Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a17e57c4-a342-30a8-bf2b-614b825b79e6.roa
File: a17e57c4-a342-30a8-bf2b-614b825b79e6.roa (raw, json)
Hash identifier: enhMnZ/t4MIhT3JK0fMC35Uqrl08OjF0gy5vzY/8H2I=
Subject key identifier: A7:61:44:88:97:03:35:E6:39:A7:12:D9:6B:D6:88:D8:80:45:64:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59F2B4487053533BA1CBD7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a17e57c4-a342-30a8-bf2b-614b825b79e6.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:f2:b4:48:70:53:53:3b:a1:cb:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=3a87bfdc-70e0-45dd-a289-e2fffd22083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:3d:c5:4e:c3:c0:c0:25:19:c8:52:e8:66:
3b:98:3f:43:1a:07:ad:b0:c8:50:31:37:d3:8a:87:
a6:a2:8f:82:f9:41:c2:fe:9a:c6:33:99:bb:c7:a9:
e1:02:f7:0e:0d:ec:65:af:17:ba:8b:a4:c1:24:d3:
8a:79:fb:55:0f:64:76:be:4d:27:d7:c3:0b:68:67:
49:8f:ef:bc:fa:a3:c7:98:6e:fe:cd:c5:62:05:e5:
69:8e:17:73:2a:fe:6c:cd:e6:10:14:e1:ad:29:f2:
eb:78:56:85:70:47:cc:9e:65:e4:d4:bc:79:a4:62:
94:93:be:07:fa:9f:a9:d4:ad:e4:22:cd:b7:f6:7b:
16:53:f5:f9:86:a8:7d:4f:43:49:6b:36:f6:51:23:
94:79:03:cf:b6:4c:d6:27:21:61:87:97:b3:61:bd:
1e:06:46:de:bb:61:fb:2f:54:31:65:a2:ce:e9:85:
90:56:7d:5d:e1:9f:85:fc:e9:bc:43:9d:df:e7:0e:
f2:2e:b3:a1:ad:d0:e0:48:75:f1:68:27:5d:30:04:
a0:bf:58:9a:fb:e5:83:fc:9a:8e:89:4e:c1:f4:a2:
31:ae:39:31:35:a4:48:5b:a9:c7:a9:b0:f1:f5:f8:
26:c3:59:20:e1:e4:c1:a9:00:47:1d:cd:80:02:99:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:44:88:97:03:35:E6:39:A7:12:D9:6B:D6:88:D8:80:45:64:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a17e57c4-a342-30a8-bf2b-614b825b79e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:7a:43:ae:1e:d9:b5:05:1d:b1:93:11:ac:93:40:3f:6c:42:
91:64:eb:4e:5f:59:60:5f:a9:ab:c8:c9:77:0d:0d:28:c8:90:
71:b0:58:5d:63:30:cb:29:b4:0c:3e:8a:88:5f:c8:9f:11:6f:
63:56:3b:6f:36:50:fd:f7:0c:6b:1b:8b:d1:b0:90:2b:1a:24:
92:6a:a7:69:76:38:a2:7b:d8:09:2a:2f:f7:a7:84:04:fe:32:
60:57:b3:b5:0f:ea:04:dd:51:16:08:35:ff:63:c1:5e:cd:f6:
bd:5c:4a:c2:a3:60:36:38:79:d1:95:85:f2:c2:3a:09:dd:e0:
03:2a:2a:90:19:e3:f3:d8:fc:72:95:5b:15:f3:41:cb:8b:88:
43:40:03:14:87:70:98:8b:2a:6b:65:ff:a1:c2:33:ea:b1:95:
93:5d:8b:0c:49:4c:7c:14:26:67:f9:f3:77:11:ac:41:41:43:
8b:84:45:63:7c:79:96:6e:a6:dd:54:b5:4c:68:50:d8:ef:bc:
1e:0e:f3:56:65:9d:88:8d:43:6d:d1:48:b9:08:9e:8f:63:db:
28:6c:8e:39:2d:1e:cd:c2:4e:b8:75:b2:12:64:ee:5a:7d:a0:
07:35:4c:93:6d:02:16:2e:f8:64:69:fe:8c:9f:db:99:4c:06:
d6:3e:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:21 2025 by rpki-client