Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f7a3b2-5e4a-362b-9483-f897d43fd913.roa
File: 10f7a3b2-5e4a-362b-9483-f897d43fd913.roa (raw, json)
Hash identifier: N3beXqs8O4Eo6A/ELnJ2Esc15+/Xg1sxpnTBYn4fILA=
Subject key identifier: 4A:69:F3:5E:EF:15:AF:82:52:81:4C:D0:AC:4E:78:87:5E:54:2B:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BB2641304BA2D3BA891C4A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f7a3b2-5e4a-362b-9483-f897d43fd913.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:26:41:30:4b:a2:d3:ba:89:1c:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=59a6553c-794b-4b98-8fa0-b9b49b7f7abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:d4:a9:6a:e5:3e:ca:d4:0e:d3:31:bc:23:
69:54:0c:05:7f:e1:4d:5b:ab:2d:44:99:89:cb:2e:
10:90:21:aa:c7:aa:b3:fa:49:12:0c:81:bb:d6:0c:
f6:9b:9d:3e:6e:ef:97:20:2b:77:69:af:72:53:65:
28:0d:2e:86:f5:e3:d2:89:29:d1:47:cf:2b:47:dc:
47:77:2a:0a:72:fe:ac:09:a1:55:d7:60:f9:62:32:
f6:1a:6c:65:ee:83:24:f5:68:d8:24:9a:85:0c:24:
cf:e9:10:42:0d:b8:b1:1d:0e:56:16:c7:17:28:37:
1d:46:74:e5:a0:c9:01:42:cb:57:54:25:6c:25:bc:
b5:30:51:42:58:9f:d2:74:27:cf:2f:ae:e0:91:0a:
5c:25:03:99:a9:ea:a5:7e:55:69:85:71:68:0b:3b:
02:a1:53:50:bf:6f:73:10:9a:74:60:48:7b:86:09:
39:11:04:69:89:c9:4a:b7:40:fa:85:e0:2b:d3:b5:
73:27:7f:fb:53:c9:fe:d6:ae:f7:88:6f:50:3d:ce:
c5:1f:d6:1d:d4:91:f0:62:16:51:49:00:78:66:ab:
4f:f2:dc:9c:3b:78:b9:2e:f2:70:fa:20:35:a2:27:
f8:be:5f:9a:e8:ad:81:e2:b0:de:b7:93:1f:69:34:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:F3:5E:EF:15:AF:82:52:81:4C:D0:AC:4E:78:87:5E:54:2B:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f7a3b2-5e4a-362b-9483-f897d43fd913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:f7:c5:8a:45:00:00:1a:52:dd:55:43:6d:21:ec:4e:2d:94:
42:da:ce:6a:7c:82:f1:7e:d1:9f:fa:33:d8:cd:66:69:44:23:
de:cf:71:c4:44:cb:53:ed:ec:06:bd:78:b4:c4:9e:6b:36:0e:
fc:4c:7c:53:e8:c9:2e:f4:59:08:5c:af:55:a4:e2:e5:38:78:
46:04:c2:75:c9:d8:b4:a5:31:49:25:4b:66:f4:17:c8:89:d3:
c2:f2:df:a0:9a:d7:36:55:94:d3:64:7a:80:14:21:60:ad:b5:
3f:4e:bf:ae:0a:fe:06:cb:ef:e1:06:19:1e:7a:da:2f:48:12:
ed:e5:c3:7d:7e:c6:f2:f4:23:6d:0e:3b:5d:7d:b0:46:c5:dd:
15:06:17:b8:4d:10:41:51:a8:30:6e:c1:5e:4f:6e:8c:42:fc:
25:c5:3e:3e:c6:c0:76:60:dc:26:fa:fc:4f:b1:3b:72:12:59:
ee:7d:03:b8:27:bf:de:ac:61:35:c7:6d:d6:16:70:78:38:38:
ec:ae:77:a1:6f:d3:b0:f1:dc:fb:65:cf:fa:99:c2:af:73:b2:
3c:b4:27:fe:fc:2a:0d:25:99:80:44:71:57:50:fb:93:54:50:
19:79:ab:6d:a8:3c:1b:c0:7f:5b:29:e2:85:83:5b:30:c8:8d:
e3:00:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:40 2025 by rpki-client