Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ae8ef0-b85b-3b46-b2af-cf873e9fa32c.roa
File: f1ae8ef0-b85b-3b46-b2af-cf873e9fa32c.roa (raw, json)
Hash identifier: SRmrLU5zLoOpJqhuiNDqAmnCdAFEFQcGvVL2P8SO7Z4=
Subject key identifier: 14:F5:18:63:B1:BA:3A:43:61:34:38:50:A0:57:CC:0B:3C:D1:5E:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B5EE31B7A4BB372B2F75A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ae8ef0-b85b-3b46-b2af-cf873e9fa32c.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:5e:e3:1b:7a:4b:b3:72:b2:f7:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=63644185-202f-441b-9c0d-82190a87f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:cd:e2:83:03:ff:b5:8f:0d:b6:e4:06:8e:
19:a2:d9:b1:27:44:ce:2f:66:72:be:4c:59:7a:0c:
30:ee:69:ba:e2:f8:f9:ad:74:dc:3f:03:b8:df:4d:
e8:22:e1:56:5b:d2:47:cb:f2:30:88:f1:2f:22:a6:
c1:ee:10:71:55:1f:91:91:68:d0:4e:e4:f4:67:22:
94:3a:1c:8b:f4:f0:3c:be:0b:fd:4c:74:e1:30:d7:
1c:bd:d4:68:c3:f0:52:d0:6a:bd:19:e8:d0:31:43:
5b:d1:cb:5c:5f:52:63:3c:8b:01:60:70:b4:ab:8b:
08:77:cb:0f:6e:65:33:2f:70:28:01:a5:c1:2c:c8:
d7:e7:64:2c:94:bb:09:9d:fa:36:9c:0f:6a:21:37:
ed:9a:cc:ec:cf:d7:24:4a:5f:69:66:91:ce:9c:51:
65:94:86:d0:69:b3:b8:3f:cb:77:12:0c:23:c2:0c:
f8:86:59:a4:7a:12:4b:d3:b5:ae:4f:f2:b3:13:bc:
9b:8b:d1:d0:3e:78:fa:08:2c:29:e4:be:cb:8f:54:
49:20:34:ca:6d:7a:0b:1c:08:cc:cc:4f:22:ec:98:
86:cd:e4:9d:f0:50:7f:c9:1b:d8:18:1f:8a:02:c5:
f1:d4:e1:d4:53:41:03:81:07:b1:ab:19:93:52:a7:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:18:63:B1:BA:3A:43:61:34:38:50:A0:57:CC:0B:3C:D1:5E:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ae8ef0-b85b-3b46-b2af-cf873e9fa32c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6d:78:d1:fe:10:3d:c2:0d:76:1f:0d:90:24:00:c2:3e:7d:
0d:2c:74:78:87:8c:e4:25:c3:65:ca:97:e4:15:6e:2b:f5:8e:
65:ed:d4:ae:d2:20:de:f5:34:21:6b:b3:ec:9b:b1:d5:96:02:
a7:c9:46:0e:c8:f2:34:92:51:77:76:a5:c1:d0:57:eb:a2:28:
bb:af:bd:ac:e7:63:f1:27:7c:e9:88:b8:bd:0e:8a:38:c2:b8:
da:df:9a:39:05:b6:2c:b9:94:f9:3b:5f:54:0c:49:19:4a:b9:
ba:72:aa:7f:1a:75:46:80:a4:00:4f:6f:31:9d:fe:df:d3:ae:
09:0b:fc:c3:7d:e9:78:39:54:a2:58:f0:eb:31:c4:9d:55:85:
d7:ee:29:8d:c8:22:84:4a:1f:73:94:ea:56:25:3a:51:23:5b:
7a:38:ff:8a:ac:5a:4d:af:cd:f5:28:eb:24:2e:5d:f8:82:59:
fe:54:b1:f8:db:bf:14:23:da:fb:b7:c3:d4:f1:3b:59:f2:5d:
f1:be:18:be:4a:2c:71:92:04:e8:2f:71:36:a2:4a:e7:d7:14:
cc:9c:10:bb:92:d0:31:11:0f:ce:d9:d7:5b:b3:ef:12:8e:2c:
10:1e:f7:5f:71:1e:17:6b:bb:6f:dc:bb:c9:27:11:ad:67:4a:
1b:af:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:16:02 2025 by rpki-client