Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bdc2f7e-a430-3683-8f84-41394e23cc8c.roa
File: 7bdc2f7e-a430-3683-8f84-41394e23cc8c.roa (raw, json)
Hash identifier: uUEZJnqt1YDrMajkeUI9+ts5Mkp3OCZ33/6o84Iup8Q=
Subject key identifier: D1:1E:7F:98:AC:1D:59:D7:60:5B:89:DF:B1:91:2F:20:25:99:E0:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4309006955B6194771D6C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bdc2f7e-a430-3683-8f84-41394e23cc8c.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:30:90:06:95:5b:61:94:77:1d:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=40f6aa04-5e26-4130-912c-90b7ee659707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:11:21:eb:c6:d9:8d:86:60:79:1b:7c:4f:
0c:69:a8:cf:bc:5c:2c:ca:6c:ca:99:3b:22:ce:db:
65:fc:93:5e:9d:fc:77:0b:d1:14:4d:cd:36:1f:84:
4d:61:6a:af:a2:72:83:2a:fa:78:b4:61:24:81:47:
77:3e:ca:80:e9:03:51:aa:bc:e3:21:d2:d2:1a:64:
60:84:7e:11:14:81:61:65:0b:f4:b0:d4:b7:48:64:
72:b9:26:f9:01:59:aa:b9:20:4b:21:85:8c:fa:74:
69:ae:5b:5e:e4:a7:23:29:b6:bf:24:b6:e2:3f:2e:
c1:7f:5d:1f:7c:6b:ac:f1:5c:ab:d8:5b:fd:e4:6a:
05:2f:ff:2d:20:0f:c3:70:ad:07:a6:fe:d5:46:09:
34:62:cc:f8:12:e9:43:99:bd:1f:35:f5:f3:ce:a4:
95:1c:b4:08:52:9e:c0:ae:a6:48:7b:c0:2d:38:51:
d7:08:34:37:33:d1:f9:33:16:34:02:1a:28:b4:98:
8b:ab:34:6d:1f:32:2e:5f:7c:fe:4f:c6:e2:fe:cb:
7b:02:2c:8c:65:3f:93:77:24:34:1d:5a:62:2f:bc:
5b:1a:a4:73:a4:f8:b8:1c:bc:59:b4:80:69:88:60:
d4:fc:c1:ae:54:bf:21:ef:27:16:7c:34:f7:57:1f:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:7F:98:AC:1D:59:D7:60:5B:89:DF:B1:91:2F:20:25:99:E0:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bdc2f7e-a430-3683-8f84-41394e23cc8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:58:56:10:63:86:61:0b:af:64:10:4b:ff:a8:96:5b:d5:76:
1c:15:73:04:04:88:2e:b0:fc:2b:03:06:41:04:73:2d:20:1d:
da:0c:3d:cf:d2:d4:8e:7d:20:ef:f9:f9:78:9b:e1:bb:6f:9f:
09:98:96:68:dd:b8:93:df:71:5a:13:84:ba:a2:23:89:fb:88:
b0:75:f2:8b:5d:5d:a1:2e:98:b4:20:36:3d:70:ba:a0:40:5a:
f2:16:3e:f8:25:5a:9d:bc:68:ea:0a:c3:a4:6f:7f:ef:2d:3d:
aa:20:d3:30:2c:2a:67:d9:6a:ef:e7:3d:11:a2:05:35:ee:42:
0c:0d:53:3b:8b:d1:e1:ed:7e:3f:69:06:1a:21:e4:d9:08:74:
22:81:07:bc:71:f4:22:f1:25:d9:f0:ae:6b:f7:72:2c:24:8f:
ba:1e:0c:81:73:0f:82:53:d3:c8:c5:70:8b:61:1f:49:c7:08:
87:3d:30:05:3e:be:31:d3:85:e9:ad:d3:49:e8:c4:4b:67:04:
69:7e:58:c8:7e:17:2f:67:44:67:51:9b:2e:90:39:31:e2:a6:
2a:75:2e:94:7b:1e:e7:c4:74:a0:c0:d3:37:f0:84:fa:61:fe:
b8:88:66:74:e7:42:80:3d:be:17:55:c1:7b:ea:36:98:ff:59:
79:4e:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:26:39 2025 by rpki-client