Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec2fa48-c787-3aaf-804d-ca835397a522.roa
File: 3ec2fa48-c787-3aaf-804d-ca835397a522.roa (raw, json)
Hash identifier: tdNNprd6BoSdn4A2n8TpT8UtxhgYlkzMKOcqkJDhTOk=
Subject key identifier: AE:58:09:C8:67:69:D5:EE:A6:83:9D:DA:B6:4B:E7:BA:BB:4A:74:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F53297C1436CD8EB6719E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec2fa48-c787-3aaf-804d-ca835397a522.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:53:29:7c:14:36:cd:8e:b6:71:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=93990074-9bf0-4e01-90c7-f2196e23eab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:79:75:ef:3f:1c:36:dd:96:48:76:28:10:
c1:ce:24:9f:84:c9:d2:20:bf:5e:f6:34:c6:c2:10:
7c:b6:71:95:4b:2f:ce:b6:d1:f9:c9:81:de:57:98:
5e:2c:88:90:f3:df:f8:dd:7e:fc:9f:6d:db:68:c2:
e7:1e:74:8b:0f:07:76:a1:7f:b5:f6:17:70:ec:6f:
5e:8c:95:62:13:af:8c:b0:62:5e:46:15:f1:c6:6e:
03:69:31:92:65:28:f5:73:93:91:15:99:72:5f:de:
72:61:fa:68:04:3d:c6:ee:bd:99:4d:ec:3b:82:11:
72:e6:9f:3a:e5:ee:a1:ca:90:66:61:2c:b7:f4:9d:
07:bf:fc:10:4d:43:b4:2e:79:43:84:67:3c:c3:e5:
23:4c:ca:b3:6b:ee:fc:9d:5b:a9:2a:3c:e7:38:77:
18:e1:42:7b:f5:38:b0:b3:b0:b5:7d:ca:15:5b:76:
ec:e5:6b:7b:35:fc:6a:fe:56:fd:8c:2a:18:75:6d:
c2:9c:41:7b:cb:17:02:27:2f:50:42:f4:cc:c7:47:
8e:18:de:fe:90:3c:c9:1a:2d:4c:b2:17:41:1a:88:
0a:db:95:dd:26:22:10:19:6e:78:13:6a:20:e6:22:
e0:7b:52:de:38:51:91:d1:55:0b:2e:da:78:ad:ba:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:09:C8:67:69:D5:EE:A6:83:9D:DA:B6:4B:E7:BA:BB:4A:74:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec2fa48-c787-3aaf-804d-ca835397a522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:0d:b7:ac:2b:5c:a6:50:15:4b:a9:f0:bc:f5:b3:f2:28:95:
59:ed:87:6b:6d:ea:44:a3:74:ed:73:01:9a:6f:d3:c4:05:31:
29:cb:74:de:90:06:fa:3a:bf:d6:ac:50:f6:3d:30:9e:9d:89:
fe:95:fe:8e:93:89:ca:08:01:b5:1b:ae:71:34:2b:cf:b7:99:
eb:a2:cc:16:90:6c:d5:67:9b:66:d1:d1:eb:57:46:11:56:91:
da:67:e7:94:76:4f:2c:af:91:33:7c:a9:e2:13:d1:8f:85:53:
21:6e:f9:90:4d:0e:d9:c5:0c:74:49:ac:36:ea:c5:a6:51:34:
eb:45:f8:38:0f:9f:4b:85:7a:ae:c7:a5:12:f9:de:d3:2b:3b:
72:fe:53:c3:2c:84:05:6b:29:47:8b:a0:8f:08:2d:95:f1:51:
c9:d8:dd:49:58:c9:60:13:68:94:83:ba:9b:06:4c:c8:7b:86:
ad:94:78:d7:26:92:9d:57:47:21:cf:97:62:77:b9:c7:fb:e1:
0a:fd:64:d6:2d:87:04:21:7a:da:37:c1:82:7f:fb:dc:6e:8c:
b1:14:29:54:7f:59:f1:4b:13:04:3d:cb:06:9b:9e:81:89:66:
8d:8b:d3:f9:9e:f4:89:cd:61:9f:3a:cb:36:f6:f9:7f:6f:a2:
19:71:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:12 2025 by rpki-client