Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ad7885b-6efd-3ee8-ab5a-a86ad003e4d9.roa
File: 3ad7885b-6efd-3ee8-ab5a-a86ad003e4d9.roa (raw, json)
Hash identifier: JPkVbLpTvEmQ20eswqEUYGcaQFPnuJaoSGlR77S7hJ8=
Subject key identifier: 31:00:A5:1C:E1:5A:44:2E:6B:C1:67:4D:B2:C4:C4:8D:A1:0B:76:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32D5C0008F204F924E692900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ad7885b-6efd-3ee8-ab5a-a86ad003e4d9.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:d5:c0:00:8f:20:4f:92:4e:69:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=2f87c0f2-e22b-4d8d-8fc7-8f14915dede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:e6:aa:07:c7:75:32:4d:59:59:2c:a5:be:
b3:3b:dd:72:32:0e:cc:39:e3:94:99:a7:e7:60:42:
52:b2:92:87:00:45:e2:db:a7:43:f9:a4:a1:c8:b8:
07:eb:3d:c3:b8:1e:f6:19:56:f0:bc:b5:17:bb:05:
e9:91:52:ea:79:fe:c2:a2:c4:31:80:46:c8:08:1b:
6a:90:d1:3b:1a:eb:7c:b1:68:30:08:7f:33:6d:a0:
0d:7a:5f:2b:b0:f2:ed:47:99:07:a0:73:ea:d6:ed:
25:05:e3:9b:3f:03:e8:79:07:74:70:0f:04:96:be:
f2:49:46:9c:6e:40:9f:c9:0a:d0:f2:18:d0:32:6b:
5c:c6:95:5c:c7:08:f2:4b:bd:1a:8e:18:29:e2:bb:
3d:63:17:e5:22:79:2d:36:64:44:e2:24:a6:4a:a6:
d3:6e:df:31:0c:e5:0f:71:cb:8a:41:67:ee:3e:00:
8c:a3:1a:c5:f3:5d:f0:6a:11:30:b2:a4:2b:f1:f6:
16:ea:ff:68:dd:37:0a:a8:d9:5d:ec:b2:5e:fc:9d:
a5:bf:48:ac:e2:21:af:34:aa:63:3a:c7:be:fb:72:
df:3d:d3:8b:d7:c7:b7:0d:df:27:4f:d4:64:40:ab:
79:1a:e1:b8:ed:88:0c:a3:07:59:46:7d:59:b5:fd:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:A5:1C:E1:5A:44:2E:6B:C1:67:4D:B2:C4:C4:8D:A1:0B:76:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ad7885b-6efd-3ee8-ab5a-a86ad003e4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:66:65:b2:f7:35:5c:38:33:80:1c:59:06:b9:83:98:00:a0:
37:a5:30:42:3f:b8:54:f7:56:05:96:9f:ae:92:12:0b:9e:9b:
2d:ff:be:eb:bf:0d:ba:09:30:fc:ac:b1:a3:31:b2:9b:9a:00:
de:d9:32:9c:1b:55:4a:07:74:e8:1a:1d:88:8e:1b:fe:c2:8b:
d9:b2:04:c6:ea:1c:dc:b1:1b:6e:97:3d:53:5c:b6:cd:90:06:
81:e2:ad:9d:68:76:cd:5e:b0:68:64:e9:e1:26:81:a6:62:16:
dd:1d:27:dd:88:0b:fc:e7:cf:4e:e7:0d:68:ef:43:26:e5:91:
86:d0:b5:66:a4:dc:aa:6f:23:2d:f3:50:45:e8:80:de:11:6d:
7c:3a:9e:ce:d6:e8:a6:75:bf:8c:29:f5:49:bb:06:2c:19:40:
bf:c0:6a:4f:e9:89:1f:ab:a9:e9:cf:42:78:a3:4a:4d:35:a9:
0f:cd:26:13:62:f3:f6:01:15:a5:4e:76:b3:03:90:8c:41:cd:
b7:6b:d9:3f:d2:e6:2b:5f:0a:f3:3d:52:67:bd:70:5f:ba:ab:
88:72:8b:48:ed:34:ca:12:df:8e:51:35:41:cc:68:2c:cf:26:
ba:04:2e:12:73:29:71:cf:d5:75:f2:fb:40:df:4b:f8:bc:dd:
7d:c4:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:47 2025 by rpki-client