Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1aef4cd8-8f5c-38b3-aa78-d5593353c553.roa
File: 1aef4cd8-8f5c-38b3-aa78-d5593353c553.roa (raw, json)
Hash identifier: Fq69bbxmXm7ACheaLqKQXc7nome152/DSz0E0L6CU7o=
Subject key identifier: 69:18:8D:D0:89:E3:C7:C9:B3:D7:EE:92:71:73:35:91:81:5A:F8:8F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBF33272391E4E04154918C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1aef4cd8-8f5c-38b3-aa78-d5593353c553.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bf:33:27:23:91:e4:e0:41:54:91:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=c017ec51-c999-41cc-9798-674981e8f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:8b:f6:3d:ca:05:cd:d2:bd:ca:47:bc:ac:
64:5d:93:e5:65:d8:6a:a2:ba:33:75:44:77:3a:b7:
b3:14:4d:e0:a0:3a:1f:40:85:53:07:07:9e:74:f4:
0e:2b:c7:b4:93:80:84:94:32:16:00:85:aa:e1:4f:
1d:53:a3:25:49:fa:b5:0d:76:10:79:08:5c:6f:29:
a5:45:8e:1a:ea:3f:dd:07:4f:94:ad:85:71:cd:46:
52:86:2d:42:6a:fb:df:5b:96:5e:46:4a:aa:94:b8:
8c:31:d9:c4:c7:a1:a3:87:0b:2d:3a:75:77:ac:0d:
eb:36:b6:5b:75:f5:4d:05:36:e4:26:23:6f:0f:b2:
fd:ea:a5:c5:1b:27:d2:20:21:fa:eb:ec:3c:e0:10:
76:aa:27:eb:3d:0b:f7:ea:fd:27:5f:c9:ed:8d:89:
b1:ae:74:c9:b1:7e:87:70:42:c8:34:95:91:19:a2:
51:01:5b:c5:cd:71:3f:d5:32:78:06:99:52:c9:18:
f3:a0:b4:c4:9f:c9:ba:c7:50:b9:47:73:75:5e:b6:
17:3c:58:9d:89:16:de:ad:d8:a6:23:7b:48:4e:be:
a3:77:9b:32:54:c9:10:3d:40:f4:a7:55:43:72:b3:
a4:a1:2b:db:7b:f2:6e:12:f3:99:5f:48:69:cf:05:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:8D:D0:89:E3:C7:C9:B3:D7:EE:92:71:73:35:91:81:5A:F8:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1aef4cd8-8f5c-38b3-aa78-d5593353c553.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:86:f6:9e:c4:7c:09:3f:a2:6e:1d:50:de:54:76:36:a4:49:
7a:22:bd:fc:26:7c:33:95:7b:7f:87:f7:4d:1d:5f:3e:67:e6:
bc:e5:53:4e:a0:81:ec:e5:23:55:89:cd:ce:3d:bc:a3:78:d0:
07:4c:f3:54:b5:b3:77:0c:ae:59:53:af:e1:63:c9:4a:49:a0:
60:41:2a:b5:90:57:56:26:77:51:2d:5f:e5:51:1c:4b:0a:cd:
ed:1c:9e:f3:9a:54:c1:9b:66:6e:f6:dd:56:26:8f:ed:4e:ec:
16:3a:d8:c4:6b:37:91:c2:8e:75:0a:9d:9f:cb:e4:f5:e2:b1:
a2:70:5e:cb:da:d7:94:72:ce:cb:c6:67:45:f1:14:82:93:59:
b1:96:01:c2:5d:c8:73:9e:57:cd:5b:7d:ca:eb:1a:c6:a0:b6:
e1:b0:96:51:4a:16:80:66:cc:55:2f:bb:36:55:f2:cb:76:de:
a3:e0:c4:78:f6:97:7b:8d:d0:d2:d2:e5:e0:25:fa:a5:b8:06:
99:a9:e3:ed:de:64:1c:30:da:90:b1:a7:c2:83:7c:2d:91:c3:
f6:c1:dc:b5:ca:70:45:b7:94:53:4c:92:c1:a7:e0:47:09:24:
3f:93:81:9a:74:b0:58:62:de:7f:96:cb:3f:38:ce:07:fd:cb:
ad:77:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:30 2025 by rpki-client