Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4159814a-c058-3e23-a24d-f87c9ba94a6d.roa
File: 4159814a-c058-3e23-a24d-f87c9ba94a6d.roa (raw, json)
Hash identifier: cJpl+e8GCKw408b7GbVIMqk1ogP3kLvtpru2O1mIwHY=
Subject key identifier: B2:18:AA:31:D2:11:E4:80:1B:68:75:63:75:87:05:B5:EB:A4:5E:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BB8108B3B95ACB984949700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4159814a-c058-3e23-a24d-f87c9ba94a6d.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:b8:10:8b:3b:95:ac:b9:84:94:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=7d317a2a-56a4-4bcb-92b2-73f63197c5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:75:ef:86:d0:44:8d:9d:8d:b7:56:de:6a:
70:ab:37:c8:8d:7e:de:e5:d7:ee:07:8f:83:04:bb:
65:34:8a:12:93:53:92:44:6e:80:b5:a7:b4:46:1f:
5c:f9:09:07:ba:ca:32:06:bf:49:01:23:e1:b4:e2:
16:3d:ac:df:01:27:70:e9:ba:4d:de:01:2e:5a:fc:
bf:d0:b4:43:a3:e8:85:78:35:29:c5:b4:a7:aa:1b:
a6:9b:a7:6c:0b:24:39:81:95:6b:13:3b:ef:53:c5:
4d:cd:6f:56:a1:51:ae:50:77:2a:01:aa:4a:9c:29:
8a:96:1f:5f:ca:49:7a:35:e3:4e:30:c1:75:35:f7:
bf:9c:56:01:50:44:d4:db:10:b1:69:b1:02:4d:8b:
90:d0:1d:c0:5e:93:70:17:6c:a8:5d:96:bd:40:92:
e1:1f:0e:fe:87:90:e7:e0:6b:8c:3e:5f:36:f1:6f:
7d:aa:46:1a:d6:9c:56:e6:b8:53:4a:6e:5f:13:2b:
5d:a9:4b:e2:a9:98:a2:80:95:a3:b1:84:73:bd:3c:
97:d1:5a:a6:03:b8:ee:f4:89:2b:3e:51:b9:69:9c:
2a:00:88:ce:55:46:36:a2:aa:d5:e7:19:a8:0b:8a:
15:bc:d5:ae:9c:0d:e6:b1:df:07:49:0f:5e:da:a9:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:AA:31:D2:11:E4:80:1B:68:75:63:75:87:05:B5:EB:A4:5E:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4159814a-c058-3e23-a24d-f87c9ba94a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5a:f0:35:36:ca:bd:b0:d6:e7:01:79:5c:36:12:60:b7:90:
e8:25:a2:1c:00:25:bc:88:77:3e:4a:74:e3:db:8f:c3:93:97:
97:db:49:c2:28:1c:98:b2:ca:66:ed:4f:c7:76:8f:a8:d8:be:
2d:b0:92:88:27:16:34:20:2c:81:70:d5:20:e4:99:28:37:ff:
70:d2:d2:3f:6d:56:5a:fd:ac:32:3a:48:4e:fd:f5:28:ce:e0:
6b:7c:c6:a5:25:48:9f:2a:0e:e7:1c:40:50:ae:6c:57:60:a5:
45:1c:15:e7:29:6f:ce:1e:6c:72:92:5c:1f:b8:ac:85:f3:a7:
ee:ad:06:f9:ad:3c:55:24:fe:03:0e:36:09:c4:2d:95:47:12:
f9:9e:0a:b9:eb:c7:c6:f7:7d:bb:c4:96:ec:14:76:d0:a4:f5:
59:55:ed:0b:d4:53:a6:60:1c:71:50:13:3b:24:ea:a1:f6:40:
2e:c5:72:55:54:bc:9f:bb:b6:82:ca:7c:76:1b:36:d1:b0:cb:
84:27:12:ce:9a:30:e5:2e:2b:82:1d:04:e9:81:c8:0e:09:58:
bd:d8:82:ff:02:4c:08:61:42:2d:94:61:c8:33:70:30:5f:7f:
bc:57:24:e9:86:36:6c:4e:2d:bd:77:14:7b:d6:5f:59:09:52:
af:59:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:48 2025 by rpki-client