Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c07d85d3-dba3-35a5-8abf-7303a6be73d3.roa
File: c07d85d3-dba3-35a5-8abf-7303a6be73d3.roa (raw, json)
Hash identifier: tZe65MrfEONwktNVZ7xlz5pcGM6QrKY28PsBklhFGWA=
Subject key identifier: 43:A5:46:FD:76:BB:7E:3C:A4:A9:17:9B:3C:62:85:E6:10:4C:BB:D3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840405F40C6E9EC5998BFDB60C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c07d85d3-dba3-35a5-8abf-7303a6be73d3.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 54.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:5f:40:c6:e9:ec:59:98:bf:db:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=cf01b63f-95be-4935-82fc-bb8a9c0364d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:bf:ce:95:48:0a:de:ef:e0:00:fc:9a:6c:
1b:b8:43:0c:ab:f5:31:eb:d5:66:6a:ae:11:55:53:
b2:25:c6:b7:7b:57:7b:a2:75:d6:5f:be:ab:30:79:
c6:06:b8:6e:f7:c4:b5:4c:eb:45:d9:28:d3:6b:3a:
7b:bf:b8:fc:3d:2f:81:38:56:6c:c3:bc:0d:30:80:
42:87:28:86:67:bf:6b:c2:25:03:3a:94:da:12:9c:
06:67:83:b9:6d:7e:99:38:d4:6c:57:39:ba:0b:c2:
f7:f4:b1:fd:0a:81:ce:e0:a7:f9:5a:ce:f0:2f:e5:
ea:5e:27:84:25:f9:d1:ac:f4:c0:c5:c5:b2:30:e9:
dd:7c:12:5e:13:dc:69:ea:2f:5b:70:43:14:59:7d:
8e:e5:d3:4d:e5:03:c4:60:b2:dc:e8:8a:f5:01:db:
56:41:e8:3f:fd:9a:e5:ed:eb:d1:ab:6e:a7:74:31:
48:a5:c9:1e:40:aa:9f:58:36:33:fc:62:8d:3e:bc:
04:d7:34:9c:e2:24:b5:61:a9:3f:c4:31:bf:e4:7e:
55:6e:6d:a2:28:7f:a4:a7:70:82:ad:9c:8a:31:a3:
b2:0a:40:60:69:37:56:ce:e6:ee:f4:ac:0c:53:a6:
96:0e:aa:03:7d:21:b5:8e:76:a6:96:7c:49:b2:27:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:46:FD:76:BB:7E:3C:A4:A9:17:9B:3C:62:85:E6:10:4C:BB:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c07d85d3-dba3-35a5-8abf-7303a6be73d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:74:76:6c:72:56:5f:fb:b5:b1:bc:97:d1:28:e9:0b:6e:ba:
dc:0b:18:e8:db:cb:a9:73:86:4a:44:5e:dd:a2:c4:65:46:9a:
70:b7:fd:a5:0f:e6:1d:2c:52:43:fe:82:96:20:04:f1:12:af:
ec:26:3a:57:1c:c5:e4:04:fb:1e:fd:b7:ba:09:65:ef:e4:a6:
2d:14:83:c3:fb:bb:81:f9:f0:0b:2d:aa:32:34:a0:d7:33:60:
6c:f6:69:3b:27:9f:26:e0:3f:c7:80:91:87:9f:3c:68:26:9a:
5b:9a:7b:24:35:e6:59:dc:a5:e9:41:dc:0d:a2:cd:7a:29:07:
f9:ce:0b:13:84:33:fa:06:d7:f5:a6:39:0b:6a:1e:f4:fb:9e:
8f:25:c3:62:93:72:11:f2:da:71:02:87:56:15:ef:8c:38:c6:
cc:ea:0b:d1:83:e7:49:84:0a:35:c3:c4:d2:00:9f:3a:6a:ce:
c5:bc:77:7b:7b:03:46:1d:7c:c4:14:82:1e:ea:33:fa:59:2c:
8f:53:38:01:cc:2a:94:79:2d:b9:a1:3d:83:41:5e:2f:6f:96:
73:e2:df:4b:7a:e5:79:db:ce:21:64:4b:e6:07:49:cd:3e:47:
eb:3f:eb:2f:79:55:c2:a7:47:1c:c6:d6:a6:d7:b5:54:1b:06:
f5:83:8a:ec
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBAX0DG6exZmL/bYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
Y2YwMWI2M2YtOTViZS00OTM1LTgyZmMtYmI4YTljMDM2NGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw2/zpVICt7v4AD8mmwbuEMMq/Ux69Vmaq4R
VVOyJca3e1d7onXWX76rMHnGBrhu98S1TOtF2SjTazp7v7j8PS+BOFZsw7wNMIBC
hyiGZ79rwiUDOpTaEpwGZ4O5bX6ZONRsVzm6C8L39LH9CoHO4Kf5Ws7wL+XqXieE
JfnRrPTAxcWyMOndfBJeE9xp6i9bcEMUWX2O5dNN5QPEYLLc6Ir1AdtWQeg//Zrl
7evRq26ndDFIpckeQKqfWDYz/GKNPrwE1zSc4iS1Yak/xDG/5H5Vbm2iKH+kp3CC
rZyKMaOyCkBgaTdWzubu9KwMU6aWDqoDfSG1jnamlnxJsicvNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEOlRv12u348pKkXmzxiheYQTLvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzA3ZDg1ZDMtZGJhMy0z
NWE1LThhYmYtNzMwM2E2YmU3M2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENqAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkHR2bHJWX/u1sbyX0SjpC2663AsY6NvLqXOGSkRe3aLEZUaacLf9pQ/m
HSxSQ/6CliAE8RKv7CY6VxzF5AT7Hv23ugll7+SmLRSDw/u7gfnwCy2qMjSg1zNg
bPZpOyefJuA/x4CRh588aCaaW5p7JDXmWdyl6UHcDaLNeikH+c4LE4Qz+gbX9aY5
C2oe9PuejyXDYpNyEfLacQKHVhXvjDjGzOoL0YPnSYQKNcPE0gCfOmrOxbx3e3sD
Rh18xBSCHuoz+lksj1M4AcwqlHktuaE9g0FeL2+Wc+LfS3rledvOIWRL5gdJzT5H
6z/rL3lVwqdHHMbWpte1VBsG9YOK7A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:33:41 2025 by rpki-client