Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb5da105-42ff-3f47-a532-c4b11f84c0ac.roa
File: fb5da105-42ff-3f47-a532-c4b11f84c0ac.roa (raw, json)
Hash identifier: jDvr/P1173CHe82jrx4xlwUYpZthZfGDAj8lPhGcPGQ=
Subject key identifier: 65:BD:69:FB:7E:8D:C5:C3:24:4D:D3:A6:55:F9:3D:0B:72:A9:D5:4B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BEEF40C2A02D960DDF42940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb5da105-42ff-3f47-a532-c4b11f84c0ac.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.8.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:ee:f4:0c:2a:02:d9:60:dd:f4:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=f0d55b66-5df5-4fc1-9d57-ef76e2d26494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:da:b4:d6:79:8c:eb:76:5b:61:d8:8b:2f:
5e:e3:86:2e:5a:95:cd:f0:7e:fb:c5:e6:7d:f7:66:
d6:4f:03:44:9f:20:ec:f4:69:83:e9:85:b9:47:e6:
eb:bd:dc:50:76:aa:cb:95:ff:ad:ec:d2:db:a5:7c:
9a:be:6f:9d:52:77:ce:45:8d:92:94:a5:c1:ba:1b:
5d:e5:ec:02:09:fc:65:2f:8c:e9:14:91:8a:6a:05:
b8:fb:b0:ee:dc:b6:fa:7f:2d:6e:9b:a3:55:a2:51:
a7:24:38:14:b0:be:d1:4b:05:d7:26:f7:5b:e5:de:
07:8e:44:f2:2a:f6:8a:83:cf:f8:dd:93:47:00:a7:
ee:a8:6d:87:67:70:4c:5e:78:ed:14:10:cd:b3:b3:
7d:c2:e6:cb:32:89:c6:41:cc:0c:ff:09:52:cc:27:
d6:2c:1f:b1:5d:7f:c3:d8:e4:ca:70:08:4c:e6:af:
97:f6:22:a7:12:fd:3f:49:5e:ea:e0:ed:0f:83:7c:
40:e6:da:66:e7:c8:c4:d5:a4:45:8d:28:5f:f3:55:
5e:73:ab:77:7e:9e:39:39:f3:b3:dd:53:b5:2f:0c:
41:e1:1f:09:e1:54:5c:e2:3b:06:b3:d6:0b:3d:9c:
4b:f2:7c:4c:c4:e7:6b:81:96:1f:d9:f7:bd:e3:91:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BD:69:FB:7E:8D:C5:C3:24:4D:D3:A6:55:F9:3D:0B:72:A9:D5:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb5da105-42ff-3f47-a532-c4b11f84c0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.8.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:5d:e6:9d:69:7c:10:66:bd:4b:a1:f9:1e:17:07:95:a1:a3:
97:19:bd:59:c7:34:5e:76:92:6a:ae:28:e9:55:8e:47:d2:79:
65:7b:50:43:3d:8f:95:c9:60:43:68:57:db:09:ee:61:dc:43:
f5:32:27:8d:44:aa:da:28:b6:fd:c8:41:2a:71:e8:24:a4:49:
cc:5f:a8:a1:6c:c5:d2:5c:15:d7:97:68:ac:9c:fe:17:e4:75:
55:f7:09:91:18:99:16:cd:64:fa:94:3b:5b:89:66:ed:2e:b5:
d2:d1:cb:13:07:52:a9:28:a0:84:1c:42:52:de:5c:aa:eb:d1:
da:84:f9:1c:3c:ca:eb:d0:70:d8:ef:fc:d3:ce:1b:ec:69:dc:
65:15:57:12:aa:be:db:8c:c4:41:a4:f8:58:43:6e:69:83:43:
f1:87:ca:a7:af:a1:ee:2b:04:c0:03:6b:0c:d9:82:85:26:e0:
cb:bb:fc:be:24:64:38:d8:50:d7:37:52:19:a1:8e:16:b9:07:
bf:1b:4f:fc:dd:25:5f:8b:62:a2:37:bb:aa:49:bb:3d:bd:b4:
65:bf:36:f6:ed:33:4c:64:8a:a8:24:cd:6b:a0:62:1e:cf:86:
de:4d:b8:8a:5e:0e:2f:07:4a:82:84:f3:32:a3:b6:7c:af:e2:
1a:1a:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:32 2025 by rpki-client