Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e07eab-6e5d-349c-908f-ed62e46836d5.roa
File: 65e07eab-6e5d-349c-908f-ed62e46836d5.roa (raw, json)
Hash identifier: E5s7tGQF1fz8IzozDA6eJswV4Y9XoGfRmAisLGC9ZKQ=
Subject key identifier: E7:05:9E:70:1C:05:52:24:A0:38:A6:5D:68:96:8E:C6:C6:84:D0:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6E8F065FA58C36FF64EA0D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e07eab-6e5d-349c-908f-ed62e46836d5.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:8f:06:5f:a5:8c:36:ff:64:ea:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=cc6122de-4c61-4aa8-8ade-b8e275c36498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:0f:2e:3f:bc:43:27:db:2a:75:c5:72:4b:
ea:49:a8:3a:17:24:d8:85:72:b0:ec:ed:e3:d1:32:
60:2a:d0:67:48:2f:c4:aa:32:f7:e1:a4:f7:21:e9:
3a:41:01:0b:dc:ef:f4:5b:5e:01:93:a6:3d:de:a5:
35:29:1d:49:f2:38:88:d2:ee:0c:dd:eb:12:bb:32:
fc:3a:dd:97:0c:0a:24:23:33:67:b7:56:bd:22:c6:
14:e9:53:1f:38:a2:54:a4:27:4c:6e:cb:b4:06:17:
b1:e9:5f:25:c0:11:fb:15:ee:72:be:93:48:17:7e:
f2:d9:95:84:e5:70:b6:4a:ac:a2:07:1e:8f:5e:a2:
f7:83:e4:f7:f9:d5:07:6a:b5:b3:ee:0c:08:43:d4:
5b:b1:9c:3b:ad:5b:c1:0a:63:2e:18:e4:75:08:ea:
e1:8b:22:22:7e:35:dd:e9:a2:cd:2e:f5:9d:02:b5:
41:cd:fc:8f:ff:e3:bb:ef:bd:1f:43:be:ae:b2:28:
b0:ae:e5:7f:94:6b:96:1d:28:aa:d4:fe:c5:d8:cb:
31:e7:e8:26:b8:49:73:df:31:80:ea:1f:aa:29:47:
19:8f:16:fb:69:03:cd:e4:71:71:57:08:66:8b:94:
42:66:f0:d8:51:16:25:f7:4e:29:7f:9a:ad:5c:92:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:05:9E:70:1C:05:52:24:A0:38:A6:5D:68:96:8E:C6:C6:84:D0:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e07eab-6e5d-349c-908f-ed62e46836d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7b:7b:13:45:f2:fa:32:f1:02:6e:bb:53:77:ae:c0:97:ab:
7f:05:5b:1d:a4:87:31:a6:ab:e8:a1:58:4c:5f:b7:93:b6:1a:
d0:b8:1f:c2:79:27:2d:8f:62:1d:51:f9:05:8a:2e:79:b9:7b:
dd:50:44:a9:37:bd:d5:f6:f3:b4:c3:57:b3:62:94:8c:4e:32:
4d:9a:93:3b:1b:44:28:42:15:ef:f4:71:d3:3b:ea:92:db:15:
c7:e7:3b:fe:c6:09:0e:83:7e:d0:04:44:4a:dc:50:aa:2f:dd:
b9:ae:a5:42:8f:c3:4b:db:a9:9e:c6:21:ea:a3:48:fe:5b:dd:
6a:12:cb:c2:f5:09:ed:61:1a:ac:87:65:34:05:82:48:5f:a6:
a8:90:7d:b3:32:a0:12:ba:dd:0f:ce:05:4b:e7:a3:79:8d:e8:
fe:c6:12:70:94:d0:47:73:66:5d:7d:54:71:49:f2:1d:74:60:
39:5f:00:b3:04:95:15:3d:9d:c2:1d:ef:e9:7b:eb:10:ab:e3:
7f:71:2f:9f:ce:2c:41:81:a1:78:26:6e:de:3c:79:06:0b:35:
6f:30:9a:60:0a:f0:94:7a:7b:c0:de:5d:60:d6:a6:5f:98:f7:
7e:4f:36:90:84:50:46:74:ba:83:a2:36:af:c2:ad:5c:44:fb:
e0:28:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:54 2025 by rpki-client