Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9c11bac-f617-36c1-829e-83a0acfc3966.roa
File: d9c11bac-f617-36c1-829e-83a0acfc3966.roa (raw, json)
Hash identifier: G4vRYGAgr0pm5cFCGPcCPeXUJT6yMKjzAVkwzM60FSU=
Subject key identifier: A0:FE:27:CB:29:44:B7:28:DF:89:90:9A:1C:3C:15:AB:AF:CE:C0:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F9ADF1A49020DF864FFC9E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9c11bac-f617-36c1-829e-83a0acfc3966.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:9a:df:1a:49:02:0d:f8:64:ff:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=7847e1e2-3def-4783-85a5-502d0065e064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:cb:fd:ac:17:7a:c3:e5:25:c7:25:7c:72:
f2:b6:1d:75:f0:dc:cb:2e:6d:65:0e:88:3d:3d:93:
06:bb:fe:4a:ae:24:90:3e:90:5a:31:14:99:a9:aa:
0c:7b:9f:c3:ed:8a:e7:66:9e:34:65:e9:b4:89:ee:
0e:8b:71:a6:42:36:bd:a0:68:d9:7d:61:ef:81:e8:
10:ad:d9:59:88:58:18:2d:05:5c:fa:18:25:0c:a0:
b0:9c:b8:02:52:74:71:59:43:b7:9a:e9:50:f3:2d:
1b:30:a3:4b:6d:64:b6:0e:cd:4c:60:a4:b1:06:b4:
0a:4e:4d:e4:7b:42:14:99:48:9b:af:e2:94:72:31:
ee:a3:31:54:e3:ee:a9:d4:1a:c2:47:31:25:bd:ef:
71:51:77:1f:6a:e2:81:ee:dd:00:93:7e:55:b7:6d:
54:11:af:b7:9f:4f:15:91:0e:d4:22:34:49:4f:09:
19:22:27:91:93:0e:f1:ed:b4:26:01:48:19:d0:26:
6e:ae:ff:a2:e0:d2:b3:a5:78:6f:cd:85:cd:9e:0b:
1d:83:d7:65:1c:eb:c0:0b:fd:5c:61:f0:1a:25:e0:
37:37:56:f9:4c:b8:cc:b6:bc:b4:c8:58:3e:91:3b:
fd:6e:1c:3f:d4:47:ed:da:43:70:da:e1:d5:2a:e8:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:27:CB:29:44:B7:28:DF:89:90:9A:1C:3C:15:AB:AF:CE:C0:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9c11bac-f617-36c1-829e-83a0acfc3966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:bc:b3:3e:be:6c:3e:4c:bd:c0:79:f2:74:75:4d:fc:6e:dc:
c4:99:06:1b:d6:f6:cc:87:9b:1b:54:4e:0b:97:bd:4e:cc:64:
14:d2:92:63:77:b2:ea:57:9d:9c:be:a6:d9:91:75:5e:47:6e:
7e:d3:9c:ae:0f:ed:a2:d2:d7:4b:17:c5:ad:28:3a:f2:5c:f0:
e3:15:62:ca:ef:48:ba:9b:19:ba:35:53:d5:a0:d6:f5:d1:a8:
1d:76:06:39:ed:00:02:12:b2:a0:e4:8b:4b:9e:cb:93:19:37:
97:a2:bb:eb:c7:8b:43:a2:f4:4e:13:de:dc:7b:24:34:9e:5a:
f3:e6:c0:df:b9:fe:e9:a5:6b:4c:19:02:df:95:13:cb:36:40:
74:6b:bf:ea:88:4c:57:42:b6:f3:9f:b6:16:8a:a6:4a:e9:8d:
53:35:b3:fd:44:0f:cf:37:4d:12:86:69:e3:4a:73:bb:7e:f3:
d9:c0:ea:3b:7d:9f:16:0f:d8:99:71:c0:ad:1b:32:0d:ef:00:
58:3d:50:47:36:58:ed:ee:ff:f9:78:9a:1b:d7:53:d2:ae:74:
49:cd:17:a4:c5:c5:fc:95:89:0f:ff:bc:0e:2e:b5:26:cd:2c:
9e:db:23:6c:fd:15:8a:c6:99:ca:ea:67:d3:59:34:30:f7:14:
a6:c9:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:55 2025 by rpki-client