Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d74bfd55-352f-3e74-bf5c-60724a8ae8bc.roa
File: d74bfd55-352f-3e74-bf5c-60724a8ae8bc.roa (raw, json)
Hash identifier: c0YRk/x+ztpSsPUHc27Es9GPOB6A7hOW368MhTJYGZE=
Subject key identifier: 23:D2:68:55:30:96:18:77:FD:75:71:C2:93:5C:9F:25:D6:EB:89:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BB8B5FE211485DE6979A4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d74bfd55-352f-3e74-bf5c-60724a8ae8bc.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:b8:b5:fe:21:14:85:de:69:79:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=56091c6b-e863-4bed-b008-01b2b58fcc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:a1:cb:85:55:23:f6:9b:73:cc:9f:33:b9:
19:4c:19:15:dd:07:fe:18:44:74:6c:3e:ed:01:ff:
03:9c:7c:ed:81:9a:e1:ea:eb:47:da:22:42:42:fa:
8d:6b:b8:6e:55:17:b6:ee:28:8a:3c:d9:7f:da:db:
30:ab:be:94:21:57:42:99:39:3d:2a:87:a3:a1:ba:
59:81:5b:3e:80:31:cf:08:8b:0e:16:eb:0b:eb:4b:
49:7a:a4:2e:be:61:c0:87:92:8d:e6:57:c2:76:3e:
cd:53:9e:5a:d6:c7:d7:e8:05:80:89:f6:e5:e1:48:
9b:e8:a6:f3:c3:52:ad:34:d4:bd:97:10:04:f5:33:
77:76:da:43:cc:fc:3b:27:a4:29:e4:00:13:b4:f2:
55:6a:a7:20:04:db:f0:f2:d6:9c:f8:a6:28:bb:63:
a3:b4:c2:98:49:60:9e:02:05:41:d0:ff:79:91:67:
ef:d5:d6:58:4d:3c:ae:78:42:a5:81:92:12:8a:c5:
57:ea:e4:a3:a1:d4:67:30:51:54:97:e3:b2:82:b7:
9e:14:9a:ba:dd:78:de:f8:11:7e:91:46:f4:33:eb:
40:2f:1b:96:47:2f:a6:fa:e2:10:e8:d2:35:ca:80:
7d:b7:01:52:d5:28:7f:e7:bb:95:ef:5b:bf:41:10:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D2:68:55:30:96:18:77:FD:75:71:C2:93:5C:9F:25:D6:EB:89:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d74bfd55-352f-3e74-bf5c-60724a8ae8bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:f9:2a:c9:2b:72:b3:db:c3:a0:1e:7f:d3:49:19:75:e4:be:
c6:43:bf:0c:4a:80:f3:8c:8c:26:37:8b:5d:c1:ff:53:be:65:
e1:d8:35:1f:1b:06:ce:30:0d:a5:d4:b0:b2:07:0b:28:d3:d0:
4e:4e:0f:cf:76:6a:8c:59:34:fd:cc:50:0f:e2:1e:d2:73:49:
61:b6:6d:e0:a9:af:74:e2:89:61:a9:e5:42:91:4b:d5:ac:9e:
ea:e7:6d:38:e7:37:fc:81:82:c2:88:8d:20:e1:54:5e:1b:49:
0b:8d:99:8d:17:24:82:2c:21:26:24:f5:72:5f:33:2e:ed:d4:
d8:d5:cc:b1:67:10:fc:0e:a1:5a:94:7c:d1:72:62:12:7a:3b:
f9:b1:59:7c:4c:d8:13:b4:c6:18:f3:63:b1:63:27:16:f2:dc:
01:08:88:02:f9:76:a7:f8:b7:f6:6a:3a:92:75:2c:a3:ea:5e:
e0:9c:dc:b1:c1:d6:13:ed:c6:b5:56:9c:80:65:28:8d:af:ac:
1f:93:19:ff:45:de:e7:1c:db:0e:23:6e:93:3d:a4:7b:fd:75:
5a:ef:25:60:18:1b:8b:50:7a:3a:b8:ec:25:36:5d:ce:15:65:
d3:3a:bb:98:89:0c:6e:29:63:61:db:22:e2:6b:5a:89:a2:4c:
8e:57:dd:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0LuLX+IRSF3ml5pMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTYwOTFjNmItZTg2My00YmVkLWIwMDgtMDFiMmI1OGZjYzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSWhy4VVI/abc8yfM7kZTBkV3Qf+GER0bD7t
Af8DnHztgZrh6utH2iJCQvqNa7huVRe27iiKPNl/2tswq76UIVdCmTk9KoejobpZ
gVs+gDHPCIsOFusL60tJeqQuvmHAh5KN5lfCdj7NU55a1sfX6AWAifbl4Uib6Kbz
w1KtNNS9lxAE9TN3dtpDzPw7J6Qp5AATtPJVaqcgBNvw8tac+KYou2OjtMKYSWCe
AgVB0P95kWfv1dZYTTyueEKlgZISisVX6uSjodRnMFFUl+OygreeFJq63Xje+BF+
kUb0M+tALxuWRy+m+uIQ6NI1yoB9twFS1Sh/57uV71u/QRCiVQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCPSaFUwlhh3/XVxwpNcnyXW64leMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDc0YmZkNTUtMzUyZi0z
ZTc0LWJmNWMtNjA3MjRhOGFlOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCNtgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU/kqyStys9vDoB5/00kZdeS+xkO/DEqA84yMJjeLXcH/U75l4dg1HxsG
zjANpdSwsgcLKNPQTk4Pz3ZqjFk0/cxQD+Ie0nNJYbZt4KmvdOKJYanlQpFL1aye
6udtOOc3/IGCwoiNIOFUXhtJC42ZjRckgiwhJiT1cl8zLu3U2NXMsWcQ/A6hWpR8
0XJiEno7+bFZfEzYE7TGGPNjsWMnFvLcAQiIAvl2p/i39mo6knUso+pe4JzcscHW
E+3GtVacgGUoja+sH5MZ/0Xe5xzbDiNukz2ke/11Wu8lYBgbi1B6OrjsJTZdzhVl
0zq7mIkMbiljYdsi4mtaiaJMjlfd9w==
-----END CERTIFICATE-----
Generated at Tue Jun 17 05:10:09 2025 by rpki-client