Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/439b5dd6-08c1-3fc9-ae95-677dee1022c0.roa
File: 439b5dd6-08c1-3fc9-ae95-677dee1022c0.roa (raw, json)
Hash identifier: XmNnP3cu/cs0bsdQ93rCXH0FE5t0MuotMMjXVDlgzdU=
Subject key identifier: 62:6E:BD:72:89:1E:4F:ED:17:CE:FD:59:A1:94:FE:1D:BB:E0:BC:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6ED20FF5B6AF564D4809C200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/439b5dd6-08c1-3fc9-ae95-677dee1022c0.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:d2:0f:f5:b6:af:56:4d:48:09:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=10ba01f7-f2dc-4b73-8e45-bcb9aa21584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:84:8e:41:24:7d:c5:97:71:10:1e:24:99:
6e:43:ec:7b:9e:f6:4e:87:a0:2a:56:cb:67:57:09:
96:9e:e8:d8:38:5c:38:bf:90:a8:0a:27:cd:e0:81:
db:93:c5:4f:08:d7:1c:80:c7:24:1b:8b:59:8d:be:
11:c0:6d:97:4d:26:eb:97:91:38:0f:47:67:ef:f5:
e1:91:97:a6:22:59:46:aa:a2:68:31:e3:2a:de:1d:
6a:16:b4:07:e0:30:ec:ba:b1:ec:7b:22:9e:37:6a:
0e:83:44:0c:75:35:9f:0b:04:18:84:5d:8a:95:8f:
d5:56:e8:70:53:52:ae:13:dd:cc:d4:79:19:be:56:
3f:90:5b:71:d8:02:88:47:f4:7c:64:61:a2:2f:9a:
12:b4:aa:18:61:ed:41:2e:66:50:88:cd:ff:4e:c0:
01:cb:50:26:8d:5d:27:e4:9c:dd:25:f6:a8:c4:5c:
a5:c3:97:61:e9:42:ed:59:e5:e5:fe:73:f6:d1:9e:
21:e2:4e:00:e9:55:f9:71:c2:25:78:79:8b:dd:0a:
9f:e8:0f:a0:1b:96:c7:ff:87:70:d6:69:81:9b:8a:
38:7d:60:59:95:d3:7a:b4:17:70:a9:21:54:44:49:
e6:45:25:56:63:08:b3:ac:9f:b2:5b:f4:2f:f6:74:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:BD:72:89:1E:4F:ED:17:CE:FD:59:A1:94:FE:1D:BB:E0:BC:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/439b5dd6-08c1-3fc9-ae95-677dee1022c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:67:03:bf:c8:bd:35:5e:c1:60:48:bb:38:40:0c:79:05:3e:
f6:14:33:9d:b2:f4:86:8a:b8:56:97:29:89:5d:3b:48:9d:93:
7a:11:5e:6b:13:25:4c:b9:1c:84:2c:ad:ac:81:84:1f:06:54:
62:0e:19:5d:22:6d:aa:7c:3b:ab:c6:b3:3e:ef:a3:c1:55:14:
f0:c3:f7:2f:62:d6:3e:69:b1:e1:e4:8e:a4:f2:d9:ba:f6:24:
1b:32:2d:ca:c9:3d:fd:de:9a:a1:fe:c0:36:8e:ef:a4:47:1b:
4b:2c:40:d2:2a:c7:b7:a1:a3:5b:b4:1f:53:2b:77:e9:d1:46:
11:72:e0:51:5b:05:e1:6f:f0:78:3d:cc:66:b1:3b:5c:77:98:
38:eb:10:58:85:9e:f3:20:fd:54:1a:fd:33:9e:40:26:c0:1f:
3b:19:ba:71:fa:d6:a8:16:fa:57:f4:f6:2c:92:39:36:bb:c0:
55:7f:8b:66:3a:a0:b3:a0:68:fb:07:2c:4c:8f:ff:2f:8a:22:
5a:12:3f:56:1f:21:91:9d:a2:53:4a:ce:4b:b7:70:63:ff:48:
8f:d9:c5:91:3a:7f:28:76:9e:fb:03:8e:b2:44:2d:c7:e7:24:
ca:42:3b:75:50:97:c7:82:22:78:43:2d:5f:f6:3e:79:d8:06:
e2:7b:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:48 2025 by rpki-client