Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8704c95b-601b-33bf-91c9-0973d9774196.roa
File: 8704c95b-601b-33bf-91c9-0973d9774196.roa (raw, json)
Hash identifier: 03AbR67tTJLpd856EnB4iN0UeuN3EUJQWiYdEP/LexQ=
Subject key identifier: FD:77:C4:ED:AE:7D:BD:BB:CE:A5:B7:10:9E:9D:B3:2C:50:42:22:AE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CDD2C357FF70452CB47DEC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8704c95b-601b-33bf-91c9-0973d9774196.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:dd:2c:35:7f:f7:04:52:cb:47:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=c5f316c7-6ce7-49a5-8638-25850898be91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f1:b9:f9:82:e7:b0:1b:ea:0c:5e:c8:7c:15:
4c:3d:51:51:c2:2d:c9:09:52:b8:e4:c2:80:e1:28:
c8:6a:e8:62:a6:a6:3f:54:e3:c9:27:c5:a2:7b:bb:
57:bf:68:d1:fe:fb:9e:9e:63:e4:65:9f:d3:78:ac:
cd:55:cc:dc:35:e5:6a:12:4a:9c:c3:67:2c:c4:2d:
ce:91:03:09:33:82:5d:da:38:d5:ec:fe:b4:e5:4c:
73:bb:3b:c9:91:bf:98:c6:5d:57:f7:1e:91:12:22:
cd:98:c4:b4:e0:71:33:16:07:7e:aa:a5:50:7c:c7:
04:db:06:f5:f5:e3:71:8d:1b:c1:b5:32:0b:a5:14:
db:86:30:49:40:8d:30:cf:2c:de:01:41:0b:ab:2f:
f2:4b:3d:9e:aa:7f:96:63:5f:b8:bc:f7:0f:f7:06:
20:31:44:f1:90:f0:d0:f0:a4:b6:6f:f6:cb:bc:50:
4a:35:60:da:2a:ad:60:9d:ff:eb:21:1a:eb:32:a1:
dd:ab:af:52:86:27:ed:ef:81:f1:40:31:8f:ad:f1:
dd:de:95:ab:fa:d4:f6:7f:92:6a:df:ae:01:87:56:
05:71:75:6c:ba:36:7c:26:b1:f9:35:51:76:7a:ef:
0e:9c:b9:7c:01:ca:cf:0f:b7:bd:b4:b1:93:af:7f:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:C4:ED:AE:7D:BD:BB:CE:A5:B7:10:9E:9D:B3:2C:50:42:22:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8704c95b-601b-33bf-91c9-0973d9774196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:b8:dc:17:7e:8e:b2:ca:7a:1d:06:13:2d:1f:a1:e8:3b:48:
3a:9b:c5:20:8c:fa:d4:ae:47:05:98:e3:67:a9:6f:9c:28:bc:
04:e5:ca:ae:70:1b:91:10:49:48:e3:1b:fb:79:c0:f9:7a:c5:
9e:62:03:ae:b4:f4:0e:80:74:99:3b:00:ba:ad:7a:c2:00:79:
ab:4a:84:47:53:fe:57:e2:71:04:8b:29:4c:a1:53:97:c6:05:
79:c0:4c:46:0c:10:6e:1a:f0:7f:df:71:51:df:4e:6a:81:7c:
19:a9:e8:dc:fe:41:c6:f7:fc:49:51:83:ef:8a:56:d9:2b:3c:
35:2d:48:1e:ab:ed:00:94:61:22:9e:41:65:44:0b:2f:cc:5a:
ee:21:c3:77:8f:75:c2:06:4c:6a:7e:67:50:09:63:b8:fe:fa:
c0:c5:19:9c:64:ea:14:da:fe:64:95:34:a0:76:6a:41:3b:75:
f3:0d:a9:3d:c0:5f:a3:c9:64:22:c1:d2:0c:14:64:9f:9e:a7:
6f:47:e1:56:37:dd:16:15:01:6d:45:74:2e:44:ab:b3:6f:c2:
e9:79:26:1e:73:dc:2a:41:85:e9:66:b5:08:95:91:b8:95:f7:
98:c5:25:3b:70:71:9c:aa:64:83:36:f4:72:2a:da:fb:40:1e:
0d:2f:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:06 2025 by rpki-client