Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df0d233d-3472-3779-8036-48b0eff61364.roa
File: df0d233d-3472-3779-8036-48b0eff61364.roa (raw, json)
Hash identifier: 0tm37BEuBaFPVn/AuijhQMJj+IbBXk2z0xHIszDrsBY=
Subject key identifier: D7:FA:C1:8B:74:75:21:98:CE:FE:0A:E1:3C:F3:34:BE:D4:67:0E:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA989FB392759B8CDDAE3E900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df0d233d-3472-3779-8036-48b0eff61364.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.7.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a9:89:fb:39:27:59:b8:cd:da:e3:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=85a33ba2-bff1-458a-95b8-a8fb96d93a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:32:ed:7c:5d:b1:92:a5:20:31:da:34:ab:
db:80:36:31:f3:a3:d1:c2:e9:9e:6c:d5:43:fe:8d:
51:41:ad:3c:2f:90:a4:7c:c4:e8:f5:34:9f:f1:95:
c8:d1:af:88:d0:b8:5a:c5:bf:2f:bf:3a:a4:b4:ad:
52:12:ba:96:59:a9:a9:c1:dd:a1:77:c0:5b:f9:7b:
ca:60:8b:5d:5f:3f:a9:ed:81:d5:a0:17:38:45:eb:
9a:db:8d:dd:47:c2:bc:d9:dd:43:75:de:40:f6:6e:
0f:51:aa:45:d6:85:99:b4:8a:ae:61:40:50:64:d1:
2a:33:55:a5:50:aa:29:46:5b:3a:61:ae:0d:f1:59:
d3:1e:7e:3d:0e:e1:b2:4e:92:cf:d9:5c:fd:c9:cb:
04:7e:d1:37:80:04:dd:7f:22:19:94:3d:a1:64:d7:
2a:87:5f:21:f4:cf:b9:2d:1c:78:1d:fa:63:dd:7f:
3b:aa:86:c1:53:a9:d3:2d:92:95:85:b8:3e:29:f1:
73:bf:2f:20:78:af:8a:e3:96:7d:74:30:a4:2f:3a:
2d:7a:5f:5e:db:c4:92:f5:f7:c5:dc:5a:a4:d9:b8:
80:81:5e:b4:10:60:a6:65:42:05:97:95:13:c7:6b:
31:5f:73:d5:aa:38:e2:7b:91:96:9f:cc:2f:21:20:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:C1:8B:74:75:21:98:CE:FE:0A:E1:3C:F3:34:BE:D4:67:0E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df0d233d-3472-3779-8036-48b0eff61364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.7.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:d2:a9:18:1e:32:fb:c7:91:71:70:5e:0a:39:12:94:38:4d:
34:39:0b:e6:20:5c:7a:a1:5a:2d:be:69:60:fd:93:a5:29:bd:
22:06:71:10:1e:a3:9f:cd:b3:58:1a:f9:ec:5a:70:e9:c2:04:
cd:cc:29:6c:9e:8e:e9:dc:69:23:b6:4d:6c:45:60:cb:7b:4c:
e7:5a:68:0d:38:c9:7e:ae:64:ae:a9:ca:8a:b6:a1:9f:db:ba:
79:61:53:77:4c:50:5f:5e:6b:2b:62:d9:68:be:f5:19:c9:49:
2d:a7:73:a1:da:38:11:f7:49:45:41:65:33:ae:b3:e9:a5:44:
24:65:bc:f6:e8:fd:1b:a2:cd:36:e3:62:4b:d1:62:56:a6:b5:
e9:27:41:97:5f:d3:a1:d5:49:23:b9:e4:14:b7:5b:00:43:1c:
55:d2:13:e2:b7:91:a3:8e:69:c3:96:43:04:30:d6:ae:8f:81:
be:4f:be:dd:7c:b0:3d:40:cf:de:fb:eb:0a:57:f2:75:4b:29:
b2:87:b0:a4:db:ef:f1:cf:01:c6:c4:0a:e2:bb:02:cc:e8:78:
e0:14:7c:c0:a9:f1:eb:59:c2:cc:e1:16:b1:13:61:12:a9:14:
50:9e:da:56:b6:1f:0f:9b:40:48:77:b9:a0:67:ba:75:da:ab:
11:f1:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:50 2025 by rpki-client