Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64021a95-cbc5-38b9-aef2-6f6458f41976.roa
File: 64021a95-cbc5-38b9-aef2-6f6458f41976.roa (raw, json)
Hash identifier: xRgdpSryjrB3Pabq31HI3QKdU5QM39Y+ghv0zC3LDjM=
Subject key identifier: 17:9E:27:1E:AB:BE:1E:03:C4:42:61:4F:87:24:DA:37:AB:67:63:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4A9DB4BD047433729C6C680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64021a95-cbc5-38b9-aef2-6f6458f41976.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:a9:db:4b:d0:47:43:37:29:c6:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=27cc976e-d647-4fa6-8fe4-8a1cbd740415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:85:d7:b0:eb:52:6b:db:b0:af:b2:2f:6d:
d6:1e:2f:dc:0a:56:0f:5b:4d:80:92:c8:df:d3:43:
95:26:14:9a:01:38:05:e1:e4:b5:91:e7:db:d3:9f:
b2:dd:e9:ce:ea:8e:d8:a6:c0:d3:6a:52:33:95:b9:
cd:1d:78:b0:79:e5:7a:b8:18:af:3a:31:91:08:09:
88:21:ca:0e:aa:94:01:a2:e4:fb:7d:c0:0b:11:78:
58:89:ba:d3:9e:5b:c1:3c:3b:3e:3f:df:89:93:db:
3f:bd:ee:c0:cb:4f:49:d5:32:bb:6e:bc:00:e9:28:
85:e0:09:73:d2:83:e0:ce:c0:cb:ca:78:f2:25:11:
e9:e0:2b:06:da:ae:43:7a:7c:05:57:61:44:12:62:
bd:44:81:e6:85:90:4d:d1:19:aa:cf:f8:89:c2:31:
60:93:cc:4b:85:bc:c6:c0:85:02:60:03:bc:3c:e8:
33:b6:83:56:54:f6:20:70:f3:80:30:7b:22:71:2c:
b2:67:2a:43:ab:dc:77:81:ae:d4:a3:1c:33:a3:e1:
21:f9:cb:33:20:4c:37:1f:16:9a:33:0c:ce:3d:90:
70:b5:b1:c6:8f:1e:f4:f8:ef:36:fc:c4:8e:9d:2f:
36:aa:84:30:25:2b:96:60:57:13:6c:e1:4e:da:68:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:27:1E:AB:BE:1E:03:C4:42:61:4F:87:24:DA:37:AB:67:63:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64021a95-cbc5-38b9-aef2-6f6458f41976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:d8:12:fd:9e:f6:8f:5a:29:ae:3e:83:3a:3a:a8:96:fe:15:
c4:30:ac:3c:83:24:40:94:eb:00:a3:dc:95:f8:ed:ff:88:67:
a5:de:6b:89:d1:80:fe:4b:c1:16:5e:15:a3:f3:b3:32:96:0a:
e6:9f:97:8a:6a:bb:f4:1e:37:98:42:7d:63:a0:62:2d:db:dc:
82:60:8a:fa:4b:40:fe:43:a7:42:4e:ac:a3:96:49:22:8b:38:
3d:e8:7f:a4:25:23:d5:c5:e8:93:fc:66:21:41:86:c2:9c:f6:
fe:14:aa:19:d1:ce:f9:e0:f6:81:94:93:31:0b:54:2b:64:ca:
91:45:0c:28:9a:2f:64:90:cd:02:46:8c:76:2b:f2:e9:6a:fd:
4a:ec:14:f0:55:cb:cc:9a:f3:a6:a1:0f:76:74:7c:15:e3:48:
85:c7:20:7d:db:63:0f:d8:c2:8b:fe:ad:0c:21:74:68:67:8b:
c8:f5:30:d6:62:2e:5c:50:ea:49:30:ad:7d:4e:c6:42:3a:fa:
4b:90:f9:eb:31:1a:b5:2d:83:ec:c7:ae:ac:9f:98:e3:aa:e6:
cf:6a:92:a5:18:4f:cc:0f:91:ff:fa:56:5f:2a:4a:8c:79:21:
3d:9b:78:90:90:3b:a5:35:9e:09:31:8f:bb:02:b5:2a:a6:4c:
78:e4:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:23 2025 by rpki-client