Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42d68e9a-0992-38cc-921f-468eee1111a5.roa
File: 42d68e9a-0992-38cc-921f-468eee1111a5.roa (raw, json)
Hash identifier: 2sP/ZzvTan4Xvsw3eBsOIZ3/Z09WrqhzciN7CZo1DvY=
Subject key identifier: 4D:D3:0D:87:10:CE:5C:39:6B:34:A5:1E:28:7C:0C:D9:32:EC:DB:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE8D059CB572BEC4C20F8080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42d68e9a-0992-38cc-921f-468eee1111a5.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:8d:05:9c:b5:72:be:c4:c2:0f:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=841e42c0-858c-4294-b8b6-5dcc2b0c1048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:90:5a:2e:14:84:9d:ee:0a:c3:44:21:d2:
05:27:a8:0c:c8:4b:bb:38:40:81:f2:0f:cb:ac:56:
80:a7:e2:19:a3:1c:70:86:a7:c5:3e:85:65:71:69:
29:5b:d2:42:85:9d:0b:ae:43:e0:48:c2:14:75:51:
eb:c0:6f:57:31:af:91:fc:76:fd:ab:93:ed:64:64:
4e:c4:6d:8b:2a:e2:cb:fa:9b:e2:2e:74:dd:59:c1:
0d:f0:63:8c:e1:77:b2:7c:80:7f:df:a6:71:4f:2c:
26:5a:4a:2e:5c:d6:f6:c9:42:c8:92:e5:66:75:f4:
4a:88:f9:a7:89:17:7e:7f:1b:c7:ae:16:d4:43:44:
dd:de:9d:27:58:9a:e7:cf:5a:f8:b1:bf:13:61:30:
0b:2f:e5:09:cd:8c:32:ad:42:e8:a6:45:aa:40:f7:
7a:c6:15:d6:3b:cc:30:f1:e4:2b:fc:03:8e:9f:c9:
70:d3:27:16:cb:32:0e:02:fa:00:bd:0a:62:8d:e9:
b2:d2:7e:b7:55:7b:78:6a:28:4a:52:13:0e:47:98:
5a:8f:c1:9b:ff:6d:dc:bc:45:1d:26:f5:1e:f3:63:
9b:a6:19:87:38:21:cc:eb:18:d7:8b:a8:58:9c:eb:
6c:1a:31:76:0a:d2:b3:ea:a3:9c:c6:d6:d3:78:18:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:0D:87:10:CE:5C:39:6B:34:A5:1E:28:7C:0C:D9:32:EC:DB:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42d68e9a-0992-38cc-921f-468eee1111a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:e3:11:17:00:b8:d4:8e:79:12:a7:c7:ac:41:c9:73:ca:5f:
1b:38:15:f9:83:6a:7b:b5:e8:14:89:56:10:2a:a2:c3:d0:5a:
9c:c9:14:71:b9:bd:de:db:21:b7:81:bf:4a:48:cc:ef:64:62:
c4:ea:12:00:d0:94:c2:10:70:f2:a7:0b:f5:f1:01:22:e2:4c:
8c:0d:b8:c0:cf:81:c0:8b:80:26:76:01:52:e5:ff:ef:c6:4a:
62:e8:c9:a8:b9:c2:89:5b:6a:85:86:a3:c4:25:e4:33:b9:b8:
b9:52:ff:26:ff:56:95:99:14:3d:1c:c8:3b:3f:62:1f:70:34:
b2:09:d8:06:10:1a:dc:a6:4a:00:a7:09:9b:42:a2:71:dc:f7:
69:b9:e6:bd:2b:7b:cb:c8:f8:4a:10:7c:c5:04:14:08:d5:8f:
bb:14:33:f9:0d:ae:70:f1:e3:88:c4:d7:6c:19:75:80:35:85:
0c:4b:8b:13:70:4e:0a:0e:11:d0:fe:5e:4e:52:11:b2:fd:c1:
20:26:c2:04:44:a8:45:17:10:6f:c6:4a:4b:a8:59:da:19:fa:
c2:60:bd:8e:e5:cf:3b:3a:d5:1d:59:0a:65:e2:bd:4a:56:71:
e6:df:24:0b:01:16:b7:4f:5d:66:de:76:30:12:44:42:26:e2:
8a:7a:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:14 2025 by rpki-client