Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a42c8d36-4f5f-3373-b54f-539d612b5c8c.roa
File: a42c8d36-4f5f-3373-b54f-539d612b5c8c.roa (raw, json)
Hash identifier: GcSyXA1rSQraYQ+ZfM4NVdIGXcQJ+sH9yPr4+Rev1+U=
Subject key identifier: 45:32:7A:F2:25:1B:9F:C7:A2:49:63:CB:3C:94:84:A4:15:36:A8:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F53A26A6870E8CED697F480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a42c8d36-4f5f-3373-b54f-539d612b5c8c.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:53:a2:6a:68:70:e8:ce:d6:97:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=53656757-470b-445b-bbae-000b7eb13fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:5a:10:64:0e:e0:d3:4b:13:eb:2d:15:fa:
2e:c1:8c:48:e2:5f:b9:fc:1b:96:a2:b5:bd:91:d0:
75:f2:77:28:46:23:6a:f8:3d:96:45:1e:dc:ac:87:
f5:4d:00:8d:18:3f:8f:50:c3:b9:c1:e0:07:de:8f:
5e:f7:a6:e8:68:fa:08:d9:73:19:b9:48:65:df:36:
91:6f:85:0c:b1:2b:51:a5:7e:71:ff:a3:eb:97:10:
d5:b3:e6:ac:ed:6d:92:a9:c0:d9:d7:0f:59:3b:34:
3e:3d:25:1a:0b:9d:14:f3:5d:de:b6:97:43:ed:70:
64:ac:fc:05:44:05:64:41:6e:fb:73:3c:fa:ad:c8:
8f:3b:a7:fb:7b:46:99:1b:a5:eb:36:66:29:6b:74:
61:01:c4:d9:0d:b6:ce:7a:7d:bc:bb:83:43:70:1b:
15:02:50:bb:60:e5:32:76:9f:aa:ee:8a:2a:1d:23:
7c:b6:31:db:4c:b3:81:65:8d:38:cc:58:a5:9d:f2:
31:1f:8b:d3:3b:de:6f:d4:35:93:ab:e8:b2:04:2e:
24:21:99:a4:70:69:19:80:8a:d9:8a:a8:5d:ab:37:
85:72:4e:a0:07:64:35:84:56:af:0d:70:17:1d:b0:
d5:07:92:c8:e9:62:b3:d2:36:56:45:7d:59:45:62:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:7A:F2:25:1B:9F:C7:A2:49:63:CB:3C:94:84:A4:15:36:A8:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a42c8d36-4f5f-3373-b54f-539d612b5c8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:9a:c6:be:88:22:14:f3:97:37:a2:39:81:2e:57:36:9d:87:
b6:09:55:a3:fa:2a:9c:28:fb:2d:d1:2d:02:30:dd:f0:44:04:
8e:03:85:b9:f6:d9:1f:59:82:26:29:32:ef:dc:c0:12:c7:78:
93:b4:d6:4d:01:5a:dd:1f:86:da:1e:25:fc:a8:ae:e1:81:1d:
00:d1:e5:4f:14:df:44:54:bf:be:40:e4:cf:b1:5a:15:9c:c7:
d3:09:d9:68:21:8a:f5:22:19:b2:e3:13:92:03:37:fe:89:28:
b3:0c:25:f4:3b:ec:85:6a:63:5f:1c:e5:d6:e8:6a:54:49:2a:
18:43:2b:04:84:0b:e1:50:18:1f:f1:33:30:21:79:ab:47:49:
c9:3a:40:b6:cd:81:81:cf:c6:11:47:63:36:72:f4:0e:05:a9:
66:ac:68:fc:9d:7d:e9:83:53:7e:38:25:82:89:fb:76:f4:a2:
1f:ee:26:6e:0f:6d:1a:61:ed:f4:4d:04:4f:4f:ab:10:d6:ed:
0f:6a:25:e5:7d:ef:6a:92:44:5c:3b:eb:b0:e8:02:f5:b1:df:
a3:85:3d:85:8d:7d:b2:ec:e2:cf:07:e4:d6:9e:9b:41:7e:82:
e5:3d:48:54:7d:07:dd:6b:51:4e:d4:be:b3:e5:2a:4f:89:d8:
3f:92:97:ae
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxvU6JqaHDoztaX9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NTM2NTY3NTctNDcwYi00NDViLWJiYWUtMDAwYjdlYjEzZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinxaEGQO4NNLE+stFfouwYxI4l+5/BuWorW9
kdB18ncoRiNq+D2WRR7crIf1TQCNGD+PUMO5weAH3o9e96boaPoI2XMZuUhl3zaR
b4UMsStRpX5x/6PrlxDVs+as7W2SqcDZ1w9ZOzQ+PSUaC50U813etpdD7XBkrPwF
RAVkQW77czz6rciPO6f7e0aZG6XrNmYpa3RhAcTZDbbOen28u4NDcBsVAlC7YOUy
dp+q7ooqHSN8tjHbTLOBZY04zFilnfIxH4vTO95v1DWTq+iyBC4kIZmkcGkZgIrZ
iqhdqzeFck6gB2Q1hFavDXAXHbDVB5LI6WKz0jZWRX1ZRWJ83wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEUyevIlG5/HokljyzyUhKQVNqhRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTQyYzhkMzYtNGY1Zi0z
MzczLWI1NGYtNTM5ZDYxMmI1YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDNkgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUJrGvogiFPOXN6I5gS5XNp2HtglVo/oqnCj7LdEtAjDd8EQEjgOFufbZ
H1mCJiky79zAEsd4k7TWTQFa3R+G2h4l/Kiu4YEdANHlTxTfRFS/vkDkz7FaFZzH
0wnZaCGK9SIZsuMTkgM3/okoswwl9DvshWpjXxzl1uhqVEkqGEMrBIQL4VAYH/Ez
MCF5q0dJyTpAts2Bgc/GEUdjNnL0DgWpZqxo/J196YNTfjglgon7dvSiH+4mbg9t
GmHt9E0ET0+rENbtD2ol5X3vapJEXDvrsOgC9bHfo4U9hY19suzizwfk1p6bQX6C
5T1IVH0H3WtRTtS+s+UqT4nYP5KXrg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:57:34 2025 by rpki-client