Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6485396c-5181-3a3b-9f32-8acef8b1e662.roa
File: 6485396c-5181-3a3b-9f32-8acef8b1e662.roa (raw, json)
Hash identifier: bf0QQ2dQT60VKCq5JQc5N9wG3Qbt/6RPvZl3bxNBEYc=
Subject key identifier: F5:C9:AC:23:56:7E:7B:1A:10:9A:6B:11:10:AC:78:A9:B6:2C:37:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32F2E7C5C8CE2D8975782ED8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6485396c-5181-3a3b-9f32-8acef8b1e662.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:f2:e7:c5:c8:ce:2d:89:75:78:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=3c8045f9-6106-4f67-a6dc-0ec68fef9c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:9a:d1:5f:d2:04:16:c5:2d:8c:47:a9:24:
b6:aa:c4:01:bb:22:f9:71:61:2f:89:27:12:09:72:
98:cb:bf:52:85:be:15:15:2e:63:0d:36:4d:89:e3:
47:8f:e6:2c:54:18:57:69:74:db:cb:4d:ab:f6:73:
64:8e:70:a3:d1:6b:fa:da:d5:22:42:12:6f:3c:07:
85:cf:dd:20:8a:18:4e:e7:6d:a2:6e:d2:76:88:10:
2d:39:58:94:f6:18:32:69:a3:af:ed:ce:2e:3f:a0:
bb:c9:58:e7:bc:1b:fa:eb:59:1f:cd:9d:82:78:83:
12:2c:cb:e5:f6:aa:55:97:a4:41:db:3f:a1:b8:d3:
7d:f1:55:c5:5c:b8:e5:0d:c7:7b:b0:3d:43:60:56:
d0:6b:0b:a6:6b:2b:b3:69:68:78:e5:36:c1:22:1c:
fb:27:d7:60:72:9f:53:cd:99:c9:85:3b:f4:de:fa:
82:fa:d6:71:81:80:99:58:87:33:0c:64:a2:94:ce:
34:a2:9b:6c:10:bf:0b:48:db:9c:0c:3f:7e:f6:4e:
39:89:4e:e4:c0:0c:9c:39:e6:6e:4c:c4:8d:af:72:
e6:d9:89:d4:ce:61:74:ef:53:86:3c:d0:59:c4:af:
5d:da:5a:af:7d:80:ae:aa:2e:fb:ff:58:9f:59:c4:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:AC:23:56:7E:7B:1A:10:9A:6B:11:10:AC:78:A9:B6:2C:37:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6485396c-5181-3a3b-9f32-8acef8b1e662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:c7:4d:73:9a:24:c9:e7:be:d6:13:ee:87:b5:e6:4e:e4:97:
f1:e1:9d:78:81:e3:f5:1c:04:ad:50:fb:13:50:a2:a5:0e:50:
95:5f:52:6b:92:dd:9e:34:c0:5b:44:42:5b:eb:ad:39:6c:9f:
29:c5:a6:22:9e:90:e1:e1:24:e7:da:6b:41:62:49:c5:5e:11:
9d:68:ef:89:ae:6a:2e:84:5d:8f:97:d5:17:8a:83:9a:14:d2:
82:89:24:2b:1f:5c:a2:0d:ef:1b:ab:b0:72:2e:76:ea:72:f9:
d1:e3:29:3d:1e:3e:a4:2c:37:cb:df:97:42:47:fd:ee:9d:e2:
b9:2f:a3:c7:28:31:d1:6c:d5:ec:89:fb:38:17:05:31:af:33:
9b:bb:db:d7:1c:8a:2f:04:26:b9:68:04:14:c4:40:8f:28:0e:
0e:05:19:24:48:8b:64:3d:11:c5:d8:a5:27:d7:82:26:a9:27:
bc:e3:e9:fe:43:5e:00:28:1c:4c:c1:b0:c1:ca:6f:10:af:ca:
65:46:37:a6:88:e5:59:b7:ea:81:2a:6b:ad:95:7d:af:53:03:
2c:33:f7:cf:c9:db:05:f2:92:78:92:e3:d7:a7:8d:4e:b0:68:
02:f2:ba:8a:8b:c3:8a:11:c2:f2:d2:98:86:e8:96:5b:20:b1:
e0:37:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:05 2025 by rpki-client