Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baddb6eb-82cf-3958-9112-276e4d1744b1.roa
File: baddb6eb-82cf-3958-9112-276e4d1744b1.roa (raw, json)
Hash identifier: /hgv3/0NwN+oofFRW5MIXR8GVW1+quIx8mQEWTAtaiw=
Subject key identifier: 49:F7:F9:1F:9C:A2:2E:33:2F:25:5A:82:FD:B8:2F:86:43:98:67:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F325BBD9C08A8A816DC57C1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baddb6eb-82cf-3958-9112-276e4d1744b1.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:5b:bd:9c:08:a8:a8:16:dc:57:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=705f367b-b07a-445e-a8bc-ce61109d738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:18:90:f4:c1:c7:35:e3:45:29:68:6d:8b:
e2:3a:82:cd:6b:fb:da:b0:5f:52:08:77:cd:2c:bf:
5e:cb:8e:7c:ac:99:22:c8:1e:f7:a8:7f:30:a2:ac:
86:9a:71:bd:b2:f5:b9:08:8f:b0:7b:70:21:7a:2a:
29:6a:af:ab:31:20:fa:8a:05:96:a4:d8:6f:47:4e:
e5:31:88:67:64:96:84:39:5c:98:63:52:99:65:ca:
c5:38:8d:e9:f3:66:79:ca:ad:a7:52:25:df:b8:cf:
06:f0:e8:ed:ca:b9:c2:ce:53:ca:f2:5e:e7:42:72:
eb:e3:ca:79:8b:56:35:dc:ac:f3:1c:f5:23:5c:c6:
9d:a2:ad:34:7e:b0:31:e5:c5:2c:23:00:55:fa:ee:
8e:eb:30:0d:03:7e:1e:0e:63:ba:a9:eb:59:e8:12:
b0:35:ad:43:5d:7d:80:6f:97:75:81:9d:0b:43:fb:
c4:0a:81:27:4b:6d:c4:66:5d:b4:91:1b:6e:7f:3f:
d1:f2:af:b3:83:b8:c2:f1:6e:7c:b9:ed:b6:79:5b:
fe:10:95:b9:04:e5:a4:8f:ac:00:ed:41:9d:39:be:
f6:cc:78:55:aa:fe:2d:76:46:af:2d:80:06:31:00:
67:f2:dd:5d:3f:a1:4f:3e:3e:9e:71:91:50:ab:16:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:F9:1F:9C:A2:2E:33:2F:25:5A:82:FD:B8:2F:86:43:98:67:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baddb6eb-82cf-3958-9112-276e4d1744b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b6:e3:1b:81:f1:3e:96:5c:be:70:5a:f5:5f:d6:da:ad:cd:
15:bf:1d:c5:37:f9:b5:aa:50:70:2e:69:d9:cb:66:75:70:95:
43:c2:73:6c:29:43:6f:8d:62:2a:7a:2d:16:ac:a0:ed:f0:b7:
fd:b8:d9:3b:ba:41:a4:94:10:0d:11:4a:bd:bc:21:f4:8e:7e:
f3:c3:9e:54:e8:5b:e0:2c:0b:5d:33:30:74:65:c6:2d:93:97:
0e:41:3f:4f:84:5b:19:64:f7:e9:e9:d8:0d:12:e7:75:c8:ed:
8c:2e:a0:b2:bd:4e:20:f6:1a:b7:eb:0c:07:6a:7c:2f:a6:88:
e9:eb:b5:d7:d9:ce:d1:ce:ee:27:f6:8c:89:9d:12:e3:48:a0:
af:8e:b4:37:5f:a1:f9:54:61:2c:e0:f2:f2:1d:b9:4f:8d:70:
46:1b:79:ff:17:2a:2f:18:e8:73:18:aa:1e:d6:ca:d7:72:e7:
32:a7:36:91:16:b7:9d:7e:10:73:68:e2:da:87:ae:40:7e:4b:
b3:a3:3d:b6:64:10:fd:90:78:a3:c6:be:39:25:d5:d7:52:40:
b6:b7:7d:04:d0:cf:d5:8e:f6:62:df:18:ea:bf:4f:6b:2a:22:
b8:fe:09:ac:59:00:e5:9c:09:2a:3a:b8:05:38:58:e2:d1:7a:
59:a2:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:02 2025 by rpki-client