Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1543c7ba-ca6b-3384-b2d7-928639dc9661.roa
File: 1543c7ba-ca6b-3384-b2d7-928639dc9661.roa (raw, json)
Hash identifier: ElZgS4dKpOszqTfVGSAuOoRxYBIwhqXnYVesNBTam9k=
Subject key identifier: 37:77:68:01:14:F7:C2:B7:39:96:11:45:C0:8A:1E:7D:6B:E6:99:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F5382961A4D22D2F4BD1180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1543c7ba-ca6b-3384-b2d7-928639dc9661.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:53:82:96:1a:4d:22:d2:f4:bd:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=6aad1580-52d8-4a60-a09f-9fde3ee74fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:e7:23:52:fe:ca:c2:83:f2:24:32:85:d2:
dd:0e:16:b3:e8:69:ae:70:14:51:ba:13:50:c7:84:
43:9c:0c:82:c6:7e:73:6c:52:f4:fa:f8:b3:30:68:
f2:d6:d7:7d:1c:32:05:c1:f2:a5:e7:65:0e:f3:b6:
45:60:9f:bc:f0:7d:82:33:99:1c:fc:55:7b:1b:2d:
53:09:a9:a6:1f:44:13:c7:d9:e0:02:96:83:a5:e2:
cc:98:68:26:05:77:65:60:ba:fa:fe:c8:02:f3:a5:
1d:de:63:58:0e:ed:cd:a0:ed:db:54:f4:6b:ae:ba:
94:62:6d:ca:aa:9e:bf:53:ef:f6:2d:6c:21:9b:0e:
3a:d6:3b:c2:41:70:62:36:d6:07:92:00:69:77:fb:
35:3c:f7:44:56:a7:b4:15:c6:5b:dd:82:3d:84:88:
33:b7:bf:af:de:55:90:50:b4:75:ac:21:28:f8:6f:
57:3d:ae:15:fc:08:60:c5:37:bd:b8:d8:35:4b:7f:
27:b2:1f:04:e0:bb:cc:c3:c8:28:cb:89:66:c8:c7:
9b:9d:84:9e:33:dd:ad:be:49:f4:38:e2:46:90:75:
31:6f:2f:15:7c:01:8e:01:c2:f3:bb:86:c8:f3:d9:
1b:c6:19:aa:f2:79:56:aa:70:75:70:c7:e1:92:b1:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:77:68:01:14:F7:C2:B7:39:96:11:45:C0:8A:1E:7D:6B:E6:99:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1543c7ba-ca6b-3384-b2d7-928639dc9661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:b7:3c:88:de:63:5d:8f:f2:40:52:3e:6d:ad:1f:e0:03:7e:
a6:fe:b7:59:63:dc:6e:9c:d8:37:c5:d2:21:05:36:25:e3:6d:
e7:b7:e6:58:1f:86:5a:4b:58:80:4a:a8:60:23:78:aa:09:ac:
16:1f:0c:ea:73:4a:7d:00:c0:9b:37:e7:a2:8c:80:c2:69:d1:
24:2f:42:ce:c8:a5:1a:a3:52:92:43:ff:46:d1:31:9e:7a:87:
4a:5e:9b:28:41:4b:f9:a0:4b:96:f6:a1:c4:07:42:83:bd:a9:
b7:da:02:08:c1:17:7e:45:de:2e:25:54:24:df:a9:d1:f7:ab:
00:c5:2d:d2:82:ac:0a:df:f6:1e:2f:f1:d9:f4:ff:2a:f6:ae:
f2:63:ac:79:9d:92:bc:63:b5:27:54:15:86:7f:ea:09:20:e2:
2b:b4:dd:5c:33:83:d9:ae:05:f1:b4:95:9a:2f:b6:76:49:bb:
9c:64:3a:6d:d3:a2:87:c0:73:52:74:80:50:b8:65:5a:09:61:
fb:96:cb:9a:c4:fd:b7:bb:14:10:b6:cf:52:80:bd:16:14:01:
83:4d:75:1b:4a:f3:cd:78:98:a7:26:0f:61:10:eb:7c:bc:40:
17:a5:3c:a5:c0:00:b7:d3:3c:8c:1d:84:e3:59:e1:b6:a2:30:
8a:05:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:34 2025 by rpki-client