Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0207561a-c254-37e5-9958-6686bdce8a21.roa
File: 0207561a-c254-37e5-9958-6686bdce8a21.roa (raw, json)
Hash identifier: URZplg1YVF8NuVPfDlfakkfPMEICTRJ22ptE/VatUj4=
Subject key identifier: C0:C1:97:46:7E:DD:22:F0:D6:AD:CA:A6:58:44:0B:5A:53:42:F1:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DAB485E6ED4DF72CBF22E9C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0207561a-c254-37e5-9958-6686bdce8a21.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:48:5e:6e:d4:df:72:cb:f2:2e:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=cb57a146-4291-453c-801f-35cfabe238ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:01:35:0e:f4:35:0d:87:bb:b4:56:ae:9f:
b1:a3:a2:7c:23:09:96:46:6c:8c:7e:81:78:f6:14:
c8:1e:4c:8d:0d:5c:fd:d5:90:ec:91:f7:14:5d:40:
01:a9:b8:0a:2c:ed:9b:13:ca:2c:04:88:73:90:fc:
bf:9b:a2:39:cd:b6:f8:17:b3:f7:6b:20:7e:fd:b6:
74:57:1e:ee:e6:1f:76:13:99:13:74:a5:54:a0:5c:
d4:bb:7c:af:e9:53:70:0d:6c:4c:f0:34:91:04:08:
b4:ac:93:11:90:52:da:7f:b1:4a:25:a2:f3:9d:fb:
de:60:43:a9:f7:52:ca:e3:91:e7:a2:a6:ac:2e:ee:
e7:66:4f:37:f1:14:cf:52:1f:af:fc:40:18:b2:e2:
8c:e6:78:94:89:7e:16:7f:94:ab:86:4c:d6:53:b7:
af:a5:ba:aa:5d:09:84:7f:86:a2:bf:7b:8d:79:af:
9c:1e:f0:92:96:20:6a:2d:d6:06:d9:e4:3b:e0:a8:
31:16:e5:05:0d:0a:ed:17:70:3f:de:a1:46:f4:14:
01:5d:c7:07:3c:33:75:14:13:c1:44:88:8f:b3:f1:
c7:5b:ca:36:10:94:1b:58:56:46:53:69:08:f2:2b:
36:fb:a4:4c:cf:76:61:4a:dc:c1:3e:83:f7:7c:f1:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:97:46:7E:DD:22:F0:D6:AD:CA:A6:58:44:0B:5A:53:42:F1:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0207561a-c254-37e5-9958-6686bdce8a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:28:37:68:94:5e:7d:4d:cd:46:79:ec:b4:bf:58:f4:1a:d1:
b8:fe:36:e8:df:a9:5b:f9:64:1b:d9:78:f3:91:2d:ae:92:b5:
b9:25:1d:bf:d5:ae:f0:de:f6:66:01:bd:cf:ac:df:3e:05:46:
1b:bd:25:83:93:a4:fc:20:cb:8e:0b:60:e1:c7:5c:9f:a6:b7:
56:08:69:cc:b4:4d:3e:30:8d:6f:0d:3f:ff:7b:de:cc:85:5e:
c4:84:af:94:a2:b9:de:77:52:54:35:d7:7e:11:19:81:0d:c1:
84:f8:b1:bb:2b:8b:fc:b9:26:0d:1b:ab:2b:ff:cf:33:73:a2:
0d:cf:7e:44:0c:20:41:e3:cd:e9:5f:b1:73:38:33:5e:eb:97:
01:a8:97:db:c3:97:26:cd:b3:3f:a6:c9:d7:31:a6:9c:28:cd:
14:7e:0c:5a:b9:9d:31:d4:be:08:91:7e:8f:6a:97:27:b2:ad:
29:34:da:83:cc:83:c4:c6:50:a7:91:0a:fb:f4:af:0b:4c:c4:
11:33:64:d7:cc:26:5d:82:62:a7:17:69:58:6f:a6:b5:cc:2d:
cd:bb:82:b2:92:50:bb:c9:d1:bf:14:90:56:3f:b1:de:a1:2a:
be:99:ad:d3:01:68:84:b7:9b:50:87:46:e9:d5:59:f8:7d:89:
65:71:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:23 2025 by rpki-client