Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/032e4f32-08bb-3051-a778-5bb412a077ee.roa
File: 032e4f32-08bb-3051-a778-5bb412a077ee.roa (raw, json)
Hash identifier: D8i+e9SOY5Jz2GuY4Wg0eQ5YVPg/3CgMVw3DusFd83M=
Subject key identifier: 26:B6:5C:D4:B5:BA:6D:B5:10:FE:E0:00:E0:55:0D:F0:64:85:71:AA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE8D0BFB593E316B76599840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/032e4f32-08bb-3051-a778-5bb412a077ee.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:8d:0b:fb:59:3e:31:6b:76:59:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=5be148c1-9696-4ac8-9de1-40190904cf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:2a:4f:52:c6:20:cd:40:6c:fc:36:93:30:
fd:38:6e:a2:2f:27:20:be:39:b2:0f:c8:6b:15:c4:
42:94:68:07:a9:2b:ff:7e:7e:1b:3b:6f:51:df:df:
58:97:15:ce:9a:0a:73:61:eb:5f:31:0e:a0:a7:90:
d2:d4:d0:35:71:7d:64:78:b3:5c:44:37:48:5a:ad:
17:00:77:44:ab:e6:60:f2:bb:51:71:15:da:1e:85:
76:72:b8:89:79:4f:51:c4:6c:0f:c0:40:a8:d0:cd:
d6:09:2c:f2:ac:0b:0b:ae:f4:f7:99:65:7e:c9:a0:
bd:b0:aa:18:e4:d8:4f:31:18:86:26:e2:d0:f6:70:
84:15:05:e7:cd:18:2e:ad:65:3f:f3:ce:a9:39:e2:
84:8e:36:40:c7:e1:8d:fd:00:36:ea:2c:82:75:11:
62:88:cf:d5:b1:65:8d:65:68:a1:ef:6f:91:5d:d5:
48:d9:3b:28:61:82:63:0f:e4:4c:0e:0b:d5:7d:46:
57:c4:22:57:ba:ed:8f:e5:ed:c4:88:66:1a:f0:97:
0e:90:00:13:e6:09:84:40:11:df:e6:fe:c9:86:cc:
4e:e9:19:7d:09:ca:94:76:14:c7:c7:d6:f6:09:c5:
81:1c:f3:c1:f6:15:09:9a:b9:ed:79:07:f2:e7:32:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:5C:D4:B5:BA:6D:B5:10:FE:E0:00:E0:55:0D:F0:64:85:71:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/032e4f32-08bb-3051-a778-5bb412a077ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e0:9f:e1:e7:24:94:15:bd:4a:b5:91:96:82:6d:75:e1:22:
fe:0c:cb:4c:cb:ef:bb:b4:b5:74:d2:35:dc:6b:e0:c5:a9:3b:
53:17:3d:0b:00:13:c4:bd:70:cc:7f:fe:bf:5b:e4:d0:a6:50:
56:61:8c:86:15:c4:60:61:c1:6b:5b:23:b2:a5:a8:2b:10:97:
ba:5b:2e:66:4e:ff:32:4f:c3:41:8d:10:73:60:f8:3e:e3:91:
23:a8:7f:b7:fc:13:16:7a:6f:23:da:a6:89:f0:cf:e3:de:23:
89:3b:01:9b:13:a8:0e:45:c0:03:3d:2e:04:3e:79:25:88:c3:
c9:ba:53:5d:3d:05:13:cd:4b:ad:3d:71:2a:6a:94:a9:71:2d:
f6:e3:31:f0:49:31:29:0e:07:68:89:0d:24:ed:98:b2:ee:ad:
8b:5f:cf:8d:15:1c:8f:10:76:13:a8:b7:de:e4:5d:87:76:83:
2a:5d:d4:33:7b:0c:72:70:40:ba:7f:22:ee:1e:01:df:80:6e:
0d:a4:ca:5e:a8:77:10:d2:76:65:4c:2e:8f:1f:dd:4f:29:d5:
e1:45:e9:f5:5f:ad:b1:82:75:a1:f8:ce:42:cc:36:bc:34:b7:
b9:39:20:cc:1f:36:22:44:30:cf:2d:e8:77:c4:0b:ef:03:6e:
8f:e3:b3:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/OjQv7WT4xa3ZZmEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NWJlMTQ4YzEtOTY5Ni00YWM4LTlkZTEtNDAxOTA5MDRjZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik0qT1LGIM1AbPw2kzD9OG6iLycgvjmyD8hr
FcRClGgHqSv/fn4bO29R399YlxXOmgpzYetfMQ6gp5DS1NA1cX1keLNcRDdIWq0X
AHdEq+Zg8rtRcRXaHoV2criJeU9RxGwPwECo0M3WCSzyrAsLrvT3mWV+yaC9sKoY
5NhPMRiGJuLQ9nCEFQXnzRgurWU/886pOeKEjjZAx+GN/QA26iyCdRFiiM/VsWWN
ZWih72+RXdVI2TsoYYJjD+RMDgvVfUZXxCJXuu2P5e3EiGYa8JcOkAAT5gmEQBHf
5v7JhsxO6Rl9CcqUdhTHx9b2CcWBHPPB9hUJmrnteQfy5zKNjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCa2XNS1um21EP7gAOBVDfBkhXGqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDMyZTRmMzItMDhiYi0z
MDUxLWE3NzgtNWJiNDEyYTA3N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENuAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKuCf4ecklBW9SrWRloJtdeEi/gzLTMvvu7S1dNI13Gvgxak7Uxc9CwAT
xL1wzH/+v1vk0KZQVmGMhhXEYGHBa1sjsqWoKxCXulsuZk7/Mk/DQY0Qc2D4PuOR
I6h/t/wTFnpvI9qmifDP494jiTsBmxOoDkXAAz0uBD55JYjDybpTXT0FE81LrT1x
KmqUqXEt9uMx8EkxKQ4HaIkNJO2Ysu6ti1/PjRUcjxB2E6i33uRdh3aDKl3UM3sM
cnBAun8i7h4B34BuDaTKXqh3ENJ2ZUwujx/dTynV4UXp9V+tsYJ1ofjOQsw2vDS3
uTkgzB82IkQwzy3od8QL7wNuj+Oz9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:17 2025 by rpki-client