Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e109ed-15f9-3334-adeb-bf4321166d87.roa
File: 65e109ed-15f9-3334-adeb-bf4321166d87.roa (raw, json)
Hash identifier: Ty45nOWEsPcQnJ8+WVD8OrYM0VAZW7MELJmQrwJquMs=
Subject key identifier: 6B:9D:D9:E5:08:33:BA:43:93:E3:3F:1E:BC:C7:46:2C:57:E3:1E:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD1A20A7833CBEF5241CCCBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e109ed-15f9-3334-adeb-bf4321166d87.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:a2:0a:78:33:cb:ef:52:41:cc:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=49319548-c2dc-41a7-87d7-2b504dd3fc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:93:da:20:90:f5:cf:ed:35:04:4f:74:f5:
67:e1:42:2c:2b:2f:e0:32:73:de:c8:e2:fd:9f:53:
fe:81:9a:5d:dc:e7:36:40:56:55:be:13:27:0b:ca:
d5:96:3e:ad:a3:7d:39:da:49:d3:18:67:2f:6a:7e:
5c:bc:8a:54:df:a1:09:f4:3a:a0:ea:5c:68:65:5a:
79:0e:61:09:a9:73:ad:21:99:4f:a7:b6:06:03:55:
a7:8a:0b:e6:0f:b5:12:88:91:63:10:59:8a:03:6a:
8f:47:12:d1:2c:93:f1:8f:d2:69:75:f3:1d:b8:53:
e6:1a:9a:cd:f1:c1:69:56:14:bd:15:e0:6d:81:21:
47:e0:34:b5:69:40:93:5b:16:0c:ac:d2:26:6f:77:
c2:36:ed:8b:3c:1e:e7:22:1d:00:cb:31:82:6e:ea:
e6:ef:20:cb:b7:88:f1:78:f2:4d:ac:16:ef:14:2c:
bf:64:4e:91:f3:c6:e7:d3:35:bf:dc:b8:eb:1a:1f:
47:93:fa:41:a3:30:9b:c2:10:05:fc:85:ff:a1:ce:
50:a7:13:ab:ba:f4:dc:cd:7e:0b:38:13:da:58:df:
9f:7f:e0:ac:46:2a:c5:1e:6c:1e:0d:ef:c3:2e:ba:
9a:fb:8a:db:3c:99:89:bb:28:1f:43:16:2a:90:23:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:D9:E5:08:33:BA:43:93:E3:3F:1E:BC:C7:46:2C:57:E3:1E:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65e109ed-15f9-3334-adeb-bf4321166d87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:56:76:21:56:e5:49:89:5e:56:42:bf:ef:31:82:8a:b8:0c:
48:59:01:ff:8a:7b:5a:f6:54:42:a7:ed:0d:0f:ee:c4:c9:2c:
6e:a3:ba:d0:d0:1e:2b:0f:82:e7:e9:e2:bc:a3:3a:72:f8:d9:
83:0a:c3:a8:4a:34:16:9f:95:76:c7:d1:be:fa:0b:2b:a5:0a:
c2:25:55:39:e4:18:71:3f:cc:2f:d1:2e:c8:f9:64:5b:39:ec:
42:c2:de:b0:6e:06:12:b1:88:e6:4c:b9:cf:a5:82:af:43:e7:
f3:61:76:09:ac:9d:49:74:e4:f0:d5:b1:87:4e:fa:76:1b:54:
b2:99:67:4c:88:0c:6e:b0:5e:53:69:fd:07:0d:6e:50:49:d9:
03:80:ab:d7:2f:fd:df:40:47:db:8f:6d:6b:56:08:9f:b7:da:
dd:5d:8f:35:05:d9:31:f6:95:ee:6a:8d:ae:34:74:14:bd:a7:
79:2a:f3:b6:02:ec:f6:23:7f:c8:4b:46:cd:bf:8b:69:e5:e7:
d0:2d:f6:17:68:17:4d:68:06:8b:6e:c7:a8:cc:0f:5e:f1:8a:
07:24:ff:0a:a9:59:e7:e1:10:40:44:fe:37:bd:75:25:8b:ac:
31:7f:36:21:0d:9b:42:8d:fc:a2:50:5b:8b:89:a8:fb:b6:e9:
11:d1:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:09 2025 by rpki-client