Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0f4e7a0-c941-39e5-83a8-668773650750.roa
File: b0f4e7a0-c941-39e5-83a8-668773650750.roa (raw, json)
Hash identifier: aIIPgjdVekNBTbIiVEpAP0nN+DqpP8Q7M7ozTNoqkSw=
Subject key identifier: 97:70:96:BA:F3:45:C5:E5:4C:4F:44:8B:39:07:FE:07:1C:36:F4:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5A010C98AEEABD765FC32F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0f4e7a0-c941-39e5-83a8-668773650750.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:01:0c:98:ae:ea:bd:76:5f:c3:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=ec3bd8e2-a563-4d75-9640-294c66f8030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:b8:f1:55:21:fd:aa:de:4c:1f:b0:b3:b5:
38:78:5f:57:e6:f7:e9:d1:46:95:5c:89:33:d2:b6:
61:8f:c3:5e:f4:9e:2b:15:be:4c:d3:c6:7f:83:9f:
f9:75:d2:6c:5f:ab:6f:51:61:8c:cf:a2:f8:67:4a:
21:03:9e:2e:b8:e6:96:0d:3c:3e:39:ab:4c:34:24:
e9:92:c0:44:59:4f:77:61:08:f9:98:dc:88:66:d1:
78:4a:1a:7a:eb:38:01:85:42:91:05:9e:fe:07:1c:
cd:31:3a:3d:7d:60:e3:8e:90:2c:52:e6:85:bd:c1:
63:96:ba:6c:57:09:53:77:7a:d7:b3:7f:fc:c5:5f:
94:cd:b6:ac:3c:be:e7:6b:ef:db:d9:fb:1d:1d:23:
3f:ef:3d:0d:b2:fc:38:ed:d0:d8:9f:2b:4e:7d:c0:
63:92:98:de:8b:36:d0:53:01:a0:75:7e:dc:e5:50:
df:9c:88:7e:9c:4b:7e:9f:23:f4:d3:82:7c:28:07:
c0:16:91:6d:03:d8:8f:94:d1:6d:8d:e6:6d:1d:c0:
93:24:c4:9e:d9:ed:2c:11:d8:8f:22:cd:bf:f0:68:
9b:ba:b2:b5:ba:19:bc:ee:03:81:e1:29:86:e2:6a:
60:68:14:f7:5c:50:30:c3:08:76:31:37:15:62:2d:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:96:BA:F3:45:C5:E5:4C:4F:44:8B:39:07:FE:07:1C:36:F4:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0f4e7a0-c941-39e5-83a8-668773650750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:57:53:34:b0:ef:0c:5a:b1:93:dd:e8:7a:84:ca:cf:43:a7:
f0:af:d8:1a:f7:ff:8d:ee:74:12:eb:a0:22:0d:06:54:51:34:
f0:bf:9e:5d:9a:c6:24:7e:96:ac:0e:a3:d7:e6:36:d5:c8:cb:
79:6b:f3:5f:05:19:22:aa:46:98:ae:a0:bf:5c:15:5d:5f:dd:
11:05:5f:45:4c:a2:88:2b:7e:3f:9b:d8:18:41:0f:71:ef:8f:
57:4f:f0:86:00:47:78:07:39:c0:a4:f4:77:e4:da:d2:6b:37:
f7:3a:47:e2:8d:5f:1e:6a:7f:64:d8:81:6f:6c:a6:b8:9f:18:
15:8a:5d:0b:53:4b:5e:90:71:af:04:e9:ca:f4:13:ad:c4:66:
51:ab:57:e3:58:6e:45:f9:0f:03:0a:44:59:f2:b7:42:13:ca:
e4:8a:bd:c1:70:af:53:0e:c4:8b:f9:a3:92:03:ce:cb:15:6a:
5b:b1:ca:4d:a8:0c:d9:58:9d:f1:ac:6c:5b:e3:62:0c:bf:ac:
c2:33:8b:b0:ee:85:d5:7d:a5:3a:e6:4a:94:0f:7f:3c:4e:75:
26:ba:e2:91:5d:da:ec:9a:32:fe:2a:52:76:ef:47:c8:2b:43:
ed:c1:f4:4b:59:92:ce:e7:70:fa:dd:1b:66:3d:b6:70:b2:56:
bf:f9:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:40 2025 by rpki-client