Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24b0c19a-3d66-3006-a469-6d11b61098a0.roa
File: 24b0c19a-3d66-3006-a469-6d11b61098a0.roa (raw, json)
Hash identifier: gsvqOOAv5POYBbSomQXr+CTA0qioAMhHCg8MR4j/w5c=
Subject key identifier: 7C:8B:DD:24:5C:D5:37:F2:92:FC:44:93:80:9E:6A:F8:60:47:EF:D0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD25DFD1DF499F72685611080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24b0c19a-3d66-3006-a469-6d11b61098a0.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:5d:fd:1d:f4:99:f7:26:85:61:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=489c862a-ea07-440d-a6d9-94d3832078c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:20:fb:7f:55:b4:ee:36:ca:ba:f8:a9:34:
9c:1f:68:a4:de:9f:d0:25:4b:3b:26:07:d0:ab:55:
32:08:64:d4:8a:70:e0:38:e8:8b:d5:bf:79:fe:bb:
c4:f8:3e:27:c7:2b:a0:10:ca:5f:2e:ae:b5:04:4d:
36:b1:d9:46:bd:fe:c8:53:f2:8e:6b:cb:f0:d1:e4:
2c:9f:e5:67:b5:9f:25:26:70:9c:65:4e:f9:82:cf:
48:a5:1f:e2:97:a9:7f:4f:09:44:05:85:a6:d6:75:
e8:d2:39:4e:d3:d2:6b:11:ab:19:fa:95:90:3a:ba:
21:81:ed:61:c9:e5:64:82:20:f9:78:53:20:cb:19:
e8:d0:60:32:e0:d7:76:55:b3:43:5c:5f:b2:c8:93:
d7:7e:d4:f1:3d:27:51:59:5b:b2:c8:3e:14:38:f7:
ba:35:44:d6:47:10:24:61:53:de:32:ba:ec:cb:13:
d7:10:93:b8:39:49:f8:be:46:49:69:52:9c:40:2e:
87:a9:eb:11:58:4a:53:46:c7:1c:fd:47:23:64:f8:
ae:7a:20:fa:d2:f1:8b:46:f4:1a:7a:b2:9d:e1:a5:
3a:de:61:da:f7:ba:de:44:a9:56:46:1b:26:90:3a:
9e:19:ff:1a:53:47:23:a9:79:3c:ff:ac:08:47:87:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:DD:24:5C:D5:37:F2:92:FC:44:93:80:9E:6A:F8:60:47:EF:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24b0c19a-3d66-3006-a469-6d11b61098a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b9:79:39:74:ee:f9:da:74:0b:c8:22:cf:6e:f0:c5:c8:27:
76:41:ed:49:5c:1c:cb:e2:a7:1a:96:b9:fe:2f:55:af:2c:18:
54:44:fe:6a:a1:d1:91:ed:ac:13:f0:67:80:b1:e7:2e:62:86:
45:96:c9:5e:e0:57:4f:ed:14:f1:2e:23:4d:2b:3d:4c:9c:61:
74:44:58:94:df:57:6c:93:ae:05:d4:77:02:c4:f6:58:de:ed:
af:c2:40:e2:fe:20:6f:71:78:d4:c9:df:ad:dc:32:c0:86:e3:
58:95:3f:fc:e5:e7:34:73:96:09:45:1a:99:dd:cf:1d:56:da:
00:74:8a:19:71:b3:0d:5d:46:a5:ab:d2:94:99:51:2f:a1:4e:
d2:9a:2f:37:a1:e6:74:18:31:83:68:f2:36:ff:f8:04:7f:0a:
82:2a:9f:bc:7d:89:65:ac:0d:aa:a5:2b:69:ab:bf:5f:57:b0:
e2:c0:93:0c:c7:0d:08:6f:37:5b:7e:b1:ee:19:2a:4f:b5:b5:
23:75:c1:fd:57:6b:c4:7e:d6:e2:79:97:39:66:1b:8c:1c:23:
db:ab:04:a2:ff:e7:14:5a:02:7c:1b:70:14:5c:70:ca:18:bb:
29:99:b5:a2:7b:36:31:24:00:00:47:2c:4f:77:f6:43:4e:b4:
b3:21:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:22 2025 by rpki-client