Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5aa085a8-d5a0-33a5-9b73-b0b8fae1cdb2.roa
File: 5aa085a8-d5a0-33a5-9b73-b0b8fae1cdb2.roa (raw, json)
Hash identifier: 0uSG7NOJsLZf25kOAez6HXwgUE5XTNY2pcGF+/gBw5k=
Subject key identifier: F5:B4:A6:04:03:4E:FD:1F:91:E6:5D:3A:CD:D8:06:23:2D:F7:08:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32D5C8844D767D7F97403570
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5aa085a8-d5a0-33a5-9b73-b0b8fae1cdb2.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:d5:c8:84:4d:76:7d:7f:97:40:35:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=313f238c-1a90-4d8d-a361-e22ed0b50f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:e9:e1:79:c0:77:90:06:24:1e:98:5b:8c:
a2:7f:1e:42:05:2d:6f:b9:2a:e4:7e:b6:3a:bf:8c:
27:f1:48:a7:47:c4:18:49:45:26:d2:4e:e4:b6:20:
6f:99:8e:5d:23:c9:f4:86:f8:0f:16:52:4d:17:9d:
cb:2c:b6:be:68:7d:a0:d2:11:c9:a6:74:a8:ba:ac:
a9:68:91:a9:00:04:a4:55:ac:72:8d:64:22:49:58:
44:5b:22:7e:fd:62:99:24:f2:d1:66:d3:9f:02:c5:
02:5b:21:41:fd:9b:aa:22:bf:00:ed:a1:9f:96:33:
6d:88:a4:04:01:0c:83:8f:f0:66:ee:b0:5f:29:f3:
09:75:f3:8b:f2:38:53:03:cd:61:7a:fb:0c:47:32:
ec:dc:f5:33:ec:60:65:cf:a4:aa:39:a3:aa:c9:37:
1a:af:83:2b:4b:f8:bf:29:58:3d:da:b6:29:d6:c9:
0d:4c:8b:eb:bb:bf:06:73:60:06:f3:b7:36:81:99:
0f:d6:39:56:7b:0a:6c:12:35:d2:3a:23:fb:b8:51:
a9:5f:88:f9:b4:66:c0:ad:9f:ee:68:9f:55:a1:46:
7c:8c:de:6e:5f:66:dd:e3:7b:38:1a:0e:1f:ec:00:
83:80:7c:3e:be:63:3c:ab:d4:5d:cd:14:51:b2:c5:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:A6:04:03:4E:FD:1F:91:E6:5D:3A:CD:D8:06:23:2D:F7:08:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5aa085a8-d5a0-33a5-9b73-b0b8fae1cdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:50:eb:f0:ed:8f:4e:00:a2:c3:4b:be:31:fd:88:86:d3:7f:
92:93:7c:11:5a:bf:58:fe:3a:5d:ca:27:92:f9:8a:ad:8b:39:
81:e0:b2:af:e7:62:ff:ff:95:8d:fd:17:31:47:43:0b:f7:84:
76:e9:25:95:2f:06:df:cc:39:cb:0d:37:e3:4b:73:11:2d:a0:
3a:97:cd:5f:73:ff:12:36:b9:b8:77:4f:c4:08:c1:b6:4d:bb:
7e:41:b1:a5:65:29:24:e4:03:7e:6b:3d:d2:6c:c3:19:b3:35:
7e:26:cd:41:51:07:68:b7:1c:c7:0b:fe:1d:87:06:b3:13:5c:
3c:dc:c3:ee:86:6e:b7:12:88:27:bc:c6:90:44:36:11:16:9d:
cd:4b:c8:09:8d:d8:1a:24:b3:34:a2:c3:fd:53:67:6d:7c:b7:
54:2c:ec:65:c7:44:9b:7b:05:da:02:34:39:a1:59:ad:59:d1:
4b:9d:62:00:4d:87:24:7d:59:48:c8:73:3f:eb:c3:a4:7f:55:
23:64:7a:79:f1:e3:66:7c:ac:25:a5:67:16:6e:1b:de:33:59:
7d:b3:09:07:bf:db:be:0e:4b:46:ff:94:03:96:33:a6:f6:5d:
c2:58:65:07:54:57:da:fe:be:21:d7:94:3e:7e:c7:d1:f5:6d:
b5:ae:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:08 2025 by rpki-client