Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b5f122a-a24d-3397-82ea-04dd940d915a.roa
File: 1b5f122a-a24d-3397-82ea-04dd940d915a.roa (raw, json)
Hash identifier: I41AjHnyPSvYvXLigDofgX5DaQFMRZRpwNPB5x4UkWA=
Subject key identifier: 17:84:F8:C6:80:8F:54:63:25:E6:3B:C8:18:B9:76:98:3F:9A:9D:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D811DEB9317344E0BF9053200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b5f122a-a24d-3397-82ea-04dd940d915a.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:1d:eb:93:17:34:4e:0b:f9:05:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=3ccf3216-2294-4ad5-842c-a3441dfddfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:db:ef:a9:75:4e:69:74:c0:fc:c4:7d:19:
d0:13:7c:30:78:cc:e6:55:fa:a9:21:d6:c1:bc:e7:
38:7e:fb:8d:28:b6:0c:b6:4d:48:e0:9c:21:94:b3:
fb:f1:a7:53:f3:c1:19:36:80:21:47:8e:58:e3:d5:
d0:91:46:85:c3:68:cf:6d:a7:5a:d5:44:11:a2:b7:
03:1f:b6:40:33:6f:80:49:e8:88:13:f7:eb:8a:af:
da:9f:79:85:b8:91:50:11:13:f2:88:40:cc:8a:c2:
10:93:76:4b:9f:27:e4:99:de:d6:b4:ec:4d:84:40:
e6:ad:97:14:f8:38:44:0f:b4:0b:65:3c:02:fe:67:
b0:e5:58:27:5c:a1:2c:da:1e:0f:6e:3a:ff:33:0c:
92:b1:b3:4e:47:de:8d:59:72:39:8a:18:c8:09:64:
30:03:a3:02:6b:af:68:11:12:68:0f:71:ac:e3:ac:
de:ac:76:3b:fb:e4:84:96:3b:4c:02:0f:b6:de:dc:
cd:84:ff:6b:e5:0c:8d:56:46:b1:ae:80:1d:ad:27:
f9:52:61:c1:31:78:70:50:ca:78:4e:1e:81:40:02:
3f:b0:40:3e:e5:a3:2e:44:58:a8:03:03:0d:d6:b7:
31:81:2b:0b:a1:3e:ee:cb:e0:4c:17:00:0a:55:4d:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:F8:C6:80:8F:54:63:25:E6:3B:C8:18:B9:76:98:3F:9A:9D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b5f122a-a24d-3397-82ea-04dd940d915a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:04:b7:0f:9a:60:f7:81:12:0d:91:95:d5:5a:36:68:a2:48:
77:16:ad:ec:f8:de:12:db:ca:cd:65:ec:42:16:56:a9:12:d6:
08:ac:e9:fb:4f:7a:8c:8f:74:56:48:ad:13:0e:d4:24:e8:b1:
0f:fa:fb:1b:98:1b:8c:0b:43:42:31:ff:5a:eb:54:82:ba:67:
5a:93:a4:17:fe:b0:c9:74:90:d0:81:94:1e:f3:81:3a:c3:34:
e2:f8:b7:ca:ea:0d:5f:e3:ee:f5:72:e7:c4:94:26:af:af:20:
77:12:db:7c:f3:05:40:6e:b6:a9:61:f9:fe:a6:98:27:7e:d7:
a8:0f:1f:7e:ee:d8:c9:66:4d:c9:11:11:67:d5:2c:cf:f9:59:
23:fd:a5:fb:b2:cb:b5:bd:70:c6:5f:7a:e8:7d:7e:1e:01:dc:
06:4d:0c:92:e9:78:ea:45:06:b1:06:4d:84:f3:3d:dd:c0:46:
0a:6e:fc:2c:28:86:bd:46:db:f4:1e:43:5f:c0:9d:be:0d:7c:
08:24:46:e1:9c:70:3e:ca:37:8c:a1:38:b9:58:5e:af:4c:fa:
6c:5c:b1:a9:11:c2:02:0b:f4:49:3d:81:2d:2c:cf:79:19:ee:
a2:4d:17:53:b4:ac:9c:d0:77:61:7c:69:73:6c:2a:3a:de:ff:
c7:a7:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:57 2025 by rpki-client