Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e7930aec-69cd-30f7-93a5-9e96cd0a651d.roa
File: e7930aec-69cd-30f7-93a5-9e96cd0a651d.roa (raw, json)
Hash identifier: N9k7MLT6pSCFk5aF5RA9rdI0tPRKFgS+qpoQ3rqa5IM=
Subject key identifier: 0F:86:4D:30:DA:E5:69:4F:1B:B9:F9:45:C2:E3:12:3C:05:F3:D5:B5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE280E13CE46105FE12BB5CD8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e7930aec-69cd-30f7-93a5-9e96cd0a651d.roa
Signing time: Fri 12 Aug 2022 14:42:08 +0000
ROA not before: Fri 12 Aug 2022 14:42:08 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:80:e1:3c:e4:61:05:fe:12:bb:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 12 14:42:08 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=bba79aac-bce4-42d3-9146-3e6ff85e42ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:0b:c3:8b:99:37:6f:78:a7:f4:04:a5:66:
e8:d5:fc:76:e3:f1:d6:8a:af:dd:4d:e6:2d:d3:b4:
4d:1c:5d:5e:99:b2:06:df:c0:b1:fb:08:23:09:a9:
ae:0c:d1:03:1b:0d:a6:cb:f8:7a:62:71:93:98:1d:
c2:61:13:ca:9f:f6:95:6b:d9:b3:3a:96:af:b2:73:
97:01:24:c4:39:19:64:34:58:c6:62:12:50:a0:4f:
da:00:89:33:2d:94:4a:64:06:58:b3:cd:10:1c:3a:
ce:85:2e:6b:72:0f:41:7b:14:1d:bb:9b:f2:44:c3:
dc:ab:f5:66:1b:29:b4:6c:d8:63:01:11:bb:f2:4b:
cc:89:31:64:f3:21:5d:e9:6b:77:58:88:c4:01:b2:
c0:80:cb:60:1a:90:19:09:30:55:d2:aa:fc:b5:e1:
2d:b9:5e:ae:3d:97:9b:6c:6c:49:e7:2f:ef:bc:a8:
14:17:28:2d:6f:4e:3c:17:9b:a1:c7:82:cf:1f:45:
2a:4a:af:cd:97:44:63:d2:fb:3b:e4:97:c0:09:a3:
91:b4:68:4c:b4:7d:29:cf:6b:04:23:73:09:6c:84:
47:8c:8f:7d:80:1d:80:48:d5:d4:42:19:a2:b1:01:
a7:95:c2:9e:75:30:3d:48:ea:18:09:97:ef:70:d6:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:86:4D:30:DA:E5:69:4F:1B:B9:F9:45:C2:E3:12:3C:05:F3:D5:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e7930aec-69cd-30f7-93a5-9e96cd0a651d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:b9:7f:8b:ed:7b:4c:72:5b:7c:ab:4d:39:29:40:a8:da:2a:
5a:64:72:ef:46:77:89:0d:fb:dc:f7:f8:8b:5f:56:c3:93:a6:
90:5f:b3:d6:29:58:66:16:43:13:ab:37:03:3f:bd:65:e5:70:
08:5d:b4:e9:37:74:bf:f0:e0:10:a5:5f:25:85:cb:7f:1c:7a:
7f:1e:08:71:91:3a:0f:5d:8a:9f:94:1c:05:5a:55:8d:6a:e8:
c7:9c:3b:3f:d4:2e:25:ac:0c:88:4a:f3:f6:ca:18:f4:da:09:
08:21:44:1b:77:0f:ec:22:a1:89:2d:c5:81:06:6d:97:a1:9c:
41:89:a2:2e:69:88:7b:3c:d3:bf:aa:a9:6b:eb:fe:76:11:67:
fd:60:18:14:f5:d8:ff:62:57:b8:0c:21:37:45:5b:a0:ab:e2:
62:40:ab:17:82:3a:62:36:b5:5d:9e:70:ea:ee:7e:4d:71:5e:
99:ca:ca:82:17:59:36:26:c2:4f:27:ce:78:4e:3b:d7:83:10:
f0:aa:20:c1:3f:1c:05:20:4d:9e:42:84:7c:8d:3b:07:0f:0b:
41:e6:42:da:92:4d:fa:78:0a:ca:47:e4:fe:96:41:a1:e7:ec:
99:68:cc:c5:d0:b0:ea:50:2c:85:2e:39:8e:72:c7:4e:95:0a:
85:96:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:43 2025 by rpki-client