Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d57e5a2f-9549-3ec7-803f-86a098139fb8.roa
File: d57e5a2f-9549-3ec7-803f-86a098139fb8.roa (raw, json)
Hash identifier: gkAc9OTdZICYyilp4nDlSDofKtOLQ7/4GjFj0vnUd7U=
Subject key identifier: 2F:3A:A5:A2:37:F0:34:88:F9:EE:B8:7F:CC:40:22:25:A4:48:B5:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6ECAA11A33DCBF067CF32C28
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d57e5a2f-9549-3ec7-803f-86a098139fb8.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:ca:a1:1a:33:dc:bf:06:7c:f3:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=bab5ebd5-d15a-406a-85f4-85bce691469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:a4:9c:67:9f:4c:49:e2:79:87:a3:d2:2d:
52:f9:fc:12:d9:bf:b7:11:c5:d7:fe:ee:95:b7:a0:
ad:73:fa:46:7a:dd:b7:84:d2:54:f9:e3:34:3a:5f:
44:40:27:4b:38:4d:e1:45:66:5a:e5:60:10:43:7e:
a8:d4:37:fd:62:de:68:fb:72:02:26:fe:08:e7:cd:
fd:3b:18:08:ef:74:b5:18:be:16:bd:48:8f:1e:1f:
0e:d0:34:ee:16:36:b6:1a:5e:f5:26:8f:7b:be:c1:
48:7c:91:85:90:68:8c:30:5d:bb:03:91:3c:02:d3:
27:c7:4e:15:1e:f8:61:84:d3:fa:8f:08:cd:ac:e4:
92:4c:23:e1:cb:bf:80:b5:11:c2:59:b0:fd:28:89:
60:3a:f9:de:9b:ee:6f:1f:4c:65:81:12:0b:f3:60:
32:5e:3a:36:32:c0:7e:df:ed:ed:1e:a5:94:b7:76:
6f:2b:74:d7:af:c2:ad:99:73:56:d4:71:3e:0d:0a:
04:04:6d:dd:4e:fb:d6:87:94:18:95:be:80:4b:d6:
b2:1f:cc:21:e1:db:cc:d9:f7:8a:a7:16:9a:d6:02:
69:00:30:19:66:b5:ac:30:77:64:1e:cd:a4:93:30:
1c:4f:01:0e:d3:eb:60:f1:84:9d:7d:53:c3:5d:b6:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:A5:A2:37:F0:34:88:F9:EE:B8:7F:CC:40:22:25:A4:48:B5:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d57e5a2f-9549-3ec7-803f-86a098139fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:71:9a:8d:86:06:7f:5a:fb:e7:38:10:24:a4:95:3f:c4:24:
2e:6a:c1:74:99:f4:b2:07:a2:4d:71:e5:de:2b:2b:8c:3a:91:
85:f5:85:45:9d:ac:59:c8:ff:d7:d3:4c:a9:06:73:9a:83:26:
b6:5d:84:c8:da:bb:53:aa:a8:ab:31:c5:b3:4d:9a:61:e8:57:
f9:f6:ab:67:ab:7c:b6:09:f2:27:10:6c:89:7b:c4:f1:71:68:
41:dc:a7:7f:29:6a:f0:80:1c:fb:c0:9a:b0:d6:63:19:3e:89:
54:6a:e3:d5:f9:ed:49:a9:be:10:4f:73:e1:cf:8c:98:d4:d9:
07:ca:aa:c8:20:b9:62:78:aa:0f:d9:ce:81:8e:6c:4c:23:02:
0c:e1:75:34:65:80:ea:e9:5e:42:84:b3:6b:2e:61:20:cc:25:
0b:71:19:eb:6c:91:25:03:58:85:2e:57:b0:2c:6f:9e:bf:3d:
2e:41:d3:f6:8c:f4:f8:b2:75:d4:bc:ea:b8:16:82:b8:60:cf:
ac:f4:28:1b:68:a5:13:b9:7d:58:e3:08:05:36:cd:ac:46:cf:
3d:b3:35:0b:3a:ca:f1:17:49:f1:b6:10:e0:7e:6f:d3:2f:fd:
df:89:6c:29:87:56:82:27:39:bb:8a:b7:ee:9b:29:e9:e2:96:
d1:f9:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:50 2025 by rpki-client