Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b60677e8-bd1a-3391-8d6a-a29bdab30e7b.roa
File: b60677e8-bd1a-3391-8d6a-a29bdab30e7b.roa (raw, json)
Hash identifier: 6JqxOjmc7BIY/hoQpZRgstRwixigPZDGQRCP4wkiNu8=
Subject key identifier: FB:0C:CA:CE:FA:66:9F:3E:EC:21:96:C3:F4:2F:BB:0F:6B:95:E1:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD21AFE4E98AB81E1731B0380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b60677e8-bd1a-3391-8d6a-a29bdab30e7b.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:1a:fe:4e:98:ab:81:e1:73:1b:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=de7d698a-5d75-432b-8cb5-de85792d8ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bf:f7:c6:03:ec:44:14:ae:73:c3:ea:2d:ff:
3f:e0:20:e7:80:18:82:44:12:29:56:da:0c:de:19:
94:6f:82:d7:d1:c4:d8:ad:6e:19:3f:78:c6:19:9b:
8d:7c:67:1a:3c:85:0f:87:47:a8:0a:2f:c2:28:0f:
1f:44:97:ec:b7:91:fa:e0:9a:ba:21:fa:9d:6f:44:
83:70:03:d0:de:14:03:a0:dc:59:36:72:a7:b1:1d:
14:e4:65:9a:b9:82:83:60:cc:cc:80:21:d5:cc:ce:
f8:da:01:d4:ae:29:d9:07:eb:4d:37:c2:a1:05:e0:
44:83:37:7c:8a:fc:90:1e:66:d1:d8:1e:b3:44:36:
bf:6c:86:b6:b5:8c:23:60:26:55:0c:86:6f:2f:7e:
b1:4b:70:e4:78:93:ec:ff:1c:6f:da:7e:d8:95:d1:
e5:0d:32:b5:9c:58:4c:63:4c:f5:0a:6d:e8:15:6b:
10:2b:89:5e:1e:ff:36:5f:43:e2:5e:b9:1e:df:c7:
20:9a:e3:1b:76:a2:41:a7:22:72:5a:ba:10:ee:6f:
ac:17:38:8d:15:bf:30:f9:e4:8b:50:f7:16:17:b9:
03:c0:db:67:e4:9c:f7:5c:48:f1:9b:06:c1:98:0b:
b9:27:3b:05:f1:eb:b7:cc:21:d9:4b:aa:22:4a:d3:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:CA:CE:FA:66:9F:3E:EC:21:96:C3:F4:2F:BB:0F:6B:95:E1:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b60677e8-bd1a-3391-8d6a-a29bdab30e7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:cb:71:9d:9a:c6:04:81:85:5b:6d:9d:d9:46:15:1b:d7:85:
32:59:dd:de:d5:52:14:f1:e5:10:1a:cf:5d:47:7e:6b:1f:02:
90:6e:cd:63:ba:8c:ac:b9:60:b7:f0:96:cb:27:35:60:9a:a1:
46:26:e8:e3:38:a0:0b:19:96:c4:24:6c:e9:39:06:b5:ee:30:
13:cf:23:94:f8:4d:81:b0:9a:9f:32:54:de:ff:ee:c3:db:0f:
fe:7f:7f:0e:02:2f:84:90:4b:94:a7:fa:89:54:f0:15:02:88:
04:4c:da:4d:4e:6a:d7:5f:5a:8a:f6:76:e6:65:8f:36:3f:4c:
26:3b:e3:29:bc:ef:7d:d8:76:60:e2:06:f5:19:49:4c:6a:63:
ea:61:4a:df:b0:70:21:b6:58:6a:e5:f0:de:4a:5b:d7:ba:8f:
74:04:66:8b:2c:ce:13:57:98:ff:ec:e5:3e:bb:3c:82:ae:06:
6c:c8:3b:1f:2c:25:dc:df:78:c7:5d:4e:9d:2d:5d:c1:34:00:
d2:53:b6:5a:63:71:35:35:f7:62:ea:e5:2d:9c:eb:78:57:3c:
4a:19:f4:3e:77:6d:e4:08:e4:7a:d6:86:d2:8d:aa:46:fe:ee:
cc:7f:70:7c:db:fe:50:db:52:69:8f:38:b5:70:9c:8f:64:61:
8b:8c:4e:39
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3SGv5OmKuB4XMbA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGU3ZDY5OGEtNWQ3NS00MzJiLThjYjUtZGU4NTc5MmQ4YWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL/3xgPsRBSuc8PqLf8/4CDngBiCRBIpVtoM
3hmUb4LX0cTYrW4ZP3jGGZuNfGcaPIUPh0eoCi/CKA8fRJfst5H64Jq6Ifqdb0SD
cAPQ3hQDoNxZNnKnsR0U5GWauYKDYMzMgCHVzM742gHUrinZB+tNN8KhBeBEgzd8
ivyQHmbR2B6zRDa/bIa2tYwjYCZVDIZvL36xS3DkeJPs/xxv2n7YldHlDTK1nFhM
Y0z1Cm3oFWsQK4leHv82X0PiXrke38cgmuMbdqJBpyJyWroQ7m+sFziNFb8w+eSL
UPcWF7kDwNtn5Jz3XEjxmwbBmAu5JzsF8eu3zCHZS6oiStN8MQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPsMys76Zp8+7CGWw/Qvuw9rleFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjYwNjc3ZTgtYmQxYS0z
MzkxLThkNmEtYTI5YmRhYjMwZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENvAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKctxnZrGBIGFW22d2UYVG9eFMlnd3tVSFPHlEBrPXUd+ax8CkG7NY7qM
rLlgt/CWyyc1YJqhRibo4zigCxmWxCRs6TkGte4wE88jlPhNgbCanzJU3v/uw9sP
/n9/DgIvhJBLlKf6iVTwFQKIBEzaTU5q119aivZ25mWPNj9MJjvjKbzvfdh2YOIG
9RlJTGpj6mFK37BwIbZYauXw3kpb17qPdARmiyzOE1eY/+zlPrs8gq4GbMg7Hywl
3N94x11OnS1dwTQA0lO2WmNxNTX3YurlLZzreFc8Shn0Pndt5AjketaG0o2qRv7u
zH9wfNv+UNtSaY84tXCcj2Rhi4xOOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:12 2025 by rpki-client