Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d678ad45-9747-3dc8-8444-193b26da0e95.roa
File: d678ad45-9747-3dc8-8444-193b26da0e95.roa (raw, json)
Hash identifier: Th0eKfWLuiq5WS6DYpiyJWVWkHKKqgFnZ70KuNqUQhE=
Subject key identifier: A2:65:35:80:3B:CA:A4:9A:7F:CF:BE:5A:83:CD:42:A3:A7:46:BE:D7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1EE0ECA472C019316405ABE8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d678ad45-9747-3dc8-8444-193b26da0e95.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:e0:ec:a4:72:c0:19:31:64:05:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=dd5eb610-017f-4986-a68e-5f6bd228d080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:a8:89:9d:94:ed:68:c3:b9:da:54:e0:ad:
2f:fb:fb:ad:00:90:d0:fc:87:f6:ae:b9:6e:c5:92:
e8:9b:59:64:cc:06:94:e5:27:02:59:f0:87:b7:f2:
74:db:6d:b3:e9:6a:c0:25:b8:91:af:27:52:d8:cd:
5b:4d:04:fa:61:ba:1b:f0:43:e0:7d:ca:4e:44:93:
13:ff:1b:0a:07:c5:22:28:7f:e7:4b:37:49:46:5b:
13:78:95:fc:67:e7:64:c5:db:83:44:db:ea:6b:38:
59:58:22:0b:22:24:7d:82:2f:cb:44:d3:64:50:61:
2c:a1:c1:b7:ae:2d:96:83:4d:04:cf:34:be:a1:75:
43:63:ca:dd:4e:3c:b4:9c:d7:4f:0d:14:74:48:d1:
05:1f:86:76:67:7b:cb:3b:84:98:2d:7d:c5:89:5a:
ff:38:40:95:1f:49:08:42:c0:29:69:2a:0b:4f:09:
0e:b8:8f:93:ec:b9:1d:01:05:d2:1a:c9:66:5f:54:
df:ba:14:8a:57:2e:5f:c6:95:98:07:57:3c:49:2a:
ea:1b:03:c9:c4:50:f0:d5:ce:00:e3:93:64:14:55:
9c:98:1a:dd:cf:07:05:8c:d1:02:d6:87:1c:15:d1:
9f:bc:3b:cf:4e:55:3d:42:98:0a:e7:9e:85:44:aa:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:35:80:3B:CA:A4:9A:7F:CF:BE:5A:83:CD:42:A3:A7:46:BE:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d678ad45-9747-3dc8-8444-193b26da0e95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:b9:52:7d:91:f7:94:42:d3:ad:83:3e:7d:c7:15:44:f6:42:
2e:aa:42:b4:78:1b:88:ad:71:d3:45:15:27:2d:fb:22:fb:b9:
af:87:25:7a:61:d2:91:83:42:15:46:93:fb:a5:4b:2a:bf:48:
80:d6:4f:02:1e:c3:67:c0:fc:ec:8c:80:63:d5:26:62:8b:11:
1a:ea:dc:de:f7:81:5a:e8:56:6d:7c:ee:49:90:32:ca:b8:5c:
22:8f:fb:7d:75:1d:5a:27:52:25:13:6d:57:ca:2f:a0:f9:76:
0d:d6:5f:53:b5:9e:4f:4e:9b:6b:bd:bb:fb:0a:e4:0a:73:1d:
ea:18:23:34:44:0d:7e:df:74:7c:f0:da:4d:fb:52:07:c9:1c:
3a:e9:c1:df:b9:de:70:85:f1:ec:2d:bd:92:75:3c:45:9c:bc:
03:cb:a3:4b:e9:26:3a:e1:a6:3f:93:7e:57:a3:51:ff:91:be:
2c:bf:17:96:ea:d0:39:90:b4:d0:46:75:a8:f0:6b:78:01:b1:
02:2a:ad:1c:04:21:72:e9:3f:89:5a:ee:c9:e8:0a:70:07:47:
2d:a5:a0:eb:e3:93:45:cd:a0:c3:67:84:cc:08:a4:83:20:20:
ff:62:63:73:fa:84:31:f1:2d:dd:f1:85:ac:fe:37:fd:61:6d:
65:da:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:49 2025 by rpki-client