Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85ee9017-cf18-3d60-a917-4459eab7175e.roa
File: 85ee9017-cf18-3d60-a917-4459eab7175e.roa (raw, json)
Hash identifier: fwz9D64lJhGbU2KK8cZgZibLCCVQrx/XKRkTcN8GE7I=
Subject key identifier: 65:48:AA:13:E1:C4:25:59:E8:8C:8F:D2:07:8A:6D:32:D9:F5:4B:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406AF9B2338AAC0605C3415840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85ee9017-cf18-3d60-a917-4459eab7175e.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:f9:b2:33:8a:ac:06:05:c3:41:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=0e76bb79-d8ae-4787-807b-516c6b212971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:f1:ba:82:a0:4b:2e:af:3f:b2:9a:0b:e0:
fa:87:bc:8d:78:45:1d:d1:b5:f5:5e:fb:0f:50:e5:
4f:09:74:01:4f:4d:55:7d:d4:9f:57:61:6a:d1:3c:
a0:71:ac:b0:66:c7:d2:32:42:e2:5b:da:74:29:1f:
a4:8f:9d:15:f2:e5:d6:b2:c5:97:04:05:54:5a:d1:
01:f8:68:05:fa:99:28:b0:5b:f1:54:df:df:6d:50:
f2:68:48:df:0f:30:b9:41:5e:aa:55:cb:38:ed:9d:
2a:10:95:3f:50:08:d7:95:bc:18:28:e1:ff:ab:c1:
39:8d:9a:93:03:26:b1:1d:60:19:96:12:4f:e8:17:
dc:05:87:b9:5b:2f:96:cf:87:4a:0e:0c:04:f5:65:
d6:b5:01:43:b4:54:5b:5b:54:7f:f9:9f:3c:e3:44:
a3:9e:79:3e:c2:f1:0f:11:3a:15:ca:c9:a4:96:54:
05:1a:ea:e9:14:0d:8f:a5:46:80:78:d2:25:29:f7:
a4:b0:77:b8:e5:82:0d:81:87:01:c4:c9:44:d3:e1:
c3:df:ea:64:ae:23:bc:db:a5:78:b7:0c:e8:f0:92:
d1:78:2f:5c:7d:42:a6:10:6b:85:0f:08:15:48:3d:
9c:46:0e:6e:03:1c:d1:52:1d:cc:55:ed:ac:1e:f2:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:AA:13:E1:C4:25:59:E8:8C:8F:D2:07:8A:6D:32:D9:F5:4B:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85ee9017-cf18-3d60-a917-4459eab7175e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:22:71:73:ba:9b:5e:2e:95:1c:1d:c0:3f:f6:0b:15:31:b3:
20:7d:09:03:b9:a4:d8:67:77:c6:d4:e7:a5:1d:28:15:0a:0a:
af:22:fe:ae:d5:a1:4e:41:53:77:fa:89:45:85:e1:d2:e4:9e:
8e:83:d7:e0:52:72:7f:36:8b:29:b5:4b:75:c4:4d:0a:6c:9e:
7c:7c:a7:de:29:97:9a:50:f1:c3:a5:73:0a:71:83:b3:6e:ab:
74:83:fa:8b:c4:8b:0a:e9:9a:b4:5d:73:cb:e8:81:fc:63:b1:
2e:d3:aa:0e:7f:77:93:9a:f1:54:ca:0e:d7:a9:31:48:20:44:
f7:3a:f1:1f:dd:08:64:02:0e:10:32:4f:75:d2:54:dd:3b:5f:
bf:f9:a4:b0:64:1e:01:e5:70:d7:51:f3:07:f6:83:4f:24:19:
8a:90:d1:ce:dd:53:98:e8:59:b1:d2:9b:6a:da:45:da:f7:0c:
f9:31:a8:67:53:53:a8:b0:b1:0d:cb:e5:05:81:fa:1f:2e:de:
8f:82:b6:01:2c:fc:e8:a6:52:c0:e6:dc:70:4f:fe:e9:7a:d0:
d7:fc:29:d5:35:9d:3f:2a:fd:f0:06:6e:ca:72:bc:6a:2a:81:
bc:36:11:2d:98:e6:ab:81:48:d9:0a:c9:41:90:c7:f5:93:bf:
aa:fc:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:08 2025 by rpki-client