Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1c94795-614d-398a-8e74-0502bf31d4c0.roa
File: c1c94795-614d-398a-8e74-0502bf31d4c0.roa (raw, json)
Hash identifier: hPl1ODo96kKSq5PujCIbbQ+DOP6pDjDp2td4ZC1RXjs=
Subject key identifier: FF:0D:07:C4:37:E2:C0:CF:4A:07:F8:63:74:57:51:09:1F:A1:83:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B4DCBD9E9901F95B3E74440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1c94795-614d-398a-8e74-0502bf31d4c0.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:4d:cb:d9:e9:90:1f:95:b3:e7:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=24b08a8a-cacb-420d-a5b6-f0095be05a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:f6:32:e6:a2:1e:26:38:39:8b:d7:e1:63:
e5:5f:a1:3b:c4:32:9a:c6:a2:65:a3:a2:8d:29:88:
b1:ea:c2:30:97:b2:bb:c4:bb:1c:36:58:fa:29:ec:
83:55:e8:e2:dd:95:1a:8e:e3:2a:ce:d7:44:40:a1:
b9:93:4b:47:0c:43:33:e4:6b:e6:c2:73:d8:1c:61:
93:91:5f:57:74:33:b2:1c:1a:a7:d6:98:3b:b3:3f:
11:07:fc:61:77:7b:4d:bb:8b:b0:9b:54:d0:d0:23:
ae:c6:89:4f:d4:72:ce:ae:9e:8e:fc:f9:d0:b7:ee:
6b:fc:c0:f3:94:85:ff:40:8f:99:96:30:d6:6c:d0:
ec:2e:74:62:4a:02:fa:d2:9d:07:49:3b:e0:1f:81:
51:ad:0c:c6:9b:20:0d:f1:4d:e2:ba:9a:e1:65:fb:
7d:43:a9:43:5b:59:14:19:f5:e7:7c:fa:bb:96:cc:
d0:16:1f:d4:d8:ac:f3:04:8a:ee:96:fd:2c:d5:67:
7e:c3:83:0b:09:af:1a:ca:4a:96:d5:c5:5a:72:00:
0f:57:39:0b:b7:a7:e1:a9:1c:62:61:76:f4:b8:21:
4f:f0:e6:53:07:07:f8:3c:d2:f5:a7:24:c9:23:21:
eb:86:3a:d0:87:1a:7f:f6:dd:48:2f:1c:8d:fc:fc:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:07:C4:37:E2:C0:CF:4A:07:F8:63:74:57:51:09:1F:A1:83:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1c94795-614d-398a-8e74-0502bf31d4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:37:1e:09:cd:32:44:b1:a0:a5:74:71:f7:59:8f:38:a6:70:
ff:61:16:11:0b:08:9d:f3:5f:c9:09:f5:b5:dd:74:4c:06:f4:
d4:11:41:f6:10:af:31:50:d2:73:97:ed:20:ba:f5:46:9d:4a:
aa:9f:ba:ae:2a:b7:d2:7d:db:73:33:f0:23:79:19:c4:a9:f5:
1d:70:65:40:85:fb:97:28:61:5a:36:49:31:5f:1c:cd:a8:63:
87:47:23:26:2c:76:30:6e:ab:81:72:50:9d:d3:6d:36:cb:45:
3f:d1:09:0f:3d:af:43:dd:b9:76:55:47:07:4b:7a:ba:9e:64:
45:1d:a3:5d:6b:f2:2f:63:26:ed:6e:ba:f4:12:50:33:e0:0d:
34:a1:e8:39:a5:54:e7:5d:a9:a5:bb:f9:ef:64:ba:16:96:50:
4d:ac:57:f2:74:4b:c6:fa:d2:46:8d:13:2b:8a:9e:b7:55:e9:
49:95:d6:da:fe:51:39:7a:1b:a4:d5:26:bb:57:cb:43:14:9f:
50:3a:81:91:c1:38:12:fc:cd:48:ef:b4:1c:47:fe:a6:65:8e:
e2:85:dd:b1:53:8f:4b:d0:02:c7:5c:62:f4:5f:2c:03:7b:5c:
fc:0c:e5:09:83:46:0b:04:92:2d:a6:4e:77:53:a9:33:e1:1a:
67:18:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:32 2025 by rpki-client