Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9725742e-a4c5-31ba-b4fb-2caffad7000b.roa
File: 9725742e-a4c5-31ba-b4fb-2caffad7000b.roa (raw, json)
Hash identifier: 9XpBDikwy/sa9nqJpCLO+AeC76Y6K5wFMYSe/ef/Otg=
Subject key identifier: EB:8C:6A:06:DF:F3:F5:6F:D8:3A:E4:17:D0:CF:D0:D1:21:C3:B0:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E95AC3DEEA32E2853C5F58940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9725742e-a4c5-31ba-b4fb-2caffad7000b.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:95:ac:3d:ee:a3:2e:28:53:c5:f5:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=836c75c6-70ce-4402-8511-cf0c7041e850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:41:35:eb:99:a5:7f:22:d1:f3:fc:eb:78:
92:bb:20:78:09:10:a6:43:4f:9b:42:9a:2b:b6:f8:
78:a4:18:77:28:e9:e3:c4:e9:7f:bd:58:9b:69:ad:
fb:46:86:4d:02:f6:78:92:65:1c:d3:04:16:00:2a:
be:8a:e1:08:56:ff:06:28:11:4c:63:10:a5:81:b1:
92:e9:32:ab:a4:97:60:31:25:dc:a4:3a:ff:14:63:
bf:41:89:25:1d:b1:fe:47:1f:f7:cf:b6:70:c1:24:
c2:b5:f5:aa:d2:d1:69:2c:c8:53:df:1c:94:37:c4:
86:9f:12:fb:05:bc:64:41:6b:d9:49:2b:f0:1e:28:
6d:e8:b7:c9:48:23:7d:4d:cb:99:29:ed:82:6b:a5:
c7:a5:e9:14:d6:4d:0e:e4:25:ed:21:81:e9:2f:ab:
b5:c0:fe:c4:b2:49:2c:3f:1e:27:60:7e:12:48:9f:
3d:ab:98:af:88:c4:7a:f0:0f:a1:b2:61:a0:13:82:
0c:72:44:a0:2a:42:53:1d:aa:be:65:e1:63:95:c4:
fb:2d:8d:59:b7:1d:d4:f6:2d:cd:27:09:f0:12:7a:
71:ec:33:7b:10:86:3e:d4:07:c5:63:cb:6c:2e:78:
d7:1c:75:cb:a9:b8:ec:f7:0f:f4:36:d7:2f:ea:19:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8C:6A:06:DF:F3:F5:6F:D8:3A:E4:17:D0:CF:D0:D1:21:C3:B0:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9725742e-a4c5-31ba-b4fb-2caffad7000b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:61:43:76:10:c0:a3:2a:99:17:fc:be:35:d0:01:7e:83:c7:
69:1f:25:46:37:c6:74:56:a3:a7:b0:43:dc:bf:76:a0:50:3d:
96:6a:6c:62:d4:d9:2e:68:6d:74:d9:74:44:14:9e:26:51:24:
18:0b:fe:29:59:85:fa:a9:32:9f:9e:24:13:89:a5:ad:d0:65:
74:19:1d:67:96:74:8f:0a:38:9b:fe:29:aa:2a:57:d3:82:3f:
f7:15:d3:f7:40:a8:2a:5f:74:32:31:0c:3f:88:ee:25:72:40:
30:04:43:14:e3:a9:d5:e1:f2:29:59:38:ae:81:f0:37:be:56:
52:45:e5:d7:e9:18:8b:f8:12:b8:af:09:a0:59:1f:10:5f:93:
ac:9f:37:20:6c:7a:02:d1:36:26:59:79:3e:70:67:6d:c7:e0:
67:53:10:57:6b:b2:d3:6b:4a:d3:40:52:19:15:03:e4:04:aa:
28:e6:03:87:44:d2:6f:3b:58:de:31:60:52:80:fc:d6:70:89:
74:bd:61:41:5d:cc:45:f7:06:bb:9c:bb:ce:4f:e1:9a:c5:a1:
a6:52:6b:5e:58:fe:c2:72:80:81:0c:d9:13:d5:26:a2:b8:f7:
33:be:ac:9f:78:15:5c:ab:a7:2e:09:2e:fa:2a:5b:17:d3:21:
66:23:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:11:08 2025 by rpki-client