Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa1428f1-ced9-36d4-a611-3cbf0274ff50.roa
File: fa1428f1-ced9-36d4-a611-3cbf0274ff50.roa (raw, json)
Hash identifier: 1bE1fOuk8CXI+Qt7XAwICr4e4SynOHKNUvmimAl1bJE=
Subject key identifier: A5:4B:69:9B:FE:31:55:E5:9B:BC:EA:0A:A5:36:02:E3:72:E5:3E:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840411955E3036863A7528FCE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa1428f1-ced9-36d4-a611-3cbf0274ff50.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:19:55:e3:03:68:63:a7:52:8f:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=d62b9ac3-a68e-4498-b1c7-5ab5b453f2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:35:bf:e9:3a:2e:71:e5:c3:e7:fc:4e:a2:
3c:87:cb:c4:32:02:c7:22:ad:af:5c:4b:dc:00:3f:
e5:03:55:37:a9:76:bb:ec:0b:73:08:6a:32:13:ab:
e0:9a:4d:8f:ce:1a:5e:91:80:59:67:bd:bf:b8:61:
6c:57:0a:8d:c6:84:c7:1e:01:8c:08:f4:3c:86:7c:
42:08:0a:75:23:ad:ec:cd:7f:a0:6d:e6:d9:17:ca:
de:80:e7:ea:05:af:5c:e6:42:6b:e4:f3:9a:4f:ca:
0e:28:e5:7d:dd:c6:6e:4a:f9:9f:31:08:ff:a0:13:
eb:cb:10:85:07:f4:1d:33:45:e8:fa:23:0c:d3:0f:
22:14:a2:68:be:fa:df:cc:a4:ba:cc:48:4d:9a:d9:
6b:7e:c1:a9:c7:79:ad:56:9b:5d:24:b7:39:60:88:
9e:51:31:95:26:92:c6:a7:c1:ca:85:4c:91:97:79:
88:d0:42:bc:79:c9:b3:ae:61:65:29:93:16:6a:c5:
74:0d:31:2e:60:34:1b:5a:cf:a9:7b:6a:77:90:ae:
31:78:d4:c9:cd:f9:e5:69:0b:ba:c8:2b:38:14:72:
c2:44:36:45:6f:8c:ea:dd:a8:21:41:c5:ab:4d:e0:
2d:ef:a6:bc:54:54:a9:4b:8d:e9:21:4a:ba:b1:08:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:69:9B:FE:31:55:E5:9B:BC:EA:0A:A5:36:02:E3:72:E5:3E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa1428f1-ced9-36d4-a611-3cbf0274ff50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:8b:98:5e:fa:f8:66:66:79:d6:f6:23:d1:82:bf:2a:57:25:
6c:71:57:d7:a3:ee:da:cf:70:f6:c4:46:97:d0:b0:aa:71:3e:
1d:3a:71:3b:84:f1:d5:75:f0:2a:17:a4:03:d3:51:a5:37:50:
b6:f1:b3:d4:e5:24:f1:ba:3f:43:75:41:74:89:4c:69:d6:ab:
22:1d:38:39:76:fc:2f:ab:9c:d9:28:cb:9a:c9:cc:ad:82:0f:
fa:cf:93:28:08:53:e6:88:4d:e0:f2:9a:3d:21:ec:75:76:9e:
9b:d1:94:50:a7:79:0f:59:67:d3:1e:b3:63:9a:03:30:ce:3d:
c4:19:05:03:15:f4:09:bc:66:d4:0f:85:38:16:92:1d:ab:8b:
81:f6:a1:b8:68:02:45:cc:d7:9c:8b:49:ff:7d:69:84:b5:a4:
76:a8:46:2e:fe:7a:23:64:80:36:97:b9:88:8d:2a:3b:f8:4c:
20:40:5a:61:51:eb:73:5a:59:df:72:1d:aa:94:c3:1f:7a:e6:
bd:eb:91:f7:2d:ec:15:87:72:1a:ca:83:3f:fc:bc:bc:40:63:
72:a4:90:34:0a:38:cd:20:e2:d2:e3:88:ad:6a:19:d6:ff:df:
c5:65:5f:5e:b3:93:2a:3c:b7:10:e6:d9:13:f2:aa:bc:bc:50:
6a:f4:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:23 2025 by rpki-client