Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6303dfc4-4bed-36f4-a69e-c96f44b1c643.roa
File: 6303dfc4-4bed-36f4-a69e-c96f44b1c643.roa (raw, json)
Hash identifier: uKf6jqGG977yQSgpUwzE3wiPem9RXmKk8oiiwo3GWuo=
Subject key identifier: EB:AF:0F:26:91:BF:5A:7A:3C:F1:7E:EE:68:33:87:66:2D:74:BA:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8376CB69D832746FE6D50840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6303dfc4-4bed-36f4-a69e-c96f44b1c643.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:76:cb:69:d8:32:74:6f:e6:d5:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=55108f94-8e1f-4614-9432-2566753884a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:41:c3:72:b9:d6:83:5f:38:bb:3f:d1:4d:
26:72:37:83:62:f9:28:75:39:8a:83:0d:63:ae:a9:
7f:eb:8e:e6:8f:12:05:91:a7:87:30:d1:28:a3:20:
3c:b2:29:cb:c7:e5:f0:3e:34:3f:6b:52:7e:2c:ad:
41:b8:61:c1:68:a9:6e:05:dd:6a:bd:1c:35:9d:9a:
ab:b9:2b:62:32:52:6e:fa:fb:30:5b:91:9e:d1:eb:
04:90:24:dc:8d:2e:7c:41:54:78:1d:c0:8d:c0:54:
1a:47:4d:7b:fe:6c:47:a7:88:28:3e:d2:b8:e5:1e:
07:10:03:a9:97:8b:29:20:4e:8d:69:2b:63:38:12:
e2:77:9d:02:f0:e2:a5:96:9c:67:da:5d:3c:07:ca:
7a:fd:6c:a2:ec:45:6c:a6:66:ed:46:1b:7b:70:fc:
7d:81:4a:52:1c:44:1a:53:87:67:7d:80:40:a7:f9:
8d:aa:cd:70:1f:df:d5:45:34:df:74:f5:3b:11:e7:
6c:de:74:e0:76:8e:f6:78:00:f9:60:79:b7:4c:e1:
a7:d3:ff:3b:7e:89:4e:20:8d:d9:1b:1f:29:f1:cd:
78:32:f9:95:eb:3e:b7:c6:9e:57:9d:a1:ef:c5:ae:
50:a2:2d:7e:8d:fb:f8:ce:80:e4:d2:a2:4f:cc:ca:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AF:0F:26:91:BF:5A:7A:3C:F1:7E:EE:68:33:87:66:2D:74:BA:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6303dfc4-4bed-36f4-a69e-c96f44b1c643.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:cb:63:69:c3:16:55:d2:91:31:0b:0d:f8:20:e4:74:24:62:
7d:e3:51:ec:52:8f:61:2c:a8:b7:c0:28:fd:41:47:90:ce:94:
6c:ad:f3:d2:2f:ca:b0:69:a6:e3:7c:3d:cd:f4:ed:97:2e:30:
c6:94:7b:ff:15:95:42:33:0c:22:2d:45:23:8b:3b:d9:3b:20:
6f:c7:f4:6c:5d:b8:36:2d:3b:4f:61:51:af:23:1d:d9:e2:3c:
f5:30:03:d1:4f:5e:bb:80:6e:14:6a:ab:02:b2:7b:d1:8b:a1:
64:16:ef:66:a7:53:76:61:08:82:78:ce:70:97:ab:18:fe:8e:
2b:c6:d1:11:29:f5:95:2d:3e:be:81:35:97:7f:fd:ed:fd:fd:
8c:1b:af:33:02:e2:fd:65:44:ea:a4:6e:b6:46:64:40:dd:df:
5a:44:4e:60:d3:6b:ed:88:47:a0:28:61:9f:16:4b:ec:9a:39:
f4:ec:3a:b1:cd:a7:7b:e5:47:b7:7f:1c:14:fa:2a:34:ec:71:
a6:eb:66:25:d6:6d:e2:b3:eb:5f:2d:1d:a2:ec:18:d1:16:19:
7f:b7:b4:ec:60:9e:8e:0f:03:d1:40:eb:36:7f:84:da:52:62:
57:91:1c:b9:6b:a0:3a:0d:34:91:24:d0:27:ff:26:2f:49:df:
a8:a1:22:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+Ddstp2DJ0b+bVCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwODEyMDAwMFoXDTIyMTExMzA1MDAwMFowLzEtMCsGA1UEAxMk
NTUxMDhmOTQtOGUxZi00NjE0LTk0MzItMjU2Njc1Mzg4NGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz5Bw3K51oNfOLs/0U0mcjeDYvkodTmKgw1j
rql/647mjxIFkaeHMNEooyA8sinLx+XwPjQ/a1J+LK1BuGHBaKluBd1qvRw1nZqr
uStiMlJu+vswW5Ge0esEkCTcjS58QVR4HcCNwFQaR017/mxHp4goPtK45R4HEAOp
l4spIE6NaStjOBLid50C8OKllpxn2l08B8p6/Wyi7EVspmbtRht7cPx9gUpSHEQa
U4dnfYBAp/mNqs1wH9/VRTTfdPU7Eeds3nTgdo72eAD5YHm3TOGn0/87folOII3Z
Gx8p8c14MvmV6z63xp5XnaHvxa5Qoi1+jfv4zoDk0qJPzMqytwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOuvDyaRv1p6PPF+7mgzh2YtdLovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjMwM2RmYzQtNGJlZC0z
NmY0LWE2OWUtYzk2ZjQ0YjFjNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNtwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKstjacMWVdKRMQsN+CDkdCRifeNR7FKPYSyot8Ao/UFHkM6UbK3z0i/K
sGmm43w9zfTtly4wxpR7/xWVQjMMIi1FI4s72Tsgb8f0bF24Ni07T2FRryMd2eI8
9TAD0U9eu4BuFGqrArJ70YuhZBbvZqdTdmEIgnjOcJerGP6OK8bRESn1lS0+voE1
l3/97f39jBuvMwLi/WVE6qRutkZkQN3fWkROYNNr7YhHoChhnxZL7Jo59Ow6sc2n
e+VHt38cFPoqNOxxputmJdZt4rPrXy0douwY0RYZf7e07GCejg8D0UDrNn+E2lJi
V5EcuWugOg00kSTQJ/8mL0nfqKEiYg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:22 2025 by rpki-client