Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f03dc580-52c5-318e-8405-0363d0b7a9e7.roa
File: f03dc580-52c5-318e-8405-0363d0b7a9e7.roa (raw, json)
Hash identifier: DxDToWpCoxnjoHvHjzxJuzXRqUHxqMpBj7XWh+thyBQ=
Subject key identifier: 32:69:64:B7:5D:0D:53:47:6A:1D:88:AE:BF:64:C9:84:D5:D8:A8:21
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCDA63CB43D290356FA1C9400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f03dc580-52c5-318e-8405-0363d0b7a9e7.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:a6:3c:b4:3d:29:03:56:fa:1c:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=5a37ca93-e10a-4607-a1c1-8720e3b300f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:d0:9f:4e:01:7a:32:74:9a:b9:45:bd:8f:
b3:33:79:d5:73:27:f2:2c:4d:6a:b0:f2:a3:5d:13:
51:3b:2c:45:c6:cb:78:e4:88:47:68:06:50:72:b8:
a9:e8:d3:a5:2e:5f:ee:b6:a8:16:f1:5d:18:5a:64:
2e:84:5e:e7:e6:a1:45:b6:a0:9b:c4:e6:df:fd:68:
aa:df:28:21:4b:5a:ba:d3:d3:90:7a:3e:17:e9:29:
85:68:d2:d4:0b:44:66:f3:b2:cd:42:35:94:0a:3b:
69:c6:b9:0e:1c:72:1c:33:4e:c9:99:f3:8d:a8:8c:
2e:69:75:34:e7:64:f6:76:a8:0f:07:ab:16:d2:fd:
f6:68:ac:91:49:39:31:59:7d:95:72:83:f3:d0:28:
81:dd:49:85:d9:04:21:ca:09:b2:d5:84:ae:dc:ba:
ff:11:d7:37:44:89:65:b7:8b:01:e7:31:48:3f:6f:
21:1c:e4:0e:d2:6b:8c:46:2d:f7:d9:e4:9f:5e:10:
10:85:11:be:b9:4c:23:5e:23:bc:73:bb:ce:83:73:
bd:c2:4b:dc:aa:25:9b:9e:ab:b9:eb:ef:ed:61:cc:
e7:8b:37:ce:b1:d8:d0:88:e5:42:e8:3a:26:a4:b6:
11:54:e9:6d:28:96:17:d3:82:38:9a:2a:14:5b:69:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:64:B7:5D:0D:53:47:6A:1D:88:AE:BF:64:C9:84:D5:D8:A8:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f03dc580-52c5-318e-8405-0363d0b7a9e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:16:a9:e4:38:f7:43:d6:37:4c:23:e6:9d:ff:87:c1:4b:16:
a8:79:d7:50:43:b6:74:19:a0:31:43:7b:31:9f:a9:a1:8f:3d:
a7:ef:c0:45:a6:e3:25:60:da:50:e8:7f:5a:96:d9:32:f3:e1:
27:56:67:cc:54:79:97:31:b2:6f:11:81:7a:70:eb:63:6b:e5:
aa:e7:66:41:fc:e4:83:a4:50:e0:49:2f:9b:ba:1a:1a:a0:17:
3e:07:cb:20:5b:d8:f0:b9:7b:aa:67:df:85:44:3e:1a:a1:32:
32:62:d4:0d:e0:07:6a:be:6a:ed:08:8d:81:94:e7:83:14:16:
e7:7d:c6:ff:ff:47:87:d1:b8:32:96:65:0a:ee:c7:45:38:5f:
10:08:b6:01:68:fc:8f:86:7b:0c:44:6a:5c:45:1c:3e:b4:2c:
a1:c6:a8:6d:27:26:8b:ac:61:00:38:d2:b0:24:15:5c:72:8d:
83:be:8a:2d:da:a4:28:52:c0:c4:bb:78:48:0e:59:0d:94:9d:
4e:04:0b:98:c6:ef:f4:e0:8d:36:a5:c7:10:01:7c:f2:20:b8:
ac:98:0a:40:1c:ce:59:14:2e:ba:62:c5:db:80:dc:bf:95:50:
91:a5:65:56:9d:6e:2e:fa:c0:f1:22:5d:87:5e:30:b1:42:18:
e9:e2:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:34 2025 by rpki-client