Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab96d97a-d84e-3bb8-ac21-ae020a5020c4.roa
File: ab96d97a-d84e-3bb8-ac21-ae020a5020c4.roa (raw, json)
Hash identifier: zm0rkpetkdQ3KpCONa7TkO1F6xhEp6xVPWJQcQqyro0=
Subject key identifier: 45:D5:E9:CA:BC:2B:A2:36:B1:CA:93:8C:AD:83:08:DC:1E:CB:67:FF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5ADE13EC1C60AC31DFC50040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab96d97a-d84e-3bb8-ac21-ae020a5020c4.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:de:13:ec:1c:60:ac:31:df:c5:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=f12088f5-1175-468d-b9a8-09ec8735c93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:fb:e5:16:88:f3:27:4d:fd:51:4b:1b:0f:
49:80:41:9c:dc:18:cc:00:da:b3:bb:95:27:75:45:
66:0c:d4:8c:20:62:9c:38:f0:15:3b:4b:b5:52:fd:
71:4f:67:91:f4:44:90:57:eb:48:c4:dc:f1:da:5a:
12:80:a1:df:94:90:a0:cf:65:bc:2b:d8:a3:6c:29:
96:e3:60:ea:8a:5a:0d:e3:0e:58:76:18:32:14:7f:
60:fd:9c:3f:ee:df:9d:98:51:52:75:9b:ff:e6:cb:
78:e9:13:78:91:8a:e0:07:95:3d:1b:f2:2e:17:9b:
06:1f:bf:25:a1:61:9e:57:9a:94:a4:3c:60:9b:51:
ec:7d:9c:10:e1:6c:44:88:13:ee:f4:a3:cb:f4:ee:
76:e1:9b:72:eb:eb:8b:80:16:76:7f:f8:72:56:3a:
5f:52:6b:f2:bc:cf:79:66:87:67:3e:b9:78:69:72:
22:aa:10:30:b0:f8:26:d9:56:9b:8d:b9:3a:d7:0f:
04:2c:45:78:af:8b:c7:cf:26:69:27:00:50:f7:fb:
e3:66:6c:9f:3d:12:33:68:94:07:fb:39:2b:cd:63:
d0:02:2b:dc:d5:5f:61:b0:2e:a6:ff:05:2e:ea:28:
2c:7a:7e:5a:17:a0:67:e3:6b:c0:06:e2:8a:84:e0:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D5:E9:CA:BC:2B:A2:36:B1:CA:93:8C:AD:83:08:DC:1E:CB:67:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ab96d97a-d84e-3bb8-ac21-ae020a5020c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f9:27:6f:e8:1b:c2:df:9c:e5:33:f3:06:bb:fa:28:72:79:
54:90:94:97:72:97:ee:5f:95:cc:1d:42:df:51:fd:00:6a:49:
22:aa:8a:fd:58:55:a7:3c:19:1d:51:f3:b0:8f:09:a0:cd:c0:
2b:73:c8:a9:4c:9a:c2:9f:1a:37:2f:e0:32:2e:cc:77:ec:ab:
dc:a8:2c:cf:82:5f:a9:87:9f:ea:a0:ee:de:32:1f:af:43:cd:
26:bd:06:18:6e:78:71:38:51:cf:8a:bf:47:d5:27:ec:cd:f5:
fa:23:97:8c:b5:db:e1:36:ee:4c:35:28:1c:3e:53:5e:2f:bb:
ed:12:7f:e4:80:0c:62:77:00:27:87:2e:1b:4e:e5:6b:e1:df:
96:1d:67:ce:c3:2a:b1:98:f6:9f:79:2b:92:a4:8f:e6:a0:9c:
1f:df:2d:bb:54:63:a1:5c:d0:49:3e:f4:1b:f8:c9:48:dd:4f:
f4:5a:e1:ea:f0:b1:95:99:72:9e:7c:f8:fa:51:7a:aa:24:2a:
35:38:0e:e5:d6:f2:f7:8b:8a:44:5d:aa:73:95:7a:4e:a0:65:
a6:a5:2a:66:52:ef:33:97:fc:9b:a5:40:db:d3:b3:8f:2e:fa:
1a:9c:3f:c5:e1:90:d4:ea:e7:99:2a:5a:b2:16:03:86:b9:db:
a3:db:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:00 2025 by rpki-client