Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d041b08d-9003-3ce8-9762-6a04045d4009.roa
File: d041b08d-9003-3ce8-9762-6a04045d4009.roa (raw, json)
Hash identifier: /05F0P/07GyH8aiqGNJCNMNAsjTIRHOOWywmLcOthfM=
Subject key identifier: 5D:37:2D:3D:D2:C0:0C:42:48:9E:BF:56:92:8F:DC:C4:AE:CF:D0:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAAC820B094D64808ED005F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d041b08d-9003-3ce8-9762-6a04045d4009.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:c8:20:b0:94:d6:48:08:ed:00:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=09d9fb4e-add1-4311-8f03-bc52bc29080b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:96:49:ce:30:28:5b:d7:b0:4b:03:5b:e8:
5f:9d:90:f9:36:9f:e3:e4:81:66:48:52:3a:23:5c:
67:23:a3:79:da:98:10:2d:cf:76:81:27:68:f2:f6:
a5:ca:9d:42:c2:6d:e3:35:79:92:ba:10:e3:ba:99:
b0:b8:4f:e7:10:0d:76:9d:1f:40:18:c8:d5:3a:29:
2c:87:f1:c5:f4:bb:1f:4d:c3:be:b4:7c:6f:49:ac:
8a:e3:35:e0:50:44:62:11:e7:2d:a0:f5:29:d0:3b:
ca:3f:b4:7f:af:89:2e:27:6e:46:7d:2b:63:a6:5a:
cc:24:90:b6:39:24:5c:db:cb:c2:2d:dd:5d:1e:1a:
c9:fc:52:ee:11:9c:bf:eb:2b:f5:c0:23:a3:6b:95:
f3:14:6a:f9:71:25:60:65:b5:07:ac:56:c9:73:a3:
8c:ee:a4:08:2a:07:7e:a8:45:52:9a:0a:e6:99:66:
6d:e6:cd:d3:6d:11:19:7f:16:db:02:2c:52:a6:fd:
00:55:cb:9e:67:09:d8:7f:60:b0:2f:33:b9:4c:c6:
2b:a7:5d:24:67:9a:a5:07:00:6c:e6:35:aa:be:c1:
f9:3e:7e:01:81:09:c5:c0:72:67:ce:61:a0:d0:0e:
42:c6:77:1d:3a:64:27:a2:12:3f:b6:4b:a6:99:9b:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:37:2D:3D:D2:C0:0C:42:48:9E:BF:56:92:8F:DC:C4:AE:CF:D0:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d041b08d-9003-3ce8-9762-6a04045d4009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:21:37:a6:e9:34:ab:06:3d:fa:f5:6e:1f:c8:7f:8f:d2:d4:
d8:03:3f:8c:a7:56:78:cb:43:3c:31:87:60:71:16:4a:80:5a:
74:98:26:45:98:a6:d9:f4:8a:4e:3f:70:d4:16:a3:64:d9:dd:
99:67:a8:f6:57:92:61:6b:9a:46:69:78:ec:fd:24:41:5e:dd:
e7:56:61:51:27:ff:cc:92:86:07:12:f6:60:26:85:5b:56:00:
29:ff:12:ac:f5:4d:71:ae:96:c7:df:69:e1:ef:91:01:8f:54:
d6:9a:58:ee:83:45:e5:d8:1f:b6:61:c2:f9:f0:f6:48:19:ec:
1d:7a:50:52:41:d7:79:f5:38:d9:82:c6:7a:0e:da:89:33:f3:
35:46:96:7c:bb:60:11:76:0d:78:4f:b7:b8:93:97:04:93:f8:
b0:b3:df:fb:08:bc:64:5d:0b:27:ef:5d:6d:fc:78:11:6b:42:
fd:db:6d:97:ac:2a:70:11:2e:3d:5e:dd:85:67:f1:d9:5a:ec:
9f:17:70:89:20:48:3d:3a:45:79:0a:c4:3c:15:a1:02:10:50:
07:29:c2:95:64:e7:a3:90:09:69:a6:f7:d4:f9:99:5d:b9:45:
cb:51:e3:93:61:95:53:d6:73:16:fb:b8:1d:c4:11:b5:5e:9c:
c9:29:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:36 2025 by rpki-client