:49:f7:b1:06:d5:ee:1a:
b0:fa:8d:0a:fb:a4:5a:c0:1f:ad:a0:b7:9c:33:e8:
5b:c2:3e:96:b8:7e:d5:c9:c7:d7:d9:1e:6b:fd:4f:
1d:29:db:e2:44:3d:a6:a5:23:a1:ed:83:1c:16:fc:
48:74:23:ba:79:cb:44:a9:34:07:7c:ed:aa:d1:b9:
94:d1:d3:d3:0e:74:4f:9c:e7:49:27:d5:84:d2:aa:
2e:1e:c4:b0:0f:e3:5c:2e:4e:98:31:1e:c6:14:78:
fa:34:cb:3c:b5:9f:bb:de:7c:36:d5:01:f0:29:27:
47:00:90:0a:ed:ed:ac:44:4d:13:75:73:2c:7b:11:
a3:f0:67:98:ff:9b:47:ec:b8:71:a6:93:43:a0:45:
7e:d6:da:c3:f3:8c:db:18:fa:8b:4c:8a:0a:ea:2f:
81:de:f3:23:9f:f3:9a:2a:6e:f9:55:f1:25:de:b5:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:07:02:96:20:00:C7:22:52:03:5F:47:B5:94:F1:28:1B:89:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf40d627-ef29-34f5-acf0-524e6673b381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.26.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:35:0b:ed:97:cc:8e:3c:b7:ac:9a:f0:ad:64:9b:25:9f:51:
2d:eb:87:a7:5d:f8:2b:0c:da:91:09:4e:a4:2e:57:2b:72:4f:
5f:c9:cf:b6:4d:d6:84:3a:00:65:1f:d6:d4:2e:e9:f1:60:82:
be:8b:d8:51:e8:6d:83:e3:90:03:00:b3:a8:65:e4:89:99:57:
3d:13:f2:be:aa:ec:f4:1f:30:0b:b1:76:c3:b4:63:a9:c2:87:
e0:b2:36:fb:9b:71:44:26:4c:b2:bc:c2:70:f4:5b:ec:05:9a:
a8:98:22:68:04:ab:da:01:94:4a:e2:ef:eb:6f:9e:af:0e:49:
95:c2:4c:51:2f:0b:d9:35:6e:ad:71:8f:ef:f5:7f:38:e2:4c:
f9:8e:ac:48:c0:e3:b4:3b:b5:21:1b:f3:9c:1f:24:b6:ec:43:
f3:65:c3:dd:fb:7a:a8:e4:6b:92:9c:5d:ea:b0:8b:d3:74:ab:
cd:f7:59:57:16:8d:15:89:f8:58:8a:66:40:88:af:ba:a1:d5:
c0:25:56:2f:d3:eb:0b:4a:db:11:c4:92:48:c8:a5:b7:b2:a1:
47:12:af:8a:d2:45:5c:2a:a7:4a:10:2a:91:f1:87:4e:0e:19:
19:a0:c4:c7:84:60:34:80:c0:5f:35:9e:50:e4:aa:d9:e4:38:
38:a1:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:01 2025 by rpki-client