Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0f60ac-5942-3559-8947-24d6feafe678.roa
File: 5e0f60ac-5942-3559-8947-24d6feafe678.roa (raw, json)
Hash identifier: pKBFOkyGIjkx8iJPWq2rqxZRZVHwS4tsWLa37Pk+kcs=
Subject key identifier: 02:4A:B5:CB:06:68:2F:79:6B:D2:FD:8A:84:DE:15:44:52:D8:11:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4295745C59769630D31D580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0f60ac-5942-3559-8947-24d6feafe678.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.64.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:29:57:45:c5:97:69:63:0d:31:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=2413ebff-bb32-4a70-b832-021abce64e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:38:82:6e:8b:e8:d7:a1:ac:99:48:21:3f:
92:5c:9d:c1:86:34:02:d6:09:14:a9:bb:cd:e9:2f:
af:ea:70:5c:fd:43:1e:10:98:67:a1:e8:67:88:b4:
50:c5:0f:aa:42:36:de:b7:1c:53:ec:36:64:5f:c8:
90:cf:24:b4:cf:e2:26:93:c9:ff:0e:6d:43:78:6a:
a2:cd:52:72:e0:08:7d:2a:87:7b:ed:03:bc:71:1c:
fd:d0:a8:4a:3c:c5:f8:29:03:a3:4e:cd:6c:af:9a:
68:c2:96:82:47:04:19:21:67:76:9e:89:d4:12:ff:
b5:c2:94:03:9e:4b:4d:08:3e:3d:81:52:5b:a4:9b:
b6:4f:91:d2:eb:e5:67:aa:f7:43:eb:61:8f:24:e5:
d7:31:71:44:f3:90:c3:0a:9b:9c:89:35:f0:da:a8:
48:a1:09:37:3f:63:17:58:70:0c:6e:08:d1:d5:cb:
7a:a0:1b:2f:d1:59:ca:1f:ec:4f:a5:5f:35:ca:29:
78:08:63:cf:30:51:d1:45:4f:6f:94:e3:8b:02:ee:
97:98:0d:d3:9a:55:6c:90:53:34:d7:03:4b:b5:b6:
d7:c4:4e:ef:57:30:0a:dc:7a:1e:c3:b5:f6:01:73:
dd:a1:7b:63:0f:03:5c:21:6e:56:fd:69:d3:7f:53:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:B5:CB:06:68:2F:79:6B:D2:FD:8A:84:DE:15:44:52:D8:11:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0f60ac-5942-3559-8947-24d6feafe678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.64.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:70:5b:c4:37:3a:ff:39:7c:6b:52:17:99:74:7a:d7:bf:28:
ff:32:b9:c8:36:e8:8c:47:c6:51:52:5b:63:ce:29:4a:4f:68:
5e:92:fc:d9:bf:8b:af:4e:c5:c7:9d:74:22:59:f4:a0:7e:ce:
4b:71:a3:04:9e:b2:19:a9:91:21:52:22:3a:b3:2f:ea:9f:c8:
7e:55:ce:1b:f9:60:8c:d0:d8:df:6d:cc:b6:3a:29:81:72:51:
23:98:21:1d:7e:68:82:e9:34:a8:0a:37:fa:0b:eb:ec:8f:20:
bb:d5:49:6c:09:4e:53:b1:0f:b0:88:4a:8c:20:b2:1d:e6:f6:
69:93:b2:f4:c8:a8:0d:72:23:4d:a3:08:5c:b5:a3:5a:12:43:
0b:a4:2c:53:56:0c:72:51:f9:a7:0c:dc:1f:3a:30:49:7d:8a:
7d:9a:45:2b:dd:3f:c6:8d:d9:16:6d:a6:18:29:f4:16:0b:46:
b0:53:41:76:88:c9:cd:70:a1:68:37:d2:74:ab:5d:96:b4:1b:
c9:05:4f:05:9d:af:61:ea:6c:85:0e:0f:b5:73:a1:72:79:a3:
59:ee:d4:0a:d5:16:d8:96:8a:60:71:85:bc:7f:11:8d:05:19:
3d:57:51:78:64:12:e6:9d:ed:1a:69:6f:e6:9c:bb:50:48:b9:
75:a3:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:38:50 2025 by rpki-client