Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a316a25-3c86-3dec-a7b7-ec73d2aceeaa.roa
File: 1a316a25-3c86-3dec-a7b7-ec73d2aceeaa.roa (raw, json)
Hash identifier: XVwHKC8t9QtWRZcLGEP4HMGQ6BAKcrlgjFMqCNiuC2I=
Subject key identifier: 60:4F:E6:60:26:E3:64:DF:08:68:1E:79:F8:DC:BE:40:DF:00:10:C6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B55137F50492C218DE21620
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a316a25-3c86-3dec-a7b7-ec73d2aceeaa.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:55:13:7f:50:49:2c:21:8d:e2:16:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=0ec858aa-dda4-4d5e-aefe-f9a58fb6e2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c7:f0:9e:d5:af:87:34:41:ad:0a:85:21:84:
ac:b9:2f:99:3f:68:4b:fa:80:23:bd:f5:d0:e8:90:
6a:73:c8:01:97:b2:4a:2b:90:a4:60:10:90:cd:21:
69:a1:cf:2d:5f:c4:f5:3d:75:a7:c0:c4:46:87:13:
01:ed:8f:e9:f9:a3:b2:6b:7a:10:92:30:48:c4:9e:
da:30:46:a4:45:ac:5f:c4:01:a0:e1:2b:4a:87:99:
4a:1c:48:f7:27:1a:3b:3a:82:5a:78:f2:16:70:35:
13:8c:f1:8e:ba:30:3c:84:9d:e7:b9:34:96:e9:81:
34:73:31:33:8c:a9:c4:dd:0b:22:16:d0:2c:c9:0a:
76:fc:47:82:55:1c:8e:d6:82:20:8c:60:2d:31:7f:
f0:16:96:01:a2:d9:bd:09:7b:eb:45:6a:5d:52:09:
7d:d6:86:e8:85:38:59:cb:60:c0:16:12:6b:d5:90:
22:39:9c:70:d9:db:d9:3d:42:2f:3a:32:5d:32:92:
79:ae:45:e9:19:a8:60:26:3c:94:8e:23:d9:6a:b6:
f6:88:71:2d:c4:c0:07:2e:33:c9:63:8b:b0:51:c1:
52:44:c7:68:19:ff:f6:af:94:fa:8f:9a:65:fb:4b:
99:de:04:75:6c:03:d1:2e:15:2e:80:76:30:8f:62:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:E6:60:26:E3:64:DF:08:68:1E:79:F8:DC:BE:40:DF:00:10:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a316a25-3c86-3dec-a7b7-ec73d2aceeaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:fd:30:de:e3:d3:2e:3f:19:c6:d0:ad:cf:56:20:91:68:14:
a9:40:27:6a:cc:15:e4:89:46:df:6f:51:e2:7c:98:86:14:99:
0a:a9:c2:8d:74:15:12:06:64:86:85:1b:17:ad:bf:3c:21:78:
51:f4:b3:ee:5b:21:f7:d2:ca:8c:88:8a:8d:91:0b:97:6a:f1:
c5:83:f7:ec:66:22:71:b6:a3:06:ef:cd:a9:cf:45:88:b4:82:
58:d3:f5:bb:fc:a1:04:b2:0b:5f:dc:ea:6d:91:c8:c9:af:49:
f3:a9:30:8d:87:5f:48:e5:eb:33:9a:1a:6b:08:45:6b:4f:e8:
b2:3e:e1:8d:ec:44:26:c7:58:64:e8:12:63:cb:16:0a:ac:d4:
2e:45:33:11:87:67:a2:4f:3d:c0:8a:01:9f:b5:18:d7:94:74:
c8:c2:f8:0c:c1:cb:1c:30:d4:85:41:2a:4b:e3:77:c6:f2:e1:
6a:60:8a:f9:8f:49:d5:cb:97:51:b6:45:f3:68:6d:ee:10:41:
84:26:0b:45:fa:58:43:12:ac:3e:32:62:bb:66:39:ef:c1:05:
c4:bb:fb:20:b7:6c:4e:b1:22:78:34:a9:47:b2:0a:da:fe:67:
d2:f5:9a:35:a3:3d:f7:09:e4:df:d4:c1:d5:fd:dc:0d:8e:7d:
b1:0b:e8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:04 2025 by rpki-client