Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce17812-0f51-3091-8caa-bcbe6a867c92.roa
File: 1ce17812-0f51-3091-8caa-bcbe6a867c92.roa (raw, json)
Hash identifier: N8rnblPhh9SdX5dFd6oXG8EYP/RJzoyl+BT8Ul9EiXA=
Subject key identifier: 15:92:AE:E1:CE:B2:3A:D1:43:70:85:6B:8F:E5:D3:D3:CE:A2:CB:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D810FF05C4FF02B91E5059E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce17812-0f51-3091-8caa-bcbe6a867c92.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:0f:f0:5c:4f:f0:2b:91:e5:05:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=5690b764-f6b4-4d46-95f3-add39d2b03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:78:a7:5e:bb:7b:aa:8c:be:e4:61:55:f4:
34:bd:3b:ae:df:59:ac:2d:10:40:70:1e:78:ac:4b:
c6:2f:21:2f:38:9e:fb:65:9b:67:59:e2:14:f5:15:
48:09:3a:c2:19:05:23:ff:31:ae:fa:80:f6:4f:25:
6f:3c:5c:26:dc:aa:59:1a:b9:59:13:56:27:35:14:
69:29:cb:d9:16:90:dc:d2:80:fa:85:67:7b:8f:e0:
46:c2:94:53:29:82:77:46:c4:ac:01:9d:44:2d:4e:
81:0b:88:c8:97:09:46:05:44:70:4f:47:fa:26:d6:
39:be:1c:67:22:0c:5a:c4:22:0e:e4:ae:66:96:12:
94:d5:0d:26:75:53:60:c5:1e:62:12:59:91:17:36:
c8:8c:45:98:8a:b6:ba:fc:10:58:f1:d3:bd:6c:f0:
fb:90:0b:dc:ae:34:02:6e:6c:0f:5e:00:3f:92:bd:
8e:07:17:bf:ed:68:a2:73:c2:4c:e5:56:29:03:ca:
55:a5:38:74:97:c4:4e:9a:0f:a6:f1:03:83:14:b4:
02:8e:96:15:6b:f0:9e:c8:cb:d1:6b:ae:18:94:62:
9f:d0:13:23:87:88:b5:87:d7:63:c5:94:aa:37:6f:
be:08:04:0c:d6:f6:df:00:b5:6c:c6:4d:24:40:8b:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:AE:E1:CE:B2:3A:D1:43:70:85:6B:8F:E5:D3:D3:CE:A2:CB:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce17812-0f51-3091-8caa-bcbe6a867c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:09:2a:6e:63:3c:a9:b3:6e:cf:eb:e7:db:ae:af:9c:de:83:
66:67:1d:ed:ea:00:00:17:cb:ff:2a:11:cb:4f:90:b4:a3:27:
11:02:28:81:0d:90:98:d7:3f:be:b1:89:12:70:ae:ee:a8:a5:
e9:b0:a4:19:4e:24:c0:e7:ac:f2:06:83:6d:95:5e:e7:c2:2b:
2a:27:05:24:37:cc:26:2e:a8:64:0e:1f:40:0e:fc:b7:4b:02:
a9:fc:f3:98:db:30:8d:ed:ab:40:bd:8d:8c:66:1a:52:46:86:
5c:09:11:79:42:d0:c4:4a:f9:9e:c1:68:41:fe:36:44:8b:c0:
d0:0a:db:e7:7e:b3:d2:df:0e:b2:06:80:07:6d:45:c4:cf:e1:
fd:f1:ab:ef:4e:60:2a:ac:54:2f:de:4a:8a:ab:e6:9a:0d:e5:
40:f1:68:fd:6b:4b:b6:de:d7:e6:fa:87:12:a2:2a:78:b0:e5:
86:1c:49:19:86:f2:7b:8c:d6:b2:c0:85:15:49:25:db:6a:f4:
f2:87:09:22:61:21:03:32:d6:5c:bb:d7:32:39:82:98:a1:f5:
f5:1a:f0:df:75:ac:b2:e0:c7:98:c9:29:f3:58:61:0e:31:8f:
ea:87:42:44:68:47:f9:3e:95:c6:42:d0:e2:d3:3a:e5:8e:99:
3f:15:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:02 2025 by rpki-client