Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f423772d-f8cc-39ee-af95-89c7f481fd32.roa
File: f423772d-f8cc-39ee-af95-89c7f481fd32.roa (raw, json)
Hash identifier: 8cFhqF1UWrghHXgobcmPs7WLk+CKwK9qlmj4zkB5SLE=
Subject key identifier: 25:6F:9D:97:8D:3E:39:28:EA:DE:56:06:80:CF:A1:85:90:83:D4:DF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCE2C116A1BE120BCF3921080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f423772d-f8cc-39ee-af95-89c7f481fd32.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:2c:11:6a:1b:e1:20:bc:f3:92:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=4c366377-1907-4953-9d81-3111feaa3e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:92:de:fa:e1:44:ce:dc:0d:c8:6f:ad:01:
4b:c6:58:db:7e:9e:3a:11:e0:25:4f:37:37:7e:8b:
ff:b7:14:27:36:82:d6:d1:71:33:cb:7e:04:fa:31:
0e:5e:74:5d:5c:3e:5e:84:f8:9d:98:e2:df:d3:b9:
86:ef:66:d9:c7:65:a2:f9:82:49:6d:be:41:b0:cb:
5f:cc:34:7f:6c:b1:ec:48:f9:7b:85:ce:a7:e3:40:
af:d4:3f:79:48:cf:29:55:94:5c:1b:fc:a6:10:10:
32:ba:6f:d6:70:20:66:79:2d:d0:ab:5f:db:fd:51:
3d:a3:01:69:a1:13:34:4a:ea:b8:80:07:55:c5:78:
e3:1e:01:d7:7c:c0:c8:a1:47:63:77:e2:5c:10:5c:
ae:95:a6:5c:43:78:56:cb:61:c1:e6:7d:d8:79:f9:
38:75:5d:43:65:d0:a8:17:e7:6d:ad:db:b0:40:09:
fa:e6:d5:98:fa:c6:14:5f:70:d4:44:e2:b8:db:65:
e6:b3:1f:68:84:b6:49:b1:8f:0e:a3:14:fd:ed:90:
b4:aa:f7:20:ca:9e:c5:2f:6c:08:59:9b:5f:c7:b4:
3a:7b:0d:8f:80:2c:74:e0:40:42:d2:9d:f6:12:b3:
d8:7a:ef:ab:80:75:a4:85:c7:35:65:42:81:95:ba:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:9D:97:8D:3E:39:28:EA:DE:56:06:80:CF:A1:85:90:83:D4:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f423772d-f8cc-39ee-af95-89c7f481fd32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:89:b3:8e:d3:67:4c:ff:7e:4e:98:bf:47:1e:ff:6f:f3:44:
a4:36:c9:67:6f:d0:df:32:12:ee:de:6b:2b:5e:a4:7f:88:42:
59:d8:93:bf:0f:72:d9:48:45:9b:43:73:96:de:41:ac:d6:2b:
90:48:70:74:4d:63:b3:34:12:d0:b2:1e:f5:2c:23:e1:05:68:
da:d6:f4:96:3d:77:31:03:15:0a:8c:8c:5b:d0:fa:d6:59:2d:
e0:60:37:76:c0:f6:4a:1d:55:80:33:61:68:5d:52:82:29:b7:
d5:4c:2f:58:66:95:ae:51:20:56:e0:3b:b2:3a:62:e2:ab:0a:
f6:28:06:4d:8e:23:b4:76:e6:6e:d4:d5:42:77:20:f9:2d:2e:
61:54:f7:a4:78:3e:04:71:ae:4e:5f:5b:6b:57:c5:34:68:53:
3f:b3:67:9c:c9:e4:5d:83:01:52:be:d0:81:5a:0c:bb:5c:58:
6e:d4:d8:26:01:71:78:8c:13:de:8a:35:d4:c9:83:44:ba:58:
0f:d5:f0:33:7b:54:98:31:43:80:6f:85:03:ca:3e:1f:45:93:
4f:64:b1:04:cc:d7:c4:b0:07:7f:33:24:23:eb:ae:4e:a0:8d:
7a:2e:36:a6:ee:4d:5d:08:24:18:31:77:82:4a:06:31:f0:74:
e4:7f:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:23 2025 by rpki-client