Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c0e64b9-a55e-38fd-a6a9-d884eca49ec2.roa
File: 1c0e64b9-a55e-38fd-a6a9-d884eca49ec2.roa (raw, json)
Hash identifier: SmFFxYc3NJq1GKPHIK4lED84+H4n+gIwuQardFZIu+I=
Subject key identifier: DF:DB:2D:A8:3C:4B:79:42:CF:BE:D8:98:12:EB:EB:DF:C8:92:CD:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAAC81A564AECA202D416D900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c0e64b9-a55e-38fd-a6a9-d884eca49ec2.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:c8:1a:56:4a:ec:a2:02:d4:16:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=00bb1237-3d83-491b-a7dc-0b33e0d20fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:97:3a:d4:65:e1:c0:7c:a7:ee:a7:19:ca:
63:c1:01:a8:e2:a1:96:5c:a5:89:b4:ad:42:da:90:
56:b9:9d:93:1a:6c:58:75:1e:01:e3:d0:9a:43:77:
d7:89:76:b1:56:74:51:7e:67:e1:69:5f:e5:e5:f6:
8f:96:ec:3f:4f:dd:1c:c4:3d:2a:a9:8e:c6:60:2c:
92:0c:c5:fd:2d:e3:17:2b:a0:cf:0b:82:a8:60:b5:
73:ea:61:10:c4:e6:a5:98:2a:c6:dc:61:80:27:c2:
f8:a9:9b:43:e2:41:c0:47:f6:05:05:72:ad:a5:b8:
55:6b:16:b0:7f:6e:44:49:8c:1e:4a:55:6f:ea:90:
a2:31:bf:b1:b5:d2:08:bf:6b:8f:04:c7:3c:cf:b5:
de:39:c1:cf:22:7c:78:14:de:40:8b:ce:84:c8:08:
e4:ea:39:2f:61:57:8f:81:87:d6:8b:eb:55:22:80:
4d:9b:3e:12:14:6f:f1:91:b3:9b:e7:0d:bb:d2:f4:
7d:88:57:0c:82:72:0a:c7:4c:5a:8d:ae:1f:11:75:
f3:66:4d:42:c5:f9:bd:30:a9:76:e7:23:19:46:ea:
af:6d:ce:b6:71:b0:01:70:a9:f3:25:59:b0:54:ac:
d8:5c:fd:4d:91:62:51:95:bb:cc:f3:98:27:00:5e:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DB:2D:A8:3C:4B:79:42:CF:BE:D8:98:12:EB:EB:DF:C8:92:CD:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c0e64b9-a55e-38fd-a6a9-d884eca49ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ec:6b:1b:a5:d1:55:16:8c:4e:92:50:32:70:e3:d4:fa:d1:
7e:ff:99:60:6f:d4:81:8f:08:88:44:40:37:a0:da:e5:ac:98:
cf:25:18:5f:46:3d:5c:49:78:24:f6:f0:57:28:59:a4:8c:b1:
9c:40:97:da:15:c9:c8:b7:e1:a8:f0:45:05:8c:91:e1:8f:d8:
2a:72:b5:df:4a:06:46:b8:0f:89:ec:f4:bc:e8:d6:72:b3:26:
43:69:6b:e0:df:95:3c:b2:ef:d8:93:e1:e4:23:cb:d0:f1:6b:
03:21:2d:ff:ac:35:52:d6:ff:a2:d2:9c:7a:1d:15:ad:8b:0b:
a9:26:99:68:20:3c:da:f3:27:70:03:14:32:b1:27:9a:2f:25:
29:fe:32:9c:13:b6:0d:76:93:1b:ef:32:01:a7:a2:a9:8e:88:
2a:7d:71:62:4f:5d:e9:d0:6c:93:59:30:d9:85:e9:2d:41:1d:
16:3c:b1:d8:06:7e:41:fc:60:57:06:21:52:9a:82:6f:52:bc:
b9:61:32:9c:01:db:cb:e1:c7:58:20:04:c5:c2:1a:be:39:0e:
b3:ed:96:85:01:3c:f9:87:6c:fb:6a:f7:31:0c:0f:eb:2f:db:
1c:ce:70:25:80:48:e8:67:b5:cf:14:36:09:02:7c:43:71:16:
b7:78:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:54 2025 by rpki-client