Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34322ee2-214e-32c8-8c7f-6b37b65a719b.roa
File: 34322ee2-214e-32c8-8c7f-6b37b65a719b.roa (raw, json)
Hash identifier: MlB8SYOMvfAapYoND/akHPjYpa/1bHaRZU5S9FH6siQ=
Subject key identifier: 4D:F5:70:60:97:CD:BC:F2:E5:7C:AD:50:7F:C8:96:D5:3E:BE:FE:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B891C3A42FB0DB1D6DB2940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34322ee2-214e-32c8-8c7f-6b37b65a719b.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:89:1c:3a:42:fb:0d:b1:d6:db:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=2352fa2a-f867-4026-ba27-38644897689a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:5a:1f:cb:ea:a3:13:1f:93:bb:1a:d6:92:
50:9d:9e:c4:3e:54:8a:11:d5:f7:62:9a:62:2b:de:
0a:93:b6:e8:e4:fc:ad:fe:9a:12:f5:3d:77:83:67:
3d:82:41:a3:ea:6a:45:e3:16:e1:bf:26:aa:45:a0:
4e:06:42:42:49:b4:c7:9f:d9:73:b0:01:f6:44:26:
01:0d:c6:17:e5:57:b3:e9:7b:ff:2e:5c:73:b4:b4:
87:16:97:3e:23:86:7f:f2:85:95:cb:33:6c:7a:e7:
51:ca:2d:45:f0:a8:ef:ce:f3:8f:df:a5:aa:f3:4a:
6d:2f:3c:95:12:24:5f:02:89:d7:07:94:fc:94:c3:
48:17:9d:63:dd:74:88:52:00:39:f4:be:bf:74:9f:
7c:fa:b1:0b:7a:d3:56:0a:d0:fd:af:ca:51:ff:6b:
02:92:5e:99:58:a3:4e:e7:35:59:8f:9e:2f:fa:ff:
00:96:65:57:c9:74:84:6c:db:62:e4:5c:13:2d:bd:
e0:16:98:11:b5:0e:27:c7:3a:4b:1a:d1:c3:cd:28:
23:dc:03:35:a4:3c:43:ec:ff:91:d5:76:95:39:6c:
c7:21:8c:90:a8:20:08:1c:a7:6f:60:2c:07:43:ae:
c9:35:0c:c0:ae:76:5e:d5:bf:24:fb:b8:f6:e4:af:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F5:70:60:97:CD:BC:F2:E5:7C:AD:50:7F:C8:96:D5:3E:BE:FE:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34322ee2-214e-32c8-8c7f-6b37b65a719b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:34:87:e6:72:0a:66:0c:6c:42:30:26:0c:e8:a4:9b:58:74:
1a:76:5a:4a:f6:cb:62:dc:3d:ad:f8:02:d7:e5:84:a9:1c:b8:
21:e2:75:1c:1d:f3:4c:f0:87:48:e4:50:30:f7:46:53:af:c6:
97:5e:d3:7a:e8:53:4c:73:20:66:b4:3e:33:20:88:ab:2e:6a:
c7:73:5e:00:50:87:1c:ce:5c:ed:d1:c5:3a:51:53:70:a3:79:
f3:0e:12:76:8b:85:45:00:f7:17:ab:70:5b:5a:36:db:ec:7a:
60:57:86:c2:15:0d:fd:1b:0e:13:a9:97:d3:c9:40:56:40:5a:
01:8f:81:ed:26:d5:7d:56:5b:71:a0:04:ca:8c:59:74:9c:3b:
f4:22:00:75:d4:ad:4b:13:30:29:42:02:fc:7f:9e:97:fc:7d:
69:31:5c:fa:69:12:e0:e6:a7:18:19:c8:ae:1a:9f:73:f9:1d:
f3:17:87:ee:c3:37:72:90:e5:c7:6f:24:c2:71:87:1c:94:70:
5f:43:02:2e:ec:8e:e5:ac:7c:3e:cb:d3:ff:05:a6:df:52:3b:
bd:f8:3e:b3:e8:bc:2a:b3:08:59:5e:08:97:e2:4f:15:00:1b:
cd:a6:f8:9b:64:07:7c:bf:89:51:9a:63:4d:bb:5b:ae:8d:51:
77:87:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:23 2025 by rpki-client