Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56db04ac-ddfc-3e15-878e-49d8e87ffa8b.roa
File: 56db04ac-ddfc-3e15-878e-49d8e87ffa8b.roa (raw, json)
Hash identifier: RRMUIGrXu+gEznHhEI0EB+Q1hdLABIPMsLapEzbyzGk=
Subject key identifier: 22:99:1D:A9:1B:24:88:FC:7A:B5:3F:9D:B7:68:D2:FE:51:A0:4A:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD4F1BEFA7A7F324F32DD780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56db04ac-ddfc-3e15-878e-49d8e87ffa8b.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:4f:1b:ef:a7:a7:f3:24:f3:2d:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=b4aaa657-16d6-4b04-bd56-d8093d7a178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:5c:2b:d9:a4:93:ab:26:0c:0b:41:ab:4c:
66:be:9e:ad:18:3b:d2:90:03:03:0f:c3:72:90:0c:
91:d7:36:a1:6f:08:7f:3d:41:33:4a:7e:4a:b8:a6:
1b:3a:7b:f6:61:9e:54:73:72:0c:fb:6c:63:05:b3:
a1:40:25:e3:26:6e:6d:85:e8:22:2a:19:cd:2c:df:
dc:bc:77:1e:2c:78:36:94:5f:b9:05:f5:60:74:5b:
3f:16:19:7f:08:03:4b:2a:5c:9e:c2:1f:e6:9b:20:
7a:fd:4e:a8:f0:40:30:bb:a2:af:b3:58:47:33:db:
fc:30:4d:38:e9:4c:b1:17:a7:84:77:fa:41:4f:1e:
7a:04:93:46:ce:09:c3:79:75:68:76:eb:24:4d:4b:
fa:58:a6:5f:60:91:52:b7:d5:40:1e:d5:69:3f:a0:
24:91:51:fe:d7:a6:c4:8f:e0:8a:2e:27:ea:be:98:
cc:c8:b0:2c:b2:a2:57:6e:ab:67:03:8e:92:d7:e5:
6f:f7:66:8b:74:3d:8f:64:b0:28:70:7b:53:e6:41:
7d:71:79:f0:2a:a9:c2:6e:a7:81:a3:9a:3c:83:88:
4a:9a:18:3e:be:2b:5c:ef:7e:a7:78:c6:3a:ae:18:
0a:26:db:d7:62:7f:56:b3:e2:ec:43:ca:ba:a1:c2:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:1D:A9:1B:24:88:FC:7A:B5:3F:9D:B7:68:D2:FE:51:A0:4A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/56db04ac-ddfc-3e15-878e-49d8e87ffa8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:b9:56:4d:cd:ba:23:ae:f9:bd:11:c3:dd:b9:8c:35:1b:59:
4e:fc:05:86:1a:ea:79:f9:dd:db:ef:48:e8:82:ac:43:9c:c0:
06:c8:74:03:53:99:a0:3c:1c:d7:ec:d9:0e:4f:28:17:73:51:
d7:26:d2:34:43:61:57:59:3d:73:1e:95:fb:13:ee:80:a6:3c:
a0:ce:ba:e7:ea:3c:ab:a9:b8:5f:0e:1c:cd:7d:aa:01:c4:ee:
7c:48:4b:09:2f:c4:16:b4:0e:3d:10:13:b0:9e:d5:38:62:9a:
cb:12:5b:25:18:b1:40:05:24:53:e1:ef:59:45:e8:33:57:d7:
af:e0:50:a4:15:94:b4:39:3d:a8:78:cd:8a:50:cc:77:ac:b7:
e2:ad:28:dd:45:5b:33:cd:79:9b:ee:f6:4b:2a:f3:15:77:c7:
24:fd:c7:f0:6a:7a:00:0d:6e:ff:66:ca:09:bf:a6:fc:53:bb:
1b:d3:2c:e3:bb:4f:ac:a9:2e:56:fc:b3:1d:31:12:42:88:f5:
a2:59:9a:f1:20:4b:f5:d3:20:e0:e5:2e:41:d1:ce:d1:03:bd:
5b:44:31:fb:21:40:7f:6f:db:21:be:68:0b:d9:47:c4:b9:2f:
5e:d6:7b:87:54:3d:9c:11:27:ff:a5:b6:63:2a:07:86:e1:e2:
cb:55:81:e4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD69Txvvp6fzJPMt14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
YjRhYWE2NTctMTZkNi00YjA0LWJkNTYtZDgwOTNkN2ExNzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeNcK9mkk6smDAtBq0xmvp6tGDvSkAMDD8Ny
kAyR1zahbwh/PUEzSn5KuKYbOnv2YZ5Uc3IM+2xjBbOhQCXjJm5thegiKhnNLN/c
vHceLHg2lF+5BfVgdFs/Fhl/CANLKlyewh/mmyB6/U6o8EAwu6Kvs1hHM9v8ME04
6UyxF6eEd/pBTx56BJNGzgnDeXVoduskTUv6WKZfYJFSt9VAHtVpP6AkkVH+16bE
j+CKLifqvpjMyLAssqJXbqtnA46S1+Vv92aLdD2PZLAocHtT5kF9cXnwKqnCbqeB
o5o8g4hKmhg+vitc736neMY6rhgKJtvXYn9Ws+LsQ8q6ocIXgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCKZHakbJIj8erU/nbdo0v5RoEobMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTZkYjA0YWMtZGRmYy0z
ZTE1LTg3OGUtNDlkOGU4N2ZmYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNtwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAblWTc26I675vRHD3bmMNRtZTvwFhhrqefnd2+9I6IKsQ5zABsh0A1OZ
oDwc1+zZDk8oF3NR1ybSNENhV1k9cx6V+xPugKY8oM665+o8q6m4Xw4czX2qAcTu
fEhLCS/EFrQOPRATsJ7VOGKayxJbJRixQAUkU+HvWUXoM1fXr+BQpBWUtDk9qHjN
ilDMd6y34q0o3UVbM815m+72SyrzFXfHJP3H8Gp6AA1u/2bKCb+m/FO7G9Ms47tP
rKkuVvyzHTESQoj1olma8SBL9dMg4OUuQdHO0QO9W0Qx+yFAf2/bIb5oC9lHxLkv
XtZ7h1Q9nBEn/6W2YyoHhuHiy1WB5A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:44:03 2025 by rpki-client