Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf5f98d8-e1cd-3a96-9728-393763b74c0f.roa
File: cf5f98d8-e1cd-3a96-9728-393763b74c0f.roa (raw, json)
Hash identifier: iTM4m/6gEHGyMhoIyeJLwzq7C0iPG9WxSpf9VAM15Tc=
Subject key identifier: 89:5C:9F:82:12:EF:FE:DD:B0:2C:DD:E9:A3:D1:F6:23:32:AE:67:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409496F1E8D41A9F6E802A7D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf5f98d8-e1cd-3a96-9728-393763b74c0f.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:96:f1:e8:d4:1a:9f:6e:80:2a:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=2e689233-2ea0-4db8-87b1-daf638831550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:91:d9:57:5e:31:b7:ae:a7:9d:52:3e:90:
97:6c:db:3d:87:f8:17:8e:aa:53:b4:72:26:4e:b5:
04:22:f9:4f:30:20:db:a3:6b:d7:3d:9e:4c:48:83:
53:09:91:08:26:21:6a:6f:66:c6:fd:b9:48:2b:ec:
af:e2:5b:89:69:92:13:1a:7e:9a:66:bc:f4:7e:ea:
07:ed:0b:4d:a1:ed:6a:1f:d8:e2:08:65:a9:17:ee:
f4:f6:a0:1e:b9:67:72:5b:46:71:8b:00:87:27:19:
20:e7:5b:10:e9:45:f9:0f:46:f2:59:bb:7d:9d:f0:
59:a3:e2:1c:37:55:85:07:cc:70:a0:c6:3f:aa:56:
0d:35:9a:5d:23:a4:9e:0d:dc:61:7d:91:44:9e:50:
ef:d7:46:e3:60:75:ac:1f:35:24:1c:fe:4a:81:56:
8d:56:f5:14:83:54:e2:b2:20:a0:14:e8:cd:92:f8:
46:3b:35:74:76:66:1e:48:78:b7:23:65:52:cb:8e:
01:7f:5d:e3:d7:72:cd:1a:09:3a:d9:d1:8a:27:6a:
8f:86:a3:75:c0:59:f2:a4:e7:1c:4f:d4:f4:71:40:
2d:4f:dd:a7:f6:95:c0:b3:2b:08:09:8b:46:78:85:
b4:f9:32:23:af:f6:39:42:fe:bc:18:d9:5e:a8:f4:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:9F:82:12:EF:FE:DD:B0:2C:DD:E9:A3:D1:F6:23:32:AE:67:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf5f98d8-e1cd-3a96-9728-393763b74c0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e5:d3:e8:14:34:28:1f:f8:d8:db:81:37:83:03:6e:12:1c:
67:3b:5c:42:c0:d4:63:ce:5e:c5:0f:a1:b4:63:10:b7:22:b5:
61:f1:e2:01:a9:8e:ba:b0:d9:67:6d:4e:df:76:38:b8:86:de:
e5:e8:88:43:b3:2a:23:ff:17:21:31:93:bf:3f:ad:ef:c4:5a:
1f:94:27:22:7a:cf:17:65:cf:6a:94:26:73:99:60:8f:f2:56:
66:c9:bf:59:d5:a9:4f:ac:db:4f:96:c8:40:57:d4:44:0c:8b:
8d:af:3a:e0:bd:14:23:53:69:4b:98:63:29:dd:c3:e5:8f:9f:
b5:0b:69:ca:81:ec:ed:77:dc:07:c0:56:ba:84:92:38:1e:6a:
1f:8d:50:c9:ae:59:cb:21:18:7a:bb:b7:89:ca:65:7f:7a:fa:
6e:4b:3d:62:78:c2:4d:ea:be:fa:a1:3e:a2:1b:83:9f:e0:69:
1c:ab:5e:7d:ea:83:21:e4:80:ae:6a:7b:b5:db:f5:50:95:05:
66:29:a4:0b:b0:51:29:08:7c:92:c7:10:89:77:54:f1:bd:f3:
78:ea:ac:73:f7:0a:47:fc:86:36:77:cf:30:b6:5f:b8:bd:0f:
5d:77:66:94:5f:85:d6:e1:a6:31:8c:4f:79:6a:1a:43:43:db:
ab:76:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:05:38 2025 by rpki-client