Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17aef767-cab3-3557-bcdf-ead4d386b45c.roa
File: 17aef767-cab3-3557-bcdf-ead4d386b45c.roa (raw, json)
Hash identifier: P1NTitMQhgv2l/T6g9fdiJRTmvuwkLhGIGVEPqjqF1w=
Subject key identifier: 5A:4B:F2:7F:E9:68:1E:28:92:04:76:66:F9:DB:DE:BE:E9:14:FB:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401FBE66326EDF7115EB7FB0E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17aef767-cab3-3557-bcdf-ead4d386b45c.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:be:66:32:6e:df:71:15:eb:7f:b0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=d8990cce-2272-4f76-a4de-ac957325e564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:32:b5:83:ca:e1:b0:58:bc:fc:b1:03:1f:
6c:be:14:8d:8c:2a:2a:27:c8:e1:ad:d4:9f:a4:d8:
e5:6f:b6:fc:80:1e:d6:52:2f:f7:d5:0f:99:f1:43:
59:2a:9f:19:4a:56:f4:fa:1f:a8:e6:bd:73:ef:e2:
3b:c3:b4:45:e6:34:a2:f6:f9:bc:3b:61:9f:7c:11:
d4:ec:f6:7c:a4:6a:47:38:6e:9a:fa:c0:b1:c2:4b:
ce:df:b7:a2:19:b2:ca:4e:84:24:a2:30:f6:d5:22:
b1:29:9f:68:78:08:2c:8b:33:2b:53:59:90:3e:7e:
6b:14:b1:6f:00:3a:0a:e4:c9:4e:da:92:da:91:fd:
70:0f:25:f5:9f:0d:78:40:9e:93:5d:78:8d:43:5e:
42:da:3c:1e:e4:86:fd:70:34:0f:2f:58:44:89:7d:
09:e7:d9:0e:25:f4:43:ca:bb:c5:67:2a:7a:48:ad:
03:3f:52:07:d7:fb:3a:5d:c3:81:57:d5:19:d8:ee:
cb:ba:d8:20:11:e0:95:f4:66:59:5b:cd:07:92:8e:
2a:07:11:07:d8:e0:56:69:92:b1:a1:49:46:fa:a8:
21:3c:f4:6f:05:5b:8d:3e:81:d7:cc:c0:37:51:6c:
aa:e3:70:49:88:9c:87:f1:fa:2f:97:94:ce:84:2f:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:F2:7F:E9:68:1E:28:92:04:76:66:F9:DB:DE:BE:E9:14:FB:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/17aef767-cab3-3557-bcdf-ead4d386b45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:55:09:4c:df:22:50:d7:95:35:92:11:52:6b:b2:92:e1:c2:
35:d0:0f:18:3f:76:22:a3:2a:e5:13:98:66:63:1c:74:35:bc:
8f:70:42:a4:33:32:7b:4c:9c:91:70:e3:4b:a7:f5:51:69:38:
d7:52:ce:bc:29:05:8e:53:44:d9:cf:b8:4c:22:6c:33:f2:b9:
5f:45:a4:b1:5b:43:ce:6c:81:c5:bc:fa:11:4e:4d:61:c4:41:
07:f8:12:e3:0a:b1:41:a2:99:1a:04:e0:a5:a3:b9:7c:11:a0:
ca:0a:3c:81:ed:f9:e7:0b:e1:27:b3:53:2e:34:f9:7f:2d:53:
5c:ca:d3:47:7d:31:82:09:7a:5e:9b:03:e3:62:60:a0:c9:a1:
18:3b:9d:11:75:6e:90:46:8e:bb:24:1c:c5:da:ab:9e:05:39:
3e:63:3e:62:17:81:32:c8:f5:73:0c:12:c9:bc:f8:a4:39:97:
20:dd:01:68:36:63:63:2e:0e:6c:4a:d0:03:b5:a8:00:4c:70:
e2:03:77:88:28:e5:da:b3:8b:65:ab:93:e0:aa:02:3b:59:3f:
19:06:51:7a:a9:63:26:0b:0e:5d:6f:d6:6a:1b:1c:9e:80:26:
f1:cb:04:9a:e0:44:48:95:5f:2e:13:b5:42:e5:cb:48:86:3e:
cd:a1:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:48 2025 by rpki-client