Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9634869b-2d7d-395a-a528-f8ad31f19690.roa
File: 9634869b-2d7d-395a-a528-f8ad31f19690.roa (raw, json)
Hash identifier: RBRnW0vgb/k23ZKl56I8QwJvmm9mWeiB2V/ieFeYb1k=
Subject key identifier: 8D:7E:DE:FF:06:1C:F7:9F:22:34:B6:DA:88:A3:57:F0:35:32:A2:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F44B8E6D332C5B0C09DD580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9634869b-2d7d-395a-a528-f8ad31f19690.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:44:b8:e6:d3:32:c5:b0:c0:9d:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=620585fb-770a-40f2-ab75-8c199754fbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:e4:4a:51:9f:fb:27:9e:c4:1d:71:cd:e7:
17:d0:bd:3d:76:79:27:d2:5a:dc:6e:3c:ee:c8:21:
12:f0:39:f2:cd:ff:93:1e:30:10:fa:25:6e:00:6d:
6c:12:65:39:0c:19:1a:1a:fd:3a:12:2e:2b:9f:07:
f4:43:90:84:f2:5a:b2:76:01:02:e4:7f:27:8f:4d:
39:ab:e8:c1:e3:4f:64:df:46:cf:fb:5d:fa:e3:0c:
68:ba:4a:00:01:bd:7b:6b:2c:be:60:14:ae:3a:3e:
c1:d3:e3:77:d5:4f:01:5a:f3:c4:4f:3f:d0:c1:b1:
92:19:0b:b7:64:6c:43:c3:42:49:13:f7:ad:8e:ae:
27:aa:32:a2:a6:5d:d9:44:45:f3:56:35:c9:0d:25:
35:68:9e:c9:e7:1c:f7:59:67:60:09:2d:ce:74:0d:
88:04:bf:1a:c8:70:c5:b2:fc:1b:d3:33:80:ac:ef:
95:08:11:cb:8a:27:0f:5f:d2:5b:94:be:f3:0b:95:
ca:98:89:f0:c2:6c:08:72:53:e2:3f:5a:39:2f:f5:
7a:91:85:5a:a5:17:2c:6b:88:19:47:f2:82:7a:6e:
5e:f9:a6:eb:2b:39:97:db:1a:3a:a6:d0:4b:65:86:
29:45:ec:6d:fb:5b:9e:6e:e1:b8:d1:bf:1b:67:79:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:DE:FF:06:1C:F7:9F:22:34:B6:DA:88:A3:57:F0:35:32:A2:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9634869b-2d7d-395a-a528-f8ad31f19690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:06:1f:6b:d7:d3:27:3c:49:f7:1f:85:d1:37:3b:c6:e9:b3:
ef:29:b9:2c:1c:39:43:5c:1e:2a:7e:ef:ab:15:b5:de:87:cb:
72:37:7f:8c:98:74:82:60:44:f4:3b:f6:95:58:3d:4c:e2:8f:
9c:28:c0:f0:00:47:23:a6:70:5b:f2:85:c0:93:6f:47:77:c6:
c0:71:7f:5b:96:07:15:9f:8b:18:d1:b2:28:1f:7b:ac:97:d9:
ca:8d:93:da:39:af:dd:89:bd:6c:81:9c:99:f1:37:e1:f9:1e:
c5:84:3f:90:db:f2:11:45:87:34:18:4b:13:57:d3:cf:2a:ad:
4d:91:47:b3:ea:ec:1b:04:7b:7b:24:0e:2c:1f:91:4f:a8:7a:
3e:ec:ce:9d:4c:d4:37:0b:d9:d9:40:79:98:0c:52:43:74:ac:
b1:6c:c4:6f:ff:42:9e:06:f7:06:6a:f6:02:09:8a:7d:82:a6:
db:29:90:b1:43:67:e5:f7:bd:83:87:26:9a:12:22:3b:53:c7:
6a:0e:84:3b:23:59:1e:b9:fe:20:51:38:d8:9b:8f:14:0b:89:
c0:29:93:80:02:3d:3a:26:04:ec:5e:6d:7d:d9:59:23:97:2f:
51:65:c5:5b:3f:c6:fa:fe:3b:c9:0b:41:49:6b:f6:50:e5:bb:
b0:93:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:09 2025 by rpki-client