Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d670eb91-acaf-3824-802f-a4ce5cca9244.roa
File: d670eb91-acaf-3824-802f-a4ce5cca9244.roa (raw, json)
Hash identifier: J+I6kDGrRwvbpFm3Jt6C0+k0sqyUeq27rY+6+OWFykI=
Subject key identifier: 74:3A:ED:D5:A3:9A:92:7E:C2:9A:A2:BE:EB:54:29:D8:92:1F:D9:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840903A40DEC263DA3FDC5AC180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d670eb91-acaf-3824-802f-a4ce5cca9244.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.5.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:3a:40:de:c2:63:da:3f:dc:5a:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=e7ec2465-4314-44de-8200-b0f547364fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:4a:40:5f:cf:fa:b5:e6:a9:07:ae:12:51:
81:fc:00:26:f6:a8:7e:43:4e:80:a9:e2:ca:e9:80:
86:c6:e3:01:4e:9b:ca:ac:7f:ab:4a:dd:0e:c7:58:
7c:01:9c:5d:7d:86:45:b6:b5:37:ec:25:21:3f:8b:
c0:4d:63:4c:a1:ef:1f:98:0f:7c:06:68:6c:cd:12:
83:7f:e0:f2:39:20:41:31:0f:97:5f:f0:0f:68:97:
d8:2b:47:3a:dc:7c:87:d3:10:71:ff:a5:be:da:01:
b8:ad:2f:b9:01:f4:12:a1:4c:12:76:26:67:10:a2:
a7:8f:4f:9c:59:10:aa:67:84:3f:85:b1:39:2f:c2:
a6:eb:9a:24:ca:ad:1f:93:28:54:69:86:de:80:21:
a4:94:fc:70:3c:71:60:3c:61:87:aa:a7:03:3e:34:
80:da:b3:72:08:85:8d:08:a8:c4:bd:72:af:c9:f7:
77:75:92:ab:d6:49:be:8c:be:41:b0:6b:45:78:0c:
95:96:36:7c:02:01:a7:d7:cc:5a:6e:87:04:1b:1f:
21:ae:e0:f0:bd:5c:41:b3:3d:9a:e1:87:31:dd:38:
27:82:0f:97:0c:d5:3c:a7:57:f7:e2:7f:71:0e:98:
92:9f:96:35:fe:e3:57:b1:f1:e9:4d:71:fb:42:91:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3A:ED:D5:A3:9A:92:7E:C2:9A:A2:BE:EB:54:29:D8:92:1F:D9:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d670eb91-acaf-3824-802f-a4ce5cca9244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.5.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:32:30:21:b8:b9:51:1f:9a:04:55:26:a9:4a:ec:5b:9c:47:
50:62:ca:57:c0:92:32:99:62:47:0c:cf:e2:8e:da:04:b9:33:
08:c9:26:f2:e5:bc:2d:ae:38:54:23:6c:1b:c0:fc:4f:c1:7a:
33:c4:0a:8a:64:0f:62:76:ac:3d:c3:51:69:fb:7c:4e:eb:d5:
15:6a:0a:01:a9:0d:8f:72:42:2d:b4:4d:d7:69:34:bf:3b:a6:
84:90:0d:27:62:27:06:f9:55:f3:4f:8f:87:0d:2e:3c:71:a0:
22:63:ae:e9:ba:e1:d9:65:c5:05:e7:b2:c9:30:90:39:77:d4:
24:e2:0d:c5:20:61:fd:c7:c6:6e:fc:56:92:08:ae:cc:83:b8:
ab:61:1f:d9:58:04:0f:40:22:c3:65:72:a4:90:90:06:b1:e6:
b9:97:02:bf:09:19:e7:0a:d2:39:3e:9d:b8:17:be:65:4c:24:
92:f7:5d:c9:0d:fa:79:6b:7e:cb:ac:01:3f:57:7a:56:ec:2a:
33:28:ff:42:2a:d2:da:9c:c4:c4:3f:55:2c:0f:c6:8d:af:5c:
32:8a:e8:e3:11:ce:ca:fd:12:57:5c:5e:39:6d:6b:fb:7f:1e:
c8:1a:88:12:3c:36:8c:a9:a6:34:20:8e:21:76:f7:6d:a7:d5:
06:89:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:10 2025 by rpki-client