Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91889b31-d11a-320a-9452-9ae9a7b6319b.roa
File: 91889b31-d11a-320a-9452-9ae9a7b6319b.roa (raw, json)
Hash identifier: BWPwJ4FDN+hsGiRRxrGatuuQWcre2NUICr4eD/VZCRE=
Subject key identifier: B8:D6:89:71:4F:18:99:E9:56:73:7D:87:B6:67:67:4A:A4:0F:E3:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F150BB5329B97877D6F0B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91889b31-d11a-320a-9452-9ae9a7b6319b.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:15:0b:b5:32:9b:97:87:7d:6f:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=662ceb05-ebe9-4dd1-be93-5730dea65a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:d0:bd:d5:ac:b6:4d:22:61:4f:45:47:55:
2e:91:13:fb:0c:bd:b9:46:f8:4e:f7:d7:c9:bd:b5:
5c:d7:5a:19:a5:0f:22:1c:b8:c5:58:7e:06:ac:82:
23:9d:a2:ba:1b:45:1d:5e:74:95:63:b4:59:ec:e0:
0f:49:c8:72:d2:f3:8e:10:aa:b5:d3:7d:f4:63:9b:
14:40:5c:bd:b6:d7:01:dd:d5:ea:8d:c7:ad:7c:0a:
59:c6:f1:cf:ad:ce:d1:62:f3:10:71:1e:a5:a5:58:
a9:f0:84:64:5e:91:44:50:48:8d:54:15:8a:22:f6:
9e:a9:94:0a:a2:85:2b:e4:84:f6:7b:7a:11:f0:cf:
5e:a6:4a:8f:ba:b7:ca:ff:4e:82:d5:ed:f0:f7:57:
49:b6:c1:ce:26:b4:99:02:41:74:4c:8e:6c:21:5c:
8a:a3:dc:25:bd:ec:a2:9f:00:24:5d:35:4a:07:55:
64:b0:49:e6:44:1a:9a:c2:5e:ca:c9:08:e0:8e:42:
58:14:0e:ed:7b:f2:83:c7:87:8a:17:51:12:cd:7a:
af:57:14:ed:bc:d2:b1:54:37:61:d0:37:76:2c:7a:
b0:c3:80:14:5c:04:34:c5:2f:0b:ee:39:11:3e:e0:
4a:fd:01:11:e2:12:09:c9:b2:80:60:8f:50:62:f5:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D6:89:71:4F:18:99:E9:56:73:7D:87:B6:67:67:4A:A4:0F:E3:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91889b31-d11a-320a-9452-9ae9a7b6319b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ed:94:90:44:d2:b6:03:da:70:a5:46:44:17:41:e9:ff:bc:
16:df:38:1a:e0:3b:9b:4e:4f:32:17:22:bb:5f:9b:84:55:68:
a1:fb:2f:49:b8:63:c6:98:60:08:c1:40:16:29:1c:a6:81:ea:
f6:98:44:da:21:ea:6c:33:ea:a7:d0:04:a8:b7:b2:14:1f:f6:
7b:32:59:0d:7d:57:f0:ab:d6:ed:a6:1d:04:45:c6:a6:1f:d8:
79:3e:ce:98:49:a9:c1:ee:39:67:76:91:9b:c3:70:f7:b4:34:
22:6a:88:79:b1:f5:e8:3b:87:64:93:dd:26:d2:84:7f:6a:e3:
34:04:a1:c3:4b:80:08:2d:a6:95:91:71:69:ea:27:c6:54:83:
5b:14:4b:f9:4a:fc:ef:2a:e7:a1:57:ea:71:da:29:1d:fd:dd:
eb:61:15:09:96:18:5d:e9:c2:c6:55:58:53:e0:35:e5:ed:6b:
0f:83:f1:9d:34:18:2a:e7:38:06:00:84:3f:11:c6:2d:6e:fc:
26:cf:97:85:06:09:38:b0:37:94:c3:90:3d:32:d9:db:0d:41:
4a:dd:d9:ec:e5:24:d6:21:c3:d8:43:4b:f4:78:37:6d:2b:d0:
e5:7d:1c:c5:cd:28:d7:70:fb:bb:cc:ad:cb:e1:aa:d2:74:54:
c4:cb:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:25 2025 by rpki-client