Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f86f7eda-dcef-39cc-b23f-9dc14a4acd8e.roa
File: f86f7eda-dcef-39cc-b23f-9dc14a4acd8e.roa (raw, json)
Hash identifier: SJ1c+EAUFtsGn9aYNzFQrHBI1TBKIE7RTk5vUDD5os8=
Subject key identifier: 7E:2F:02:CE:77:2A:AD:C6:01:93:9A:5E:3C:4A:9C:A5:C5:8C:15:11
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA96BF4A48171A2C68DFBB190
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f86f7eda-dcef-39cc-b23f-9dc14a4acd8e.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.116.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a9:6b:f4:a4:81:71:a2:c6:8d:fb:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=6a8a749e-6906-40ab-91ca-3b438ff60ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:05:59:6d:b9:4e:7c:c7:e3:2a:5f:e5:8c:
5f:ec:bf:fa:24:d5:b3:3c:0f:ad:7c:06:60:46:d8:
83:5a:62:51:9a:29:a1:ab:7a:4c:0d:91:a5:39:3f:
4b:f3:12:69:89:37:76:8c:44:99:c8:e9:8f:7f:aa:
1c:2d:f0:d4:fe:9c:ae:51:02:a9:80:78:56:d0:1c:
0c:10:a6:e9:a2:ff:a8:27:03:29:6a:e5:ff:7c:0e:
c1:6f:15:34:59:a8:6d:c1:51:5a:d5:dd:03:8c:8f:
1b:01:c9:c2:4e:32:54:f0:de:72:17:f7:ca:43:ee:
4d:eb:c5:3a:5c:63:61:58:eb:0a:b6:6a:7a:7f:ec:
40:fe:70:56:2e:c7:41:8e:88:21:4a:df:0a:eb:fa:
4b:37:1e:b6:e9:87:32:7f:67:38:98:de:40:f9:11:
2d:e2:ff:52:c1:a8:85:32:ff:a6:36:1e:12:84:1f:
26:e3:8d:a1:21:be:4e:db:e5:60:df:d3:a3:21:25:
25:2f:ff:fd:4a:f5:7f:c3:d5:4a:02:29:ab:74:08:
63:18:b0:e1:0a:90:fa:36:1f:d3:fd:67:5b:df:50:
89:03:2c:0e:3f:4d:91:73:a4:d9:dc:d6:c2:5f:a4:
71:69:77:7e:81:06:da:f4:79:46:23:de:a8:06:44:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:02:CE:77:2A:AD:C6:01:93:9A:5E:3C:4A:9C:A5:C5:8C:15:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f86f7eda-dcef-39cc-b23f-9dc14a4acd8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.116.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:8c:1f:66:e5:c4:9f:e1:03:a4:cb:78:67:19:73:ed:45:91:
df:ee:8e:c2:c8:93:c5:49:05:af:60:37:ae:d2:35:65:02:bf:
c0:f7:87:e0:76:5d:01:a2:f3:7c:77:2c:7a:00:1c:c3:54:d4:
57:92:b2:60:e0:0e:05:8e:3a:76:e0:d4:d7:2a:04:42:f4:d1:
8a:f2:23:0c:14:29:bf:0a:f4:21:bf:3b:24:47:61:52:2f:bb:
aa:c3:9f:cb:7e:88:a5:0f:58:e0:31:7b:d2:b3:37:08:dc:cd:
bc:80:38:91:85:aa:55:51:7d:2b:53:02:4c:9b:ed:72:cd:3a:
a3:eb:b6:09:b1:10:c2:e3:4c:96:b1:4f:23:fc:0d:92:d7:ad:
28:c3:45:5a:af:91:ed:3a:3d:2d:a5:3d:a0:7a:15:ed:23:2a:
a9:37:b5:a8:1a:df:d9:45:a6:37:5e:13:35:71:9f:6f:c8:90:
d4:21:9d:2a:65:14:b3:4b:9b:82:54:f9:e9:3b:e7:ac:e9:e4:
2b:d6:85:4a:b4:c9:c6:3a:14:e9:6a:74:fb:e0:2b:a0:d2:2e:
72:82:14:76:e3:5f:05:44:8f:2b:86:ff:d8:e8:52:ca:ac:5e:
30:e5:26:02:b5:c0:9e:b0:c6:57:99:7f:ff:04:57:0c:81:91:
bd:5c:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:26 2025 by rpki-client