Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/918d5b57-1c30-3d92-b293-c6b0f6f3fcf7.roa
File: 918d5b57-1c30-3d92-b293-c6b0f6f3fcf7.roa (raw, json)
Hash identifier: LmknryW7gPGMSxnht+2RFVVa7TMbhHtOk9FknzKGgRE=
Subject key identifier: 42:6D:8D:FF:7F:3B:85:4E:2E:A1:BF:27:54:83:B9:78:50:4A:93:D3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043A869B0A27E94B9F0284E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/918d5b57-1c30-3d92-b293-c6b0f6f3fcf7.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:a8:69:b0:a2:7e:94:b9:f0:28:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=c5daf121-24e0-4018-b516-7c4246911270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:fb:de:54:ea:f6:e8:3a:9e:83:1e:82:4d:
c5:10:98:5e:f8:3d:1a:55:72:0c:f7:fa:6d:1d:18:
76:60:d0:b8:67:be:08:c9:78:df:f5:70:fe:e6:83:
02:12:e2:52:bf:3d:e2:d4:2b:26:94:46:c4:62:af:
e6:d6:96:b3:d9:8a:0e:5c:4a:0f:f3:35:2c:d3:bd:
1a:a8:ee:68:c3:43:17:b5:f0:f2:a2:7c:65:f0:28:
91:e0:0d:d8:18:8a:ec:4d:37:1e:f4:93:ad:1b:3d:
f0:a6:c6:94:fe:31:57:1a:29:18:82:0b:33:0a:ed:
f5:a2:b4:27:83:9a:5e:7b:ac:35:ca:26:26:a0:d6:
f2:8c:8a:fc:44:b8:50:b1:ac:f9:b9:f3:f7:c4:29:
c6:6f:29:42:46:3d:a3:d8:e1:7d:ab:5e:73:47:0d:
60:4d:29:1e:b3:c2:65:9e:5d:5e:cd:01:4a:8e:b8:
84:f2:6c:26:d3:c6:13:e5:f1:83:87:20:5b:44:83:
cf:ca:31:0c:9f:1b:b0:86:89:52:f9:00:6f:c6:91:
54:7b:2e:42:23:3f:a3:d4:f4:28:4d:20:f7:b8:d3:
1a:43:2f:3c:9a:e8:5b:9a:b1:2d:93:b9:2a:ee:7f:
75:40:bb:6c:1c:46:01:ff:39:68:53:5b:c9:75:46:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:8D:FF:7F:3B:85:4E:2E:A1:BF:27:54:83:B9:78:50:4A:93:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/918d5b57-1c30-3d92-b293-c6b0f6f3fcf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c5:e2:11:31:ee:9a:99:fd:ab:86:c9:7d:4b:fc:af:c1:5b:
72:db:b8:8f:fd:f8:d8:46:6c:71:87:d3:5e:fd:f7:65:f5:7f:
46:34:c0:37:98:a5:de:f7:ff:1f:ef:76:c6:35:6b:34:f1:3a:
bc:04:03:11:cc:3d:89:7b:46:33:51:b8:7c:04:30:33:00:b1:
9c:a7:84:ae:b8:2a:3e:bc:be:30:35:d2:45:33:8a:91:41:52:
9c:3b:13:59:ad:93:23:b0:d6:f3:18:e1:3c:89:9e:17:65:57:
14:4c:83:d9:1f:b9:9d:8f:58:b7:c4:42:b5:ea:40:44:fa:cc:
b4:5a:cb:2d:ae:b3:20:2b:78:90:ce:00:db:f6:ae:ca:43:f2:
40:7d:40:db:14:2f:a7:fd:84:51:65:96:30:18:9e:90:4b:ea:
e9:ba:fd:0e:b3:5c:30:ae:c0:eb:92:b0:92:d6:4a:2d:2a:ba:
35:c1:ba:a9:44:ba:b8:17:17:64:e5:ed:ed:b3:fb:d6:50:a0:
90:f8:f1:32:cd:f6:bc:97:32:0b:fe:ad:ba:83:f1:37:e5:0f:
95:85:69:b8:65:f4:c5:2c:56:ef:71:41:95:49:03:50:b5:68:
54:f1:7f:f0:24:59:19:7e:39:a5:b2:29:7b:dc:fd:4d:b7:7a:
4d:3b:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:25 2025 by rpki-client