Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3bea2c2-0e82-3077-9550-bcd6c90e4f9b.roa
File: a3bea2c2-0e82-3077-9550-bcd6c90e4f9b.roa (raw, json)
Hash identifier: Rl+yfXwb974SewmoMK6MOk5cSfV4iY5nZ5hi0twWeC4=
Subject key identifier: D6:B3:1C:B0:22:67:F4:D4:60:CD:37:DD:C8:4C:00:40:5D:EB:63:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA5FAB1636585EFE71694A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3bea2c2-0e82-3077-9550-bcd6c90e4f9b.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:5f:ab:16:36:58:5e:fe:71:69:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=36d1b9a1-8dec-466f-8dd7-6a49f71ae07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:19:ec:f5:19:1f:7c:63:c6:e3:b7:6f:d8:
ec:eb:aa:da:fc:77:e7:6e:db:96:cf:24:99:6c:99:
bb:ac:e4:13:67:e2:2d:ee:b9:03:bd:21:d8:69:bc:
f9:26:2d:78:08:bf:c0:01:aa:db:13:2f:1c:ce:b5:
9a:e0:ce:8e:d9:40:ba:0b:98:e0:2f:f5:7e:ee:bb:
d7:a0:28:15:f1:1b:14:df:c8:0c:84:9a:87:45:d9:
f1:f6:64:af:8c:ea:cc:d5:be:92:cf:80:bd:9d:ef:
df:b8:14:cc:0a:1a:ad:98:8e:91:e3:cb:a5:44:5a:
50:89:77:7f:e1:90:2b:23:8e:64:53:97:2c:5a:44:
0b:23:0d:dd:a6:de:d0:50:b4:f4:79:30:ea:ea:06:
e6:46:89:a9:be:f8:3c:4a:a6:13:5f:af:e2:77:3d:
40:4c:f3:c2:a3:8b:b5:42:db:79:cd:65:d5:f9:0d:
6d:99:3f:e6:e8:44:0e:d6:48:da:42:8f:12:bb:05:
cb:6c:11:d3:88:84:4a:de:77:4c:46:08:5c:32:bc:
86:b2:b2:d4:1f:ad:9e:ba:b8:83:8c:26:f0:bd:ac:
cd:e7:3d:44:17:52:a1:99:54:3d:13:84:af:93:fd:
4c:7a:84:36:1e:ab:a8:5b:0d:48:e4:a8:88:77:1b:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:1C:B0:22:67:F4:D4:60:CD:37:DD:C8:4C:00:40:5D:EB:63:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3bea2c2-0e82-3077-9550-bcd6c90e4f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:69:6e:a8:c9:a3:12:28:c3:72:41:f3:75:ae:af:e3:73:a5:
52:bc:48:98:bb:56:c0:cf:9a:ef:98:ef:6f:33:75:02:6d:c9:
83:c8:13:1f:64:12:20:23:66:b9:e0:f5:7b:64:a7:e8:30:c8:
a4:df:72:4d:d6:29:3c:ac:45:6a:49:ba:62:02:ec:4e:9d:b3:
40:79:3a:4d:19:f2:df:e6:7f:ca:37:85:09:6a:53:55:9d:03:
3b:a0:55:ad:04:96:d5:d7:d2:1a:2b:2b:53:42:6d:69:9d:f4:
96:6a:cc:08:2e:1f:39:4d:4d:63:39:9c:ba:6a:18:23:f2:10:
93:28:af:a5:09:f1:9e:a7:2d:28:31:ba:5c:e2:3a:c1:c8:d7:
76:fe:e6:d3:64:0e:c0:34:d6:1b:d9:e4:ad:59:2b:c6:e2:34:
ae:ad:c9:58:b7:44:2f:9f:b1:9a:5f:1e:c6:ae:89:65:00:41:
b5:9f:5b:b5:cf:f2:d3:8a:85:0f:39:f6:7c:d2:72:7c:f0:61:
f6:c5:f8:e5:44:02:51:b1:7d:19:73:93:8d:7c:62:68:56:9a:
2f:a5:c7:7c:69:ea:19:88:74:16:86:99:71:25:14:53:5e:97:
c2:b1:fb:04:dc:f4:2c:d5:96:5e:61:0f:c7:db:fc:4b:d2:f8:
75:40:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:54 2025 by rpki-client