Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00c5df96-3b52-30a0-8fb7-ea6546329fb9.roa
File: 00c5df96-3b52-30a0-8fb7-ea6546329fb9.roa (raw, json)
Hash identifier: MKvr0a52SDFHUXr2xLJ38JOFACzaNpvBrzH3nvoErQA=
Subject key identifier: EF:B4:20:E8:E5:3B:73:61:DA:20:A7:90:80:76:A7:56:1A:B6:32:FD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401FCD1DE9739781A880E19100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00c5df96-3b52-30a0-8fb7-ea6546329fb9.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:cd:1d:e9:73:97:81:a8:80:e1:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=d4583657-b0fc-4a08-803b-989ac333b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:ee:0c:6f:fd:b9:b9:58:82:bb:56:2d:1f:
e9:0f:7f:09:20:53:8c:b6:4a:51:1b:03:41:ee:54:
96:14:33:1e:b1:22:7a:03:40:c6:46:03:fc:6d:68:
71:bb:ea:01:8b:5a:00:d0:d4:c1:d6:bf:ad:80:b4:
a2:32:af:4c:ed:c6:9b:e7:f5:01:ae:67:90:60:3e:
d0:52:d1:be:07:04:eb:20:ae:ff:7b:c2:37:00:f5:
61:9d:24:66:91:7c:6c:8a:0c:4c:ec:a2:78:85:33:
8d:ee:fb:fa:83:ce:0d:58:1b:bb:20:93:e6:0d:d8:
02:c4:14:fb:74:0b:38:f1:a7:a0:03:0d:34:31:86:
58:ed:76:1c:70:89:68:e8:64:c1:4c:ea:dc:1d:61:
95:11:d5:15:bb:dc:72:de:1b:79:61:aa:3b:26:06:
bc:c4:30:62:98:bd:9f:a7:48:ac:15:74:91:15:b6:
4e:75:9b:63:60:d1:97:5c:10:84:be:19:5c:c1:ea:
9e:04:69:63:9f:47:21:b0:fd:e2:3a:a3:38:a3:31:
24:70:c4:1c:45:08:d7:0a:66:09:b9:73:fa:73:a1:
da:e2:d9:7b:b5:96:51:38:75:76:7c:ef:61:15:39:
aa:b6:ff:a0:b5:5c:e6:98:54:20:cc:9e:5c:d2:13:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:20:E8:E5:3B:73:61:DA:20:A7:90:80:76:A7:56:1A:B6:32:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/00c5df96-3b52-30a0-8fb7-ea6546329fb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0d:d4:e8:13:11:44:2a:da:28:65:56:58:3d:18:68:84:d8:
3b:e8:39:29:fc:d3:7a:75:f9:75:79:ff:ab:aa:32:00:64:92:
96:f8:1c:6f:12:e6:6f:d9:a2:88:c8:46:4b:e3:49:78:66:4e:
09:2b:0d:c5:93:1c:de:28:45:0a:88:04:f3:f1:55:83:34:aa:
62:c9:28:8e:c8:c7:3a:44:b2:c3:55:d7:de:05:3b:23:89:8f:
d5:85:2f:40:61:bd:73:56:54:f2:7f:6d:92:8e:43:a3:6f:4d:
04:85:84:5b:56:f8:92:a1:ff:27:24:53:4b:7c:a8:b4:42:6a:
74:f5:f4:52:cc:fb:78:d0:a5:94:4e:1c:8d:4f:06:d4:9f:2b:
cb:7c:04:5a:2f:8b:85:cf:5a:09:9f:88:f8:1b:a4:e4:74:c8:
ff:93:77:c1:bf:23:de:91:21:b8:fc:13:d3:e3:cf:66:f4:fe:
d1:36:ea:cd:e9:ab:73:25:d7:f3:36:00:00:22:ed:82:cf:33:
87:a4:83:eb:1a:c5:07:ad:c3:7b:61:68:5e:ae:f3:ca:6b:47:
e6:6d:52:f2:17:6f:89:cd:61:9e:e8:9f:24:36:8f:5f:2e:0f:
2b:79:e6:f5:21:26:8d:85:0e:82:64:5e:7c:f2:40:f4:31:46:
18:76:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:22 2025 by rpki-client