Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d80107c-55c6-3875-a9f4-c028e9d9f12b.roa
File: 4d80107c-55c6-3875-a9f4-c028e9d9f12b.roa (raw, json)
Hash identifier: p4MgExxHKJecohExTFj+8a5sKznY6zK2JE0fNIEcP34=
Subject key identifier: 9F:01:9B:36:A3:CC:AD:12:BD:5F:A0:44:5D:CD:4D:4F:AD:D1:97:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD8D16EFA0EB725251D3A280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d80107c-55c6-3875-a9f4-c028e9d9f12b.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.64.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:8d:16:ef:a0:eb:72:52:51:d3:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=d846a854-7c2a-4c4c-b862-915e2f11c347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:10:2c:38:db:f1:f4:57:dd:0f:34:3f:7a:
ba:9b:71:0c:e5:98:43:7a:33:ba:06:6f:cf:e6:d8:
03:b7:1a:74:7e:b2:19:b7:a7:9f:45:a7:4b:87:ac:
22:08:78:c5:b5:c7:98:cb:e1:a0:97:a2:f5:83:35:
fa:49:1a:23:49:ba:4f:5e:19:27:b5:ac:33:2f:7b:
ad:cf:2e:ba:4f:a9:62:20:42:48:9d:6f:e0:30:3f:
41:5c:9f:8e:fc:ec:c5:0f:bd:b4:bd:35:80:bd:94:
23:a7:f0:91:b1:5e:b7:1d:3b:b3:d1:9b:86:0f:6e:
ac:5f:a2:3b:fa:a1:6b:c5:75:ed:0c:e1:4e:e2:4f:
3b:05:b4:40:8e:2d:53:0b:65:1b:2c:e7:58:89:67:
be:57:dd:c1:af:34:7d:f4:9f:e6:2a:e2:af:1f:35:
59:dc:55:18:10:78:d1:db:2d:79:e3:d8:6a:fc:25:
bd:22:25:5a:23:4d:6b:85:86:34:43:67:67:54:dc:
71:b9:aa:ae:db:38:7a:2b:09:0b:f6:d3:e3:47:42:
72:a4:68:b1:a0:98:fa:ac:d5:ac:50:25:de:29:b2:
76:22:5e:56:8f:3d:15:7a:16:d1:c8:2b:e1:0c:eb:
1e:0b:7d:a8:97:a0:4c:29:e3:3b:e2:d9:f8:e5:78:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:9B:36:A3:CC:AD:12:BD:5F:A0:44:5D:CD:4D:4F:AD:D1:97:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d80107c-55c6-3875-a9f4-c028e9d9f12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.64.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:43:ee:77:5a:56:7c:d9:a8:0c:fb:18:d6:aa:16:d8:38:b1:
73:2e:4c:67:ba:72:a6:c2:82:c4:3a:a3:75:fe:7c:e3:30:c8:
8b:f8:be:ad:0a:9d:95:8f:ec:ea:6a:9f:1a:49:90:8b:b8:d6:
26:b6:37:26:ee:7d:d9:ce:73:7e:03:d7:41:7c:ff:3e:94:84:
e9:95:bc:cf:d2:d5:d0:ad:68:69:63:c6:77:f8:08:60:d2:f4:
76:e6:ed:17:eb:85:ae:06:cb:3d:58:c2:45:4d:7f:e4:61:e6:
dd:17:31:eb:bd:23:bb:a2:12:b7:4f:8d:92:19:9b:e4:2e:46:
0e:d4:df:11:68:2b:8f:7f:1d:27:36:ef:0c:ef:58:c8:db:63:
e5:ce:c7:19:7d:20:1f:ec:3f:e6:29:c6:69:d9:79:af:dc:01:
6e:73:b5:e0:b3:4e:f6:39:ca:6a:bc:77:9e:7a:b7:b7:58:d5:
44:e6:0e:eb:1a:cb:a3:b4:4f:0c:21:17:6c:3b:fd:9b:c4:45:
93:d9:7f:f4:99:1f:74:a7:e0:f6:50:e7:1c:06:ba:0b:7a:63:
d6:87:b7:b3:fe:9b:f1:24:d6:34:03:56:53:83:e3:71:15:07:
f8:ab:8e:ad:44:13:9a:64:9a:02:89:3e:4c:b8:4c:e0:2e:4b:
83:e6:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:32 2025 by rpki-client