Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a5e4ef5-44a3-34f6-a396-2412e4658400.roa
File: 1a5e4ef5-44a3-34f6-a396-2412e4658400.roa (raw, json)
Hash identifier: 4+7IZAyYmYEkJuNxZpMkKAN+7L3ZCufNUy04K70j2ko=
Subject key identifier: DA:09:2F:E5:B4:D4:8A:30:E2:71:B9:B0:4E:92:CE:D2:0A:9B:5C:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32ADCE1F81E247B19BDEF080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a5e4ef5-44a3-34f6-a396-2412e4658400.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:ad:ce:1f:81:e2:47:b1:9b:de:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=2c5e0344-fbfb-4072-a71d-b20ede861b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:17:12:19:1a:90:dc:96:e8:ed:37:b4:71:
b1:7c:f2:17:26:0e:ab:ce:e4:6f:ed:71:34:ba:db:
94:3a:68:0b:48:00:1c:88:fb:76:74:8a:49:6b:0a:
41:4b:eb:59:3b:00:59:2f:37:82:36:2d:1c:d5:90:
52:d5:f5:fc:e2:89:6f:6c:97:f9:df:7b:a4:a4:27:
2b:17:5c:66:fa:86:17:d6:6b:66:6e:d5:8d:75:e0:
ff:63:96:0f:3c:dd:2b:d7:48:09:14:b9:03:17:30:
e9:dc:0c:6d:88:6e:9d:2f:97:74:f3:0d:ec:71:43:
cb:32:42:f0:bb:15:f8:8b:67:eb:f5:48:de:e3:d0:
ec:b8:e1:09:81:a5:7c:7a:c3:d5:14:24:fd:c9:07:
df:94:59:b8:04:cb:67:a8:ce:0c:58:66:ab:42:88:
ff:55:79:c9:09:fa:26:1c:72:c7:b4:b4:9a:5c:1b:
55:a6:68:0e:1a:95:e3:81:f5:e0:62:25:e4:92:7e:
17:45:dc:70:a2:59:19:35:2c:bf:13:09:31:80:41:
54:69:e9:49:75:9a:ac:99:d0:d6:5c:df:5e:bf:d9:
c2:25:ce:01:54:a8:49:78:6d:96:d1:47:ce:1b:f0:
84:3e:65:08:11:fd:f5:3f:28:ae:3c:b0:8c:70:c6:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:2F:E5:B4:D4:8A:30:E2:71:B9:B0:4E:92:CE:D2:0A:9B:5C:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a5e4ef5-44a3-34f6-a396-2412e4658400.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:25:37:b0:d6:a5:94:8d:98:9a:5a:05:c3:8f:d7:c0:8d:0a:
c8:4e:a0:82:a6:7c:f5:ce:39:19:90:1d:d6:aa:1d:25:c1:53:
76:49:f1:65:86:36:95:9b:84:8f:90:32:80:53:16:aa:fe:d0:
cf:b0:11:85:42:c2:fb:d2:ed:39:1c:49:9e:9d:3d:0b:4d:02:
d4:a4:cd:ac:d5:17:be:1d:ed:f7:66:8f:05:65:b5:33:97:3f:
e6:b4:f3:9b:3e:94:be:84:67:1d:6f:9b:e3:d2:88:cc:c1:97:
69:0d:b6:d7:c6:d6:f1:69:35:3c:2c:89:f4:df:52:01:22:7f:
62:77:87:c4:2d:ee:27:70:ac:aa:01:d6:21:ae:08:cb:c5:58:
cd:81:e8:21:68:af:41:89:52:54:5a:43:89:2e:43:9c:71:08:
97:c5:8f:a3:fd:6e:df:1b:b0:ac:84:bb:64:28:f4:5e:5e:d7:
cd:d6:ac:cf:92:90:cf:51:13:c7:a3:7c:07:92:da:fe:96:49:
d7:30:8b:82:0f:5b:e3:98:61:80:49:b0:ed:5f:c8:10:64:dd:
61:00:d1:2f:2b:e9:6a:95:e3:20:ec:6d:31:5b:e0:e5:fe:aa:
3c:80:4d:78:55:f1:c1:5f:4e:a3:72:45:45:c8:23:0e:ce:af:
ad:f2:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:31 2025 by rpki-client