Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54bc5f0c-ce43-3248-b17d-1e92554bd165.roa
File: 54bc5f0c-ce43-3248-b17d-1e92554bd165.roa (raw, json)
Hash identifier: aSiKlaWxm43s1PhgHYF2IcAxd1cPyfpcxWI5gazC4lI=
Subject key identifier: 32:52:EC:7F:C1:EC:75:79:C9:25:17:EA:BD:CC:E8:FC:32:03:35:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD2659FBC07F53B1F44864200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54bc5f0c-ce43-3248-b17d-1e92554bd165.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:65:9f:bc:07:f5:3b:1f:44:86:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=27f9590c-c1a7-4130-a5f0-98553ffec93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:7f:a1:1c:bc:5f:8e:6e:b4:0a:5f:b8:cb:
64:e5:dc:46:7c:9a:2f:46:f9:4a:c7:04:33:75:ab:
94:eb:94:0d:7f:2a:31:4d:dc:41:95:bb:76:9d:92:
b7:f7:d4:55:40:b8:42:55:73:57:1c:c8:13:0f:c7:
f3:64:40:87:46:6b:08:0f:25:2f:04:13:b0:69:45:
19:c5:7e:65:ac:b4:09:1e:a0:9b:8e:2a:1d:51:97:
3a:3c:25:d4:fd:53:01:bb:22:9c:3c:c9:79:da:2b:
6f:40:48:23:71:41:e7:6a:22:2a:f1:49:0e:7d:fe:
fc:18:26:e9:71:5a:6d:3c:98:cd:be:ce:aa:0d:31:
b5:68:6c:e3:b3:1d:a3:4d:bc:58:f4:67:b0:ef:8c:
83:dd:d3:13:51:ed:21:ef:1e:80:47:ef:b5:ac:e8:
0e:b2:aa:0a:af:39:74:ff:16:d5:13:32:39:f2:49:
fc:5c:ac:09:5d:67:aa:ab:6b:66:6f:bf:da:7c:c8:
60:98:af:63:27:83:89:54:e8:3d:fa:18:e2:39:36:
e9:56:88:57:1e:64:e3:9d:07:ad:0a:37:66:45:92:
10:68:fb:8a:0f:e7:b2:c4:9b:01:32:b9:ed:72:53:
38:0c:51:68:03:ad:14:21:51:f0:82:04:a5:33:ec:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:EC:7F:C1:EC:75:79:C9:25:17:EA:BD:CC:E8:FC:32:03:35:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54bc5f0c-ce43-3248-b17d-1e92554bd165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:09:11:a3:03:eb:57:85:1b:21:b7:8c:de:9c:5e:16:42:f7:
cf:c0:5b:e1:05:90:a8:d5:0f:45:30:44:c2:0a:ce:47:cd:27:
5c:1b:b7:02:ad:33:7f:64:d6:14:f0:a2:8a:8e:36:6f:d4:95:
70:e3:e4:31:9a:6c:2b:9b:70:8e:3f:6d:85:0e:32:ba:28:c8:
69:0f:e0:9f:02:e3:95:f4:21:f1:cc:27:10:2b:51:c2:41:85:
09:4a:85:74:68:8e:6e:90:22:fe:3f:de:a9:e7:1f:7b:de:c0:
13:0d:31:4b:05:83:76:49:2e:23:86:ee:cd:8b:8f:65:ea:58:
ed:0e:60:90:e3:0f:53:f3:f2:69:20:32:d6:d3:d3:0d:d3:33:
aa:da:23:ab:de:b3:c7:64:47:59:6b:3a:d5:4f:d4:31:01:2a:
19:73:c1:b9:bf:9d:b1:eb:0f:b0:a3:bf:10:8c:99:eb:04:49:
fb:d6:7a:8d:3b:b4:88:7a:5f:b6:3c:ca:63:29:ba:94:44:7f:
e2:0a:b1:5c:d0:51:48:72:e6:4e:a8:e6:a2:09:df:13:a0:56:
77:11:73:ca:cd:d1:12:17:79:bf:9b:ce:55:2b:97:63:a0:b5:
7f:c7:15:53:8b:6e:32:11:3e:15:bb:8f:c4:83:9d:d5:d4:36:
1f:29:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:24 2025 by rpki-client