Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a1a5e8b-f16f-3097-9950-20acedd39b76.roa
File: 9a1a5e8b-f16f-3097-9950-20acedd39b76.roa (raw, json)
Hash identifier: mVhbxBIWjzak0ObKFK3T1NwvCMN8gTS7Fl1QXMRUtXQ=
Subject key identifier: 50:F5:1A:75:EB:21:6E:17:14:75:89:00:78:60:36:38:7F:67:EA:08
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD25E36A7E71675851DDD13A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a1a5e8b-f16f-3097-9950-20acedd39b76.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.64.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:5e:36:a7:e7:16:75:85:1d:dd:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=f2532acf-e5a0-43bc-8110-c9f73b6f0206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:f1:41:ee:ed:8a:59:ee:63:18:25:0b:96:
37:29:08:aa:61:71:c5:2a:a0:c3:39:70:e2:43:44:
9f:2c:6d:c0:03:1c:51:b4:3d:53:22:5f:1d:18:e5:
a1:3f:e7:a9:b1:43:e1:2c:f9:e4:ba:d3:45:ab:e3:
66:4b:03:fc:0b:ef:d5:a2:35:5f:70:0b:24:fb:eb:
46:13:ea:b0:56:82:1b:00:11:61:b5:df:1b:e6:14:
1f:78:58:ec:4b:a7:2f:92:89:8e:83:a6:ba:b1:35:
d7:dc:03:82:bf:a0:a3:9c:de:50:e8:1f:95:05:72:
05:ec:40:df:44:f9:a6:8e:3d:9b:10:e8:90:46:62:
82:1a:fa:bb:9b:fb:25:3b:e3:ff:80:96:ca:4d:de:
c9:6e:04:2b:62:da:fe:19:6b:91:b0:4c:ab:c7:5d:
66:15:17:77:2f:bc:f1:96:cc:2c:89:fa:95:c9:04:
50:b9:16:37:71:ca:42:6f:99:50:6f:7a:25:91:33:
13:ba:7c:bb:db:c5:b1:bc:a7:f5:d5:f3:a6:70:fc:
93:2d:f0:3a:44:51:83:90:f2:5b:36:eb:e4:f4:90:
3e:83:4e:d9:fa:f3:2f:b5:c4:d1:6d:40:2f:54:fb:
4a:f5:e5:56:56:88:70:70:55:35:29:65:3c:f4:4d:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:1A:75:EB:21:6E:17:14:75:89:00:78:60:36:38:7F:67:EA:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a1a5e8b-f16f-3097-9950-20acedd39b76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.64.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d5:7b:50:0c:51:4a:03:c1:18:35:81:04:ee:a1:e8:00:02:
0a:a4:02:4d:4e:80:bb:ed:de:0e:d6:68:b1:ed:8c:70:6a:7d:
97:60:ba:02:13:e5:3a:77:63:12:e7:62:cf:81:e2:a8:52:e4:
e9:0e:32:8d:b0:52:e2:4a:90:13:39:4d:01:91:b8:ce:3b:f4:
ff:48:86:26:5e:ac:ac:b5:d7:da:59:f1:40:bb:95:71:df:80:
dd:cd:36:58:93:7e:fb:d3:c9:37:02:73:71:f0:30:2c:54:0a:
02:fe:13:9a:69:e1:66:3d:de:24:f6:7d:b1:22:ca:ac:ee:13:
06:4f:11:a8:e4:47:0b:fd:71:37:c8:29:51:41:c8:37:2c:2b:
fd:1f:8b:29:6f:5d:ff:98:36:36:f5:59:1c:12:a5:16:eb:00:
28:38:02:e8:2a:32:64:29:df:0b:4b:07:55:cb:67:1d:ab:1d:
c2:c8:93:fa:90:a5:fd:a8:fd:de:29:72:b1:9e:a2:56:c1:f4:
1e:a1:f6:8d:53:92:57:f1:c4:b3:e7:ef:ec:c0:1b:fd:70:19:
0e:86:0f:4e:c3:86:1e:d9:c5:83:a4:af:0c:d8:ba:df:c7:e9:
a2:4c:7e:d0:15:14:22:7c:21:7f:c2:99:55:b4:5d:7b:3b:f3:
06:6e:a1:03
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3SXjan5xZ1hR3dE6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjI1MzJhY2YtZTVhMC00M2JjLTgxMTAtYzlmNzNiNmYwMjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDTxQe7tilnuYxglC5Y3KQiqYXHFKqDDOXDi
Q0SfLG3AAxxRtD1TIl8dGOWhP+epsUPhLPnkutNFq+NmSwP8C+/VojVfcAsk++tG
E+qwVoIbABFhtd8b5hQfeFjsS6cvkomOg6a6sTXX3AOCv6CjnN5Q6B+VBXIF7EDf
RPmmjj2bEOiQRmKCGvq7m/slO+P/gJbKTd7JbgQrYtr+GWuRsEyrx11mFRd3L7zx
lswsifqVyQRQuRY3ccpCb5lQb3olkTMTuny728WxvKf11fOmcPyTLfA6RFGDkPJb
Nuvk9JA+g07Z+vMvtcTRbUAvVPtK9eVWVohwcFU1KWU89E2Y8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFD1GnXrIW4XFHWJAHhgNjh/Z+oIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWExYTVlOGItZjE2Zi0z
MDk3LTk5NTAtMjBhY2VkZDM5Yjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDNkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW9V7UAxRSgPBGDWBBO6h6AACCqQCTU6Au+3eDtZose2McGp9l2C6AhPl
OndjEudiz4HiqFLk6Q4yjbBS4kqQEzlNAZG4zjv0/0iGJl6srLXX2lnxQLuVcd+A
3c02WJN++9PJNwJzcfAwLFQKAv4TmmnhZj3eJPZ9sSLKrO4TBk8RqORHC/1xN8gp
UUHINywr/R+LKW9d/5g2NvVZHBKlFusAKDgC6CoyZCnfC0sHVctnHasdwsiT+pCl
/aj93ilysZ6iVsH0HqH2jVOSV/HEs+fv7MAb/XAZDoYPTsOGHtnFg6SvDNi638fp
okx+0BUUInwhf8KZVbRdezvzBm6hAw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:39 2025 by rpki-client