Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4ce4d26-6745-393b-a0d2-562cabd3577b.roa
File: e4ce4d26-6745-393b-a0d2-562cabd3577b.roa (raw, json)
Hash identifier: XfxfogHAKXjw0YC2Hn6QCdV2vo/YUuXYfik+HIfdtF0=
Subject key identifier: 04:C9:F7:7A:68:32:A0:DB:90:73:72:3C:2B:08:C6:D7:A0:73:DF:51
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF3A0C3C302B47CE15DD96240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4ce4d26-6745-393b-a0d2-562cabd3577b.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:a0:c3:c3:02:b4:7c:e1:5d:d9:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=7a7ebd5c-038e-46e8-8abe-1ee0f4b0dff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:1f:78:79:97:41:2d:25:98:21:39:6d:31:
0d:68:23:76:69:80:7c:dc:be:23:e3:df:33:6d:43:
57:b8:fa:2f:eb:d7:17:c9:14:42:d0:87:04:c2:01:
8c:92:df:23:fd:22:93:b0:f3:46:08:7b:4a:cd:b9:
d4:10:6a:cf:fc:ca:09:34:f8:59:33:5d:cc:a8:ba:
93:b6:4e:da:33:20:7e:97:d9:f7:a4:b2:42:0c:7a:
90:e6:83:93:a5:ab:79:5e:94:77:18:04:1c:ac:76:
1a:8a:f2:fa:74:e1:9a:53:2b:e1:b2:16:5c:2a:15:
24:43:d4:96:09:97:5a:ab:9c:84:ea:e9:b5:9d:1b:
41:81:88:8d:4e:1f:38:2d:0d:a1:c9:27:2c:66:de:
91:d5:5d:0f:54:e0:6b:2a:3c:af:24:30:92:14:8e:
38:11:2b:33:2a:ee:81:33:3a:b9:05:97:45:b1:d2:
a0:90:2e:29:3d:2a:46:80:79:aa:6c:9b:a3:e8:38:
e1:de:1f:93:2f:aa:47:8b:b2:54:e2:df:8b:bb:63:
31:58:a9:fb:8b:09:16:28:c3:37:c8:f7:b3:e7:00:
10:b0:21:7e:51:a2:64:12:b7:a9:17:83:f7:b9:77:
c8:64:d0:ee:65:7c:cb:3c:9f:d8:eb:27:df:1d:80:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:F7:7A:68:32:A0:DB:90:73:72:3C:2B:08:C6:D7:A0:73:DF:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4ce4d26-6745-393b-a0d2-562cabd3577b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0b:7a:ea:85:a3:0d:b8:f9:3d:6d:52:78:d0:65:12:dc:a4:
0d:28:31:62:d3:96:1a:93:14:bf:61:cc:67:21:ee:e7:24:a2:
df:fd:f4:20:8c:33:42:31:80:bb:84:c6:40:6a:ca:66:cd:c6:
e4:e5:87:48:00:5d:11:da:45:73:ee:80:b3:e5:00:37:44:d3:
08:43:ed:d8:d1:a8:1a:4c:fe:b9:1e:16:49:b6:3c:3a:7d:59:
68:cd:3c:51:54:b9:64:eb:2a:76:c4:2f:50:2e:09:b5:de:7c:
d6:2b:47:07:98:5f:b9:43:40:bc:cc:9a:37:a6:d8:ee:68:a3:
14:36:09:7d:c9:51:e3:2c:e6:0b:5b:31:c3:be:63:0e:ff:32:
88:0f:81:9b:db:ee:90:56:0c:46:9f:1b:0e:42:c6:9c:4d:73:
d3:94:f5:70:b0:5d:66:4d:8b:2d:21:ea:97:c3:a7:57:61:75:
d5:87:b5:d4:62:a0:bc:95:fb:09:55:25:f1:9f:35:80:d4:ff:
26:f8:1c:a0:bd:cc:17:91:8f:2e:53:27:0e:c3:a7:83:d3:fc:
e9:01:cf:9d:18:58:f6:51:06:ce:d7:9d:55:14:17:92:04:3d:
00:a2:f2:af:f7:83:b8:bb:1c:23:7e:b6:85:1b:68:0f:67:83:
f6:01:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:03 2025 by rpki-client