Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ded5e76-d027-3a0b-9382-bf1f7dcebf11.roa
File: 6ded5e76-d027-3a0b-9382-bf1f7dcebf11.roa (raw, json)
Hash identifier: mBDkjo9RAjGaBfQZOYOATosX2TTmj6qRRju19LEYugo=
Subject key identifier: 5C:65:B9:34:2F:CC:3B:6A:37:D0:B3:6F:B4:78:CA:EA:D8:80:5D:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B924AEB776F6EDF3F9258600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ded5e76-d027-3a0b-9382-bf1f7dcebf11.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:24:ae:b7:76:f6:ed:f3:f9:25:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=f99b6c1f-76dc-4049-a8e8-1e0d0fe984eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:fb:dc:fd:b7:6f:ce:7f:5e:77:bd:bf:32:
66:c6:1e:25:79:e0:3c:9c:51:99:56:7c:60:71:93:
57:93:03:e7:84:0a:f0:fb:43:80:f5:d5:ff:d6:64:
cf:6a:e6:9c:ae:2d:e3:26:cb:46:33:76:b4:9a:82:
49:27:97:da:20:a5:36:3f:5f:0f:a0:90:a2:48:73:
26:40:fd:aa:3c:9e:38:7c:78:77:fe:9e:a0:63:ce:
c5:2b:e1:80:33:9f:8d:73:97:ea:52:34:e7:59:8e:
fd:35:dd:1b:be:7a:4c:52:ba:ba:1e:ef:68:6c:77:
4a:68:51:3b:0c:6c:f7:79:20:20:9d:cf:e9:ec:a1:
53:dc:15:23:9e:cf:5d:01:67:32:48:b0:c2:2a:8b:
f4:8e:fa:af:22:24:ad:46:fe:f8:20:dd:ca:d5:93:
28:c2:d1:0e:85:2f:6c:6f:c3:37:15:68:6f:40:7a:
3b:83:f5:0e:d5:f0:18:58:ad:80:d0:35:f7:69:3e:
e4:d8:18:aa:1e:7d:34:ab:0f:ea:2f:d2:2e:26:2c:
b9:70:f1:3a:7f:37:04:fa:f3:62:88:e7:c3:9d:67:
98:10:77:6a:71:8f:ab:79:d9:bf:f9:f3:63:b1:46:
cd:03:e3:fd:88:0e:54:f3:fa:77:05:61:81:db:cf:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:B9:34:2F:CC:3B:6A:37:D0:B3:6F:B4:78:CA:EA:D8:80:5D:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ded5e76-d027-3a0b-9382-bf1f7dcebf11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d8:90:0e:ef:ee:1c:3b:45:39:b5:44:66:09:18:84:20:b5:
f6:1b:13:7e:75:0b:57:02:28:1c:82:06:e0:c4:99:0a:b9:56:
75:71:bb:e8:4b:69:f5:55:18:51:94:8e:cb:3a:4b:4d:b7:7f:
f6:61:15:e1:91:24:1d:08:d9:b6:1f:de:72:c4:f9:45:91:71:
b6:aa:f5:a5:33:5e:f6:ed:46:0d:80:1b:2c:8e:61:7f:90:2a:
5b:b2:28:cb:73:0f:f5:50:b4:5c:d5:6d:8c:86:01:7d:39:99:
ae:62:0f:90:1f:84:72:7c:24:ad:ba:de:fb:36:6e:5d:4f:45:
0d:3c:d7:fa:01:c2:82:34:7f:cc:02:7b:aa:23:bf:6f:50:14:
dc:68:31:ee:c9:3d:6b:7e:b9:05:69:a5:d8:0b:5e:19:e1:ef:
3f:17:e3:b8:1c:80:8b:e4:bd:1b:c5:11:7e:36:f2:12:af:73:
82:2a:a4:49:67:87:b4:16:cb:f7:7e:a7:ee:cc:e8:f9:ed:24:
22:2a:6e:6c:5f:db:59:d7:81:3a:67:b5:4b:09:8f:e2:99:83:
47:40:e5:44:69:ba:a1:b8:15:5c:c8:b0:e7:83:39:ef:85:ab:
81:89:51:10:fa:37:39:27:9c:b6:c3:48:dd:fd:70:f5:6d:f5:
ce:44:bc:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC5JK63dvbt8/klhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNzEyMDAwMFoXDTIzMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Zjk5YjZjMWYtNzZkYy00MDQ5LWE4ZTgtMWUwZDBmZTk4NGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hT73P23b85/Xne9vzJmxh4leeA8nFGZVnxg
cZNXkwPnhArw+0OA9dX/1mTPauacri3jJstGM3a0moJJJ5faIKU2P18PoJCiSHMm
QP2qPJ44fHh3/p6gY87FK+GAM5+Nc5fqUjTnWY79Nd0bvnpMUrq6Hu9obHdKaFE7
DGz3eSAgnc/p7KFT3BUjns9dAWcySLDCKov0jvqvIiStRv74IN3K1ZMowtEOhS9s
b8M3FWhvQHo7g/UO1fAYWK2A0DX3aT7k2BiqHn00qw/qL9IuJiy5cPE6fzcE+vNi
iOfDnWeYEHdqcY+redm/+fNjsUbNA+P9iA5U8/p3BWGB28+UzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFxluTQvzDtqN9Czb7R4yurYgF1NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmRlZDVlNzYtZDAyNy0z
YTBiLTkzODItYmYxZjdkY2ViZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENuAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmdiQDu/uHDtFObVEZgkYhCC19hsTfnULVwIoHIIG4MSZCrlWdXG76Etp
9VUYUZSOyzpLTbd/9mEV4ZEkHQjZth/ecsT5RZFxtqr1pTNe9u1GDYAbLI5hf5Aq
W7Ioy3MP9VC0XNVtjIYBfTmZrmIPkB+Ecnwkrbre+zZuXU9FDTzX+gHCgjR/zAJ7
qiO/b1AU3Ggx7sk9a365BWml2AteGeHvPxfjuByAi+S9G8URfjbyEq9zgiqkSWeH
tBbL936n7szo+e0kIipubF/bWdeBOme1SwmP4pmDR0DlRGm6obgVXMiw54M574Wr
gYlREPo3OSectsNI3f1w9W31zkS8CA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:08 2025 by rpki-client