Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78df3381-0da8-3f48-980f-5511cb498173.roa
File: 78df3381-0da8-3f48-980f-5511cb498173.roa (raw, json)
Hash identifier: /nJ3r2rTpLWJK6iO5gzJZLRQO6reHImH6SakhW+x4iM=
Subject key identifier: 6E:FB:3A:C9:A5:DA:8A:89:9C:17:32:9E:FD:8D:8C:B3:FF:43:B9:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4308565CAD940E7F4B83780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78df3381-0da8-3f48-980f-5511cb498173.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:30:85:65:ca:d9:40:e7:f4:b8:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=c1b9c476-5e94-4672-b62f-c747035a23eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:4d:d7:56:cf:8f:6f:68:75:60:f4:fc:71:
25:b1:42:81:5d:39:fc:9d:97:88:d0:2d:e4:53:19:
a5:e0:16:db:19:24:91:1c:08:96:dc:31:a1:04:50:
61:32:22:15:ac:44:f8:89:84:3b:11:1b:65:00:1d:
4a:59:b1:5f:72:74:a1:2d:ce:44:47:ae:c2:fd:91:
da:f7:37:67:6f:05:9e:75:e7:09:8a:1b:59:b9:d1:
72:4a:3a:99:73:42:02:ef:91:3d:5d:21:c2:5d:bd:
eb:05:77:55:3c:df:a9:ea:8c:98:d7:ab:79:b9:ef:
5a:dd:26:fe:5a:f7:9c:f7:27:a4:23:46:30:7c:ea:
00:19:68:96:fa:f6:ab:1f:db:87:62:f4:a9:12:77:
61:2d:5e:64:ce:8a:c7:b9:2d:58:11:4c:76:02:0f:
f1:90:81:74:d3:26:f6:b9:ab:2a:65:f0:80:80:d0:
17:ee:8b:84:02:b3:75:27:9c:1a:4e:b5:35:33:01:
42:8a:9e:b2:9d:b1:da:d1:6e:61:4c:70:21:15:c8:
31:fd:a4:58:bc:bc:a0:df:6f:bb:e8:05:bc:a5:eb:
4b:11:8f:7c:ac:12:92:5f:fc:9b:fd:44:51:f2:b8:
e2:4d:b0:99:30:30:e6:d8:30:ad:5d:ba:12:58:91:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:3A:C9:A5:DA:8A:89:9C:17:32:9E:FD:8D:8C:B3:FF:43:B9:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78df3381-0da8-3f48-980f-5511cb498173.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:90:40:bb:63:ff:e7:ea:1d:4f:3f:29:1b:46:88:c0:ed:be:
7c:cc:da:45:ad:41:3d:6f:10:aa:ab:68:dd:d8:7f:55:1b:b1:
83:b4:91:4f:49:16:b3:54:5d:a8:53:d3:3e:48:f8:b6:9f:2c:
47:5d:82:36:bc:df:9e:9d:c4:e0:00:e5:12:8d:b5:da:fc:57:
ed:b8:5e:bc:13:42:2f:94:7f:a6:b0:e7:15:2e:c1:d5:86:19:
24:46:6b:4c:79:fb:52:74:e3:15:b9:59:04:b3:b2:fc:60:4f:
b9:b7:b5:fb:3c:79:c3:59:b0:f9:44:ce:ed:0a:47:ec:a2:ca:
89:51:4f:c6:1f:bd:f1:40:6b:c6:50:30:d9:a1:e5:ed:be:fd:
f9:e8:e8:ce:86:fe:8a:dc:7c:95:ee:e0:49:21:df:ce:de:4d:
2f:bb:c3:47:2b:28:2c:9f:06:20:b8:72:56:e6:90:cd:b4:a0:
5c:1e:b3:b1:22:26:8b:52:e0:c5:df:41:8d:37:96:f0:4a:51:
f6:d4:5a:c0:1e:78:3c:cf:07:13:3e:0b:da:11:d1:ee:10:97:
50:5a:ce:03:3c:18:32:90:d4:8f:08:cc:9e:e4:02:21:82:28:
0a:1a:3a:d9:c8:05:cd:08:dc:a4:3f:9a:bb:95:d3:82:7f:ba:
34:3f:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:50:07 2025 by rpki-client