Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91e81b71-cd52-3e4c-ab21-a6f5ee9e12f8.roa
File: 91e81b71-cd52-3e4c-ab21-a6f5ee9e12f8.roa (raw, json)
Hash identifier: GZvD06t/D1ttRCgNXWxc0d7quU0ft2QObEsHv7eQ7JE=
Subject key identifier: 3F:8C:DF:81:2C:8B:60:A7:F4:C2:B3:17:63:20:8D:48:0D:EA:38:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B4624B2AD0BAE1EED62B100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91e81b71-cd52-3e4c-ab21-a6f5ee9e12f8.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:46:24:b2:ad:0b:ae:1e:ed:62:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=c3f28237-f607-41e5-8b6d-e8b468ac01e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:c7:f8:8f:be:f4:27:fd:59:8c:c2:0a:1d:
59:b6:1d:4e:52:c4:13:bd:86:e2:c4:93:b5:6b:17:
b4:f7:ef:41:6d:a5:04:bc:c3:c9:47:0f:69:74:74:
97:ac:6d:cc:45:51:28:66:ea:04:19:6d:8f:8d:09:
f1:6c:f3:3d:71:d4:86:1e:9e:53:aa:fd:2e:ba:83:
9a:0d:2c:96:b5:6c:52:11:21:36:66:e8:ce:5b:83:
d1:10:81:a5:a9:8e:85:51:98:fb:2f:b9:e1:80:06:
2d:73:67:20:fc:6f:7a:07:62:f6:a1:51:b5:74:11:
e8:44:cc:42:7f:8f:70:b7:28:0e:f4:7b:01:94:03:
a4:4d:c9:4f:b6:82:43:39:62:5d:40:a3:ae:bd:3b:
2e:ac:b5:9e:08:9d:c3:74:fb:1f:20:cc:ec:d2:d6:
23:63:dc:5c:87:c3:c5:62:95:60:28:81:94:3b:39:
85:81:8e:1c:76:c1:66:03:92:1b:b2:bd:2f:f6:a9:
4f:73:27:b3:ef:d6:6a:60:8a:ea:56:53:ed:52:3a:
47:9a:eb:c2:42:eb:18:cd:81:b6:da:e6:a9:06:cc:
5f:94:6c:a6:80:53:f5:f7:9b:05:9c:5e:96:08:98:
c0:10:d1:08:08:1c:54:49:b2:5b:c4:d0:a4:35:f4:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:DF:81:2C:8B:60:A7:F4:C2:B3:17:63:20:8D:48:0D:EA:38:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/91e81b71-cd52-3e4c-ab21-a6f5ee9e12f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ad:1d:fd:24:2f:a0:a3:bd:ea:aa:e6:09:14:7c:1e:5e:f4:
0b:63:59:37:e2:78:01:79:e1:48:9d:b0:91:11:0e:6b:a0:bb:
97:46:c4:5d:12:a0:ac:07:a4:62:db:0c:34:31:11:db:65:b0:
13:8c:47:21:67:65:bf:f5:47:76:0c:3f:50:0c:3f:6a:d9:88:
d9:a2:1d:14:b0:5b:0a:72:97:15:0d:8f:68:8e:8e:9b:e6:fa:
9b:4c:00:6b:c5:7e:cf:87:2d:5f:cc:f5:89:7f:c7:d4:c4:70:
ac:38:fe:34:ee:1f:1c:d7:a0:e2:fc:49:9a:fa:f3:52:f4:e6:
2a:28:95:3b:fd:fa:9c:20:21:6a:f6:9f:05:84:35:b7:d0:15:
9b:d3:09:80:bb:89:1d:09:de:6b:03:7a:af:47:99:aa:2d:a5:
44:22:45:10:e5:d4:de:9f:9b:63:37:be:79:a9:33:b1:05:cb:
06:9b:3e:10:51:d3:ae:67:51:92:ef:66:82:8a:3b:3c:b5:42:
fb:5d:9a:ea:06:94:91:ba:41:6a:35:81:80:c8:8e:fa:ee:f3:
ec:53:55:12:9c:b9:08:b6:75:bd:8a:93:57:e0:b8:6d:bc:5b:
c1:bb:d0:5e:de:b2:e5:08:bc:49:22:8a:3a:56:6a:d8:02:39:
60:e9:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:30:36 2025 by rpki-client