Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73a7a6ed-0186-3687-9c89-951e1da44b33.roa
File: 73a7a6ed-0186-3687-9c89-951e1da44b33.roa (raw, json)
Hash identifier: 78tAtdXVQUPg6l46rYQH6OdoqLAfqKCD988gxsFIPFg=
Subject key identifier: E6:5C:1B:18:46:57:5C:E3:C5:5D:EB:A3:C7:B7:F6:3B:BE:04:BF:A1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD1754CD3093CDB377DA16240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73a7a6ed-0186-3687-9c89-951e1da44b33.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:75:4c:d3:09:3c:db:37:7d:a1:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=47dbaf47-46ca-4e20-958c-1048622129c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:98:58:9c:99:5d:e3:12:e7:26:e6:22:b5:
b8:f6:7e:83:3f:a9:69:71:36:d3:2d:db:ff:77:15:
9d:02:e8:0d:5a:79:ac:c0:66:81:48:5a:5a:34:3e:
5b:39:f2:fe:35:6b:9b:0f:84:06:b9:96:27:fe:81:
2c:d3:11:84:b6:b5:51:51:61:ec:c7:c5:d5:58:c0:
5f:04:0b:15:3c:dd:29:f5:8b:bb:3c:f7:d5:c6:63:
f1:d2:f9:c3:46:6e:01:e2:e4:fa:c5:36:5c:ca:a5:
f7:9f:a3:ce:63:ae:56:45:7a:51:a6:3e:2e:4b:1e:
d3:8c:dc:d4:3e:8d:3a:8c:5a:77:fe:af:2f:ca:09:
a8:c2:73:60:aa:d9:c9:e9:ac:c6:39:32:cd:db:d0:
54:82:c6:3d:a2:0a:0d:01:83:8e:9e:f7:9a:a9:8b:
eb:c6:cb:a2:f5:7a:92:fc:51:3e:c6:bf:48:96:ab:
c6:fb:8b:87:a4:ae:d9:71:2c:e3:28:92:65:11:24:
a5:d5:1a:dc:6b:ae:49:15:62:81:d8:80:ec:cb:d1:
6c:9a:6f:a3:a0:45:09:db:74:8f:3d:17:3b:80:24:
e1:21:71:55:90:57:a1:c6:62:0d:6e:db:da:4f:03:
92:ac:c6:10:2a:eb:e8:94:69:c1:19:03:6a:92:11:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:1B:18:46:57:5C:E3:C5:5D:EB:A3:C7:B7:F6:3B:BE:04:BF:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73a7a6ed-0186-3687-9c89-951e1da44b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:2a:c7:a1:55:c1:71:76:de:14:0e:bb:ef:14:cc:c4:73:41:
97:05:94:78:17:7f:24:1f:53:74:d5:eb:d0:95:55:b2:5f:8e:
1a:88:8a:c9:63:b4:0b:61:1b:17:1d:95:7f:ee:57:e0:5c:81:
db:a5:9b:1e:80:60:fe:1c:32:ee:4f:b0:3b:65:c0:d5:69:df:
dc:63:e2:a3:53:ce:6c:59:2c:f0:78:0c:ea:6c:85:ea:53:1c:
36:66:52:77:fd:1f:48:2a:04:05:95:a2:f4:b5:2d:fe:42:cd:
06:31:f9:76:50:f9:04:c3:d9:67:f6:97:d9:bb:b4:21:9e:a5:
71:80:84:55:27:10:02:24:90:f8:c8:1a:0d:b0:fa:f1:3d:6a:
72:f8:5f:25:67:c0:bf:3a:33:5a:df:97:3f:bc:3b:de:2d:c8:
8e:9c:c4:0f:05:18:7d:1f:b5:00:e9:9a:f0:52:6b:95:b3:0c:
92:45:b1:2e:c0:1b:da:36:5b:55:42:de:a6:65:1b:fc:5f:4a:
8f:ff:56:11:9a:2c:94:a9:5a:a5:e0:81:19:a7:4b:07:f0:df:
83:c8:1e:c3:52:8e:49:c3:a2:10:dd:cf:74:cf:0d:e7:63:e0:
a6:8f:db:50:d2:01:c1:ef:3c:cd:5e:1a:3d:9f:64:68:b8:8c:
52:89:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:51:51 2025 by rpki-client