Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0315b751-37f7-3d42-97b6-0a91006e7235.roa
File: 0315b751-37f7-3d42-97b6-0a91006e7235.roa (raw, json)
Hash identifier: zfVIX0ZbeFMDwHDN7/TglePU4V6VpT1isy2dfUwFrQo=
Subject key identifier: 84:34:9B:E1:7A:68:BD:8F:16:3F:00:C2:86:F8:C3:18:60:DA:08:0D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BB8962D0A538E82A59F17E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0315b751-37f7-3d42-97b6-0a91006e7235.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:b8:96:2d:0a:53:8e:82:a5:9f:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=43ba8d51-2f99-4055-bcda-6723f4ee4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:ba:fb:8e:84:00:6b:97:63:0a:93:db:5a:
23:19:c6:42:c4:e2:48:0f:17:c9:f8:ea:8c:0d:20:
d6:10:f4:68:08:3b:ae:4b:c3:ec:3a:a6:64:4c:2b:
7f:bd:46:b7:a6:ba:c3:66:99:7d:14:ae:b5:4a:e0:
16:08:72:85:4a:04:2e:a2:ed:fc:c0:38:54:8f:96:
52:b0:bb:38:7b:a8:ac:0e:b3:bc:00:23:34:a0:0c:
18:44:87:ac:49:68:bc:06:86:2d:14:68:7c:06:f2:
e1:a0:fe:c1:c3:9c:6d:0e:61:e0:18:74:7c:4e:75:
79:31:8e:02:fd:67:7e:16:cc:d3:8c:b2:7c:38:57:
51:32:bc:4d:f1:c6:29:e4:5a:93:cc:53:a8:cc:f6:
d6:0b:49:d7:04:11:d7:7e:88:28:09:0c:ed:c8:f3:
01:a0:69:e6:79:6d:21:c7:ee:55:a1:25:f1:78:34:
75:11:8d:ad:f3:03:c4:9c:ae:4e:43:95:88:87:4e:
6b:79:95:35:d5:8e:e6:f7:ed:24:01:60:f6:91:5b:
a7:91:cb:10:3a:41:3d:23:11:33:f3:65:23:cd:0d:
de:c7:f7:7f:7e:f6:63:80:9f:58:39:7c:81:56:61:
0f:fd:76:f7:d6:06:fe:10:02:ca:ac:a9:05:1f:00:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:9B:E1:7A:68:BD:8F:16:3F:00:C2:86:F8:C3:18:60:DA:08:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0315b751-37f7-3d42-97b6-0a91006e7235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:2e:52:24:71:1d:cf:4b:e8:4f:5a:1c:fc:1e:48:d8:fe:f1:
56:80:8a:1f:56:e9:8b:14:4a:bb:6d:ae:6b:7d:1e:86:29:e2:
dd:20:8c:33:b1:89:84:34:34:17:1f:8c:58:d5:94:48:72:5e:
17:ec:2b:b2:cb:8b:64:27:8f:e3:64:e6:ff:c6:44:79:6a:38:
aa:ab:65:9d:97:17:83:b8:d9:ac:4e:a9:ca:c6:38:0e:f1:b2:
ea:eb:4f:e1:9f:08:e6:4c:f7:01:5d:31:8d:47:b2:7e:bc:bc:
ba:74:3a:5f:9f:20:b7:02:2b:2b:4d:92:2f:1e:a8:92:6b:a4:
da:e4:de:d8:77:d2:5a:8b:09:df:a4:96:94:be:3a:18:7f:23:
37:28:4e:09:a1:73:39:77:e0:6d:a7:54:11:89:83:11:6f:c9:
9e:05:e5:43:c1:a6:02:a4:fa:25:01:e5:a8:cf:7d:53:c9:bf:
f9:22:c6:0a:d3:1e:1c:f9:7c:86:9d:88:76:a7:01:08:be:dd:
ce:e2:19:17:34:77:e4:ca:46:77:92:fc:9e:b3:51:7a:80:af:
6a:02:33:07:de:46:51:a7:e8:de:96:a2:76:2d:42:35:d5:5d:
9c:bd:0f:a4:ed:a4:44:ad:dc:ca:99:a3:57:38:04:b2:cd:14:
e9:59:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:51 2025 by rpki-client