Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ab89dbf-cde3-35a5-83c1-1763fa6ebd94.roa
File: 1ab89dbf-cde3-35a5-83c1-1763fa6ebd94.roa (raw, json)
Hash identifier: IwM52bqSiq2tAeptfW2kitoramWMcvT4h4qI7/ebnSY=
Subject key identifier: 92:DA:BF:AC:36:4F:DD:12:B0:E9:BC:D0:F9:24:1B:5B:B0:50:3D:39
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE45612F575C8AA6668D299C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ab89dbf-cde3-35a5-83c1-1763fa6ebd94.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:56:12:f5:75:c8:aa:66:68:d2:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=c9e84c36-a1ce-4770-a583-0e2e7338b19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:67:ac:99:a0:8f:51:00:97:e3:34:e9:9b:
15:88:5e:2f:ad:29:bf:5c:33:a0:c0:20:6e:ca:7c:
9f:6f:14:49:c2:c0:32:b1:4f:e4:28:6e:3c:14:8d:
8a:a9:bd:2d:07:10:04:0e:1a:07:6b:5f:d9:2a:a9:
c5:c6:03:be:d2:64:6d:e0:05:cc:ac:eb:f7:4b:c4:
1a:ff:17:d6:6e:2c:b6:89:81:fe:ea:d0:3e:6e:01:
a9:90:e3:41:26:dd:c1:be:a5:70:0a:d1:1f:bc:85:
ed:40:83:1b:f7:20:c2:9e:9c:51:f4:d5:88:36:ec:
9c:75:f2:b7:42:28:e0:23:f9:c7:9d:2b:d4:b4:8e:
fa:c8:9c:f5:d3:89:20:29:6a:4b:36:a4:ee:d7:d9:
7b:94:fb:ab:35:f4:bf:3b:db:2c:f0:8c:6f:5b:90:
61:d4:6a:1c:9b:c9:f9:35:0b:74:b6:68:71:e0:ee:
cf:8a:9b:02:f2:84:12:ce:b0:8d:fb:e3:ca:46:47:
e6:7d:52:ed:9e:41:b7:17:74:bd:ec:d7:41:ab:af:
57:ce:d1:b2:35:4d:72:69:37:f2:08:8b:c5:88:3b:
1b:07:57:4a:b8:bb:97:10:3e:fd:b9:7d:9e:7c:f8:
14:58:0a:53:47:74:95:69:5f:d5:cf:a6:fd:99:c7:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DA:BF:AC:36:4F:DD:12:B0:E9:BC:D0:F9:24:1B:5B:B0:50:3D:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ab89dbf-cde3-35a5-83c1-1763fa6ebd94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:05:4f:93:5b:fc:cf:bf:a6:56:b0:01:d1:2d:bf:00:52:58:
1d:ca:ac:fc:86:09:5c:78:f3:08:e1:68:3d:33:13:6c:9f:e9:
8b:ac:28:38:7c:06:e2:e9:3c:17:ca:c2:26:01:97:4c:27:1f:
c9:79:24:fb:ab:ee:69:cd:a7:6e:17:fa:39:7a:02:49:29:0f:
05:da:e8:ca:7d:99:a0:3e:ae:d0:8f:df:af:76:dc:9d:bb:c7:
01:5e:1b:5a:f1:09:e8:43:b1:c7:24:15:14:df:e0:c5:2e:e1:
c9:86:d0:6f:13:1d:69:21:64:b1:92:e1:e0:63:6c:20:1f:af:
a9:e4:38:7e:95:36:69:d1:d4:44:34:b1:ab:d2:18:5d:84:10:
5d:f2:fd:b7:8d:78:f3:28:61:51:20:11:8d:3d:bb:f2:28:5f:
3a:0a:f7:f1:8c:3e:d5:8d:42:a0:56:c1:c8:dd:cf:03:43:4a:
f9:0d:8a:96:1e:01:8d:8b:f6:77:b7:7d:59:ab:fa:8e:6c:79:
35:a5:a9:c0:72:ed:1d:f0:6b:db:fc:a6:e0:15:86:4f:21:a0:
5f:84:b0:63:d9:ec:24:03:5b:7b:c0:e5:9a:d4:ec:93:bc:c5:
64:b1:73:1d:1d:70:72:ad:a2:5f:41:60:f7:20:2d:bd:28:2b:
f3:a4:20:da
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7kVhL1dciqZmjSmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMjEyMDAwMFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
YzllODRjMzYtYTFjZS00NzcwLWE1ODMtMGUyZTczMzhiMTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/FnrJmgj1EAl+M06ZsViF4vrSm/XDOgwCBu
ynyfbxRJwsAysU/kKG48FI2Kqb0tBxAEDhoHa1/ZKqnFxgO+0mRt4AXMrOv3S8Qa
/xfWbiy2iYH+6tA+bgGpkONBJt3BvqVwCtEfvIXtQIMb9yDCnpxR9NWINuycdfK3
QijgI/nHnSvUtI76yJz104kgKWpLNqTu19l7lPurNfS/O9ss8IxvW5Bh1Gocm8n5
NQt0tmhx4O7PipsC8oQSzrCN++PKRkfmfVLtnkG3F3S97NdBq69XztGyNU1yaTfy
CIvFiDsbB1dKuLuXED79uX2efPgUWApTR3SVaV/Vz6b9mceu4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJLav6w2T90SsOm80PkkG1uwUD05MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWFiODlkYmYtY2RlMy0z
NWE1LTgzYzEtMTc2M2ZhNmViZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENuAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAawVPk1v8z7+mVrAB0S2/AFJYHcqs/IYJXHjzCOFoPTMTbJ/pi6woOHwG
4uk8F8rCJgGXTCcfyXkk+6vuac2nbhf6OXoCSSkPBdroyn2ZoD6u0I/fr3bcnbvH
AV4bWvEJ6EOxxyQVFN/gxS7hyYbQbxMdaSFksZLh4GNsIB+vqeQ4fpU2adHURDSx
q9IYXYQQXfL9t4148yhhUSARjT278ihfOgr38Yw+1Y1CoFbByN3PA0NK+Q2Klh4B
jYv2d7d9Wav6jmx5NaWpwHLtHfBr2/ym4BWGTyGgX4SwY9nsJANbe8DlmtTsk7zF
ZLFzHR1wcq2iX0Fg9yAtvSgr86Qg2g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:22:33 2025 by rpki-client