Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09734401-4b90-30d8-b3db-9ae19b47b0c5.roa
File: 09734401-4b90-30d8-b3db-9ae19b47b0c5.roa (raw, json)
Hash identifier: 45zsbsOrcWd9M6Bn7oI3bSXGW8Jsd80au6p9n/gx+f0=
Subject key identifier: 76:0B:1F:2D:8E:4E:CB:F0:D5:37:2B:7E:87:E1:82:51:19:9A:6C:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043E4186FB0CCF628C357BA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09734401-4b90-30d8-b3db-9ae19b47b0c5.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:e4:18:6f:b0:cc:f6:28:c3:57:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=3af499c3-0470-4fc8-8abd-f4fb4bedee46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:3c:6b:b8:6e:a2:ce:dc:39:9f:e3:8e:c5:
e1:00:8c:11:5d:41:9c:27:5a:30:33:1e:0e:e7:e7:
6d:96:70:15:c7:e2:fe:ab:66:db:f3:ef:0d:ec:aa:
ad:11:5f:eb:dd:42:25:93:9a:c8:c3:a6:a6:55:26:
c7:5a:b8:af:3b:b5:7d:9d:17:97:b6:be:e8:5d:7d:
cd:b6:18:12:47:da:7a:d2:af:c8:5d:f9:4a:3c:f7:
5e:30:80:52:44:8f:b2:ef:6d:16:b5:34:5a:31:7e:
05:50:c3:49:65:89:ed:80:4f:ac:80:6f:51:62:bd:
34:41:01:43:30:b1:04:db:6c:77:c3:eb:cb:23:b0:
c3:84:08:bf:8e:df:51:df:33:1e:2b:37:64:0b:b7:
4d:26:a1:54:4f:bd:e4:a2:3a:62:a2:4d:c3:fd:5b:
39:8f:96:12:61:2f:d5:7a:4b:cb:b7:c5:bf:23:e1:
56:51:b2:18:85:3b:42:31:01:ba:05:72:c8:8e:97:
a7:e7:cb:36:e6:e7:06:29:63:cc:6a:8e:fa:dc:42:
41:3a:aa:26:5f:c3:ce:6a:6c:6b:f9:28:41:a9:13:
77:f2:73:68:c0:b7:27:af:84:46:13:57:08:a9:7a:
0f:20:3d:2a:63:19:cb:07:f6:be:20:0c:8c:bb:b2:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0B:1F:2D:8E:4E:CB:F0:D5:37:2B:7E:87:E1:82:51:19:9A:6C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09734401-4b90-30d8-b3db-9ae19b47b0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:08:ad:bf:ae:d4:e9:b4:a9:5d:27:45:d5:2c:70:eb:0c:7c:
c8:ab:24:13:e9:4e:27:09:3b:0b:e9:29:f2:27:7f:a0:0d:4b:
78:1a:e9:26:af:7e:42:33:f3:f7:49:6b:15:96:7c:f1:89:de:
46:c1:03:50:97:b7:87:af:a4:92:48:e6:51:91:17:6c:77:45:
bf:e8:ef:09:37:8d:ea:57:3e:21:15:1d:05:1b:f0:1d:ad:5c:
62:6c:a9:6b:16:29:35:3f:43:46:6d:82:49:3e:d2:ea:72:42:
de:a6:ff:b6:d9:13:a3:dc:d7:60:ce:2a:29:91:35:4b:5e:21:
fd:b5:9e:81:e9:32:ff:bb:9a:7e:d8:77:8e:86:c6:f4:3e:71:
23:39:11:ec:9b:77:05:b5:9e:7a:9a:7f:44:25:05:d4:9a:88:
29:80:40:8a:06:82:2f:56:8c:33:25:bf:78:00:ce:f7:94:63:
b5:1c:f0:aa:98:76:6f:65:f8:ff:fa:c2:9b:a5:ac:b0:20:ac:
55:df:53:32:95:7c:00:25:41:b5:55:59:7d:18:83:f2:e4:ed:
2d:cd:f0:ac:36:ba:77:10:d5:49:82:d4:68:79:7c:ba:8b:9c:
9b:20:51:b6:73:28:47:de:2d:bf:5a:9c:6d:52:3e:be:cb:58:
e3:1d:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:18:05 2025 by rpki-client