Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cac23bd0-564f-35f4-a213-89680fc6107f.roa
File: cac23bd0-564f-35f4-a213-89680fc6107f.roa (raw, json)
Hash identifier: MnJskiX8XO0Uu+WYe6GPvlmJ080RofzRhNITQe9eLG8=
Subject key identifier: E6:34:C1:37:1B:DB:05:50:1D:12:07:2D:1B:52:D1:4E:DE:5B:E8:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F326A94783B954AC1733DAF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cac23bd0-564f-35f4-a213-89680fc6107f.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:6a:94:78:3b:95:4a:c1:73:3d:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=d4d69ba9-7993-48a3-ac29-70a6326517ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:d3:2e:f6:62:49:78:7c:4d:0f:d7:27:73:
10:1c:a2:93:9d:fa:a7:15:72:2c:71:88:63:35:66:
f4:13:28:90:1d:b9:d7:73:8a:25:c4:ab:58:c2:02:
af:b1:4b:64:e7:58:82:4f:c7:7c:86:5c:8c:4a:b6:
83:f6:ce:c8:19:27:ab:53:17:25:e2:a5:c1:8c:39:
ed:1e:3d:a6:e9:00:88:f1:64:50:28:b9:db:0b:49:
e3:57:f8:1e:2c:e2:47:a1:cc:33:0b:29:5c:17:5a:
ae:cc:eb:09:48:fa:61:8c:05:3d:50:30:fb:74:7a:
16:1e:01:43:cd:e1:07:65:ec:91:de:de:da:40:e6:
e1:0c:97:93:9d:90:b1:75:fe:ac:d2:b0:d6:c1:a3:
e1:83:86:bf:2b:06:d9:e6:19:15:c8:c3:3a:03:e3:
f6:82:0c:62:88:1a:5a:76:51:f3:a9:ee:73:ac:31:
69:e4:7e:25:01:0e:56:00:c5:39:ca:70:dd:88:ca:
f6:13:0a:9a:b5:39:66:79:8d:93:a5:23:88:59:7d:
fb:27:42:4c:d4:33:7d:ec:e8:3c:a6:7e:85:8d:fe:
d2:ea:70:39:72:23:77:08:35:95:3d:38:27:5f:8c:
dd:aa:0a:2a:7d:fa:34:d0:94:f4:9e:2d:71:bc:d3:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:C1:37:1B:DB:05:50:1D:12:07:2D:1B:52:D1:4E:DE:5B:E8:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cac23bd0-564f-35f4-a213-89680fc6107f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.176.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:bf:f8:88:38:a3:8b:0a:b4:40:b9:c5:e1:5a:9b:fe:2b:f8:
f2:f9:90:cf:f7:24:08:4b:b6:4e:5d:bc:15:a1:91:c4:64:1b:
60:3c:89:c3:80:d7:cc:08:28:f3:1d:3d:7f:b3:8a:da:73:a1:
79:ff:04:79:71:75:d1:d9:a5:11:7d:ad:5c:a1:a4:42:9f:e0:
0e:59:f8:eb:23:29:0a:96:74:43:2a:0c:a2:d3:ee:9d:02:ca:
75:1d:16:77:33:33:95:a3:dc:a9:01:53:23:d9:c0:03:b7:33:
c6:cf:ce:45:d7:46:ae:ca:c3:58:cd:2e:b6:c7:c6:50:35:c1:
ae:78:b3:f5:e7:06:c6:9d:04:3e:05:fe:46:14:1b:9b:8d:a0:
71:4a:ff:21:d3:30:9a:4f:9d:46:92:1f:8f:b5:22:ab:0e:5d:
7e:ed:84:47:02:ef:38:6d:3e:51:7b:8f:12:73:04:2c:6d:6a:
86:ad:d3:41:d1:80:5b:33:a7:a2:6a:7d:75:aa:8a:e6:c2:52:
b3:81:96:c9:dd:3a:6c:cc:a6:c6:c9:a2:f7:a4:f2:a4:dd:c7:
7e:46:fc:2a:d5:43:b2:24:06:b2:5d:45:8e:49:96:70:d1:c3:
c6:9c:ad:80:a8:13:08:f9:14:93:63:52:73:12:44:79:b5:c7:
4a:60:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:03 2025 by rpki-client