Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d684d8ff-586e-344e-961b-c2adfc7c2a77.roa
File: d684d8ff-586e-344e-961b-c2adfc7c2a77.roa (raw, json)
Hash identifier: JXd3rQY4C005O30Ak9WBPWBJDTeg5LEkAesHPYb+UMM=
Subject key identifier: 03:7B:90:93:F8:7F:C8:60:4A:26:0D:6F:A6:5A:5C:27:35:F0:6E:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA3EB3C0EF42809C57E0C0400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d684d8ff-586e-344e-961b-c2adfc7c2a77.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:eb:3c:0e:f4:28:09:c5:7e:0c:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=844c0776-ee73-4e53-9dd4-5a78e62aab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:70:8c:43:aa:c1:26:4a:57:9b:34:b2:a2:37:
28:cb:36:e5:0e:ff:9c:a4:58:d8:12:05:c6:0b:be:
90:9f:2a:95:37:7c:b2:11:ad:1c:ff:b3:7e:e1:92:
f6:d5:d7:ae:f2:96:d3:fe:25:f4:75:62:14:b2:aa:
3b:db:b9:f8:47:08:a5:ca:52:a5:6e:7d:34:ca:5a:
91:38:14:32:46:34:7c:54:9c:24:09:30:7a:0c:34:
2e:f0:69:63:2f:32:59:c2:3a:72:97:93:8d:6a:80:
0a:20:0f:bf:71:47:61:a2:26:c7:44:c2:3a:3b:03:
b8:74:bd:d7:d5:cc:23:28:11:d1:10:e0:4d:c7:78:
54:1e:65:15:76:44:b5:62:5f:d3:1f:c1:81:e0:9e:
da:ff:15:d9:cc:dd:26:63:a1:5e:c8:8c:a5:ca:cd:
86:9d:ed:1a:4d:b9:77:e2:b6:1b:14:be:a2:24:fc:
0d:19:f9:66:8d:f4:fc:d3:54:42:2c:1d:20:ca:6f:
11:64:02:7b:88:c3:b7:31:46:ac:fa:57:c2:1c:f6:
62:af:d6:32:c8:18:aa:8f:c2:cd:b5:17:85:8e:d1:
de:bd:27:a0:d2:d5:b7:2d:c5:2e:36:3e:0e:b6:14:
d2:8d:6b:1c:dc:32:c2:cb:ce:11:a9:f2:c8:cc:ba:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:90:93:F8:7F:C8:60:4A:26:0D:6F:A6:5A:5C:27:35:F0:6E:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d684d8ff-586e-344e-961b-c2adfc7c2a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:9f:b2:fc:d4:5c:d5:c4:5c:95:bf:7c:9e:f9:7f:24:72:9a:
01:09:91:a0:99:27:5f:38:8e:d8:d7:25:d0:a7:40:b9:40:74:
89:44:52:f1:61:46:c2:0b:f9:3c:69:a4:34:fb:61:6b:38:30:
eb:21:55:f5:64:fb:a9:9c:f2:9b:a2:34:0e:bd:11:b9:56:02:
b5:4d:74:c4:a0:b3:e8:63:1c:bc:bb:68:81:90:f2:fb:59:39:
5f:8a:26:97:90:cd:11:cc:c0:7b:28:f3:0a:8b:30:75:f8:c0:
a1:8d:a7:2d:a7:99:66:06:74:65:37:12:ca:8e:31:37:9a:d7:
3a:02:4e:9e:9d:35:b6:89:96:6e:f3:97:77:17:b6:2b:4c:fb:
57:b0:b6:6e:00:c5:df:80:b7:6e:c5:16:d6:ce:c3:f2:e5:e1:
fe:10:9b:c2:1e:10:55:88:1e:12:a5:9a:57:70:c6:53:c4:eb:
33:e6:3b:78:9c:c2:22:da:c7:03:24:4d:1d:55:e7:24:4f:18:
a6:fc:30:b4:2f:3a:89:dc:3d:64:cc:5f:a9:ca:7e:c4:81:82:
e0:55:e6:35:f3:84:38:53:6a:b6:b6:fc:35:25:f5:eb:b6:cb:
7d:5a:2a:c0:94:67:6c:5e:58:19:13:59:62:42:50:8a:3b:37:
0e:f0:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:41 2025 by rpki-client