Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d94b1476-b298-3c31-8c8f-2234e5def53b.roa
File: d94b1476-b298-3c31-8c8f-2234e5def53b.roa (raw, json)
Hash identifier: h7UL+F3L5Rv9563DzL9ywAGF/tpHc+p/E3Rz6ji+8pQ=
Subject key identifier: 2E:0B:38:D1:50:E9:2B:59:F3:B9:17:4F:0D:15:B2:D5:2C:A5:21:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D811E181357E1092A72091B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d94b1476-b298-3c31-8c8f-2234e5def53b.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:1e:18:13:57:e1:09:2a:72:09:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=3ede140d-7cf9-403d-9f29-1cac694c3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:32:9f:82:64:70:9c:97:52:d9:4c:ac:31:
a8:4c:c8:61:dd:e6:8d:a9:5d:c7:8a:68:e7:2a:ea:
d2:2d:e3:8b:21:93:15:7c:b3:a4:b8:8e:e8:6d:d7:
45:d9:de:f8:df:42:53:b7:4e:ef:32:53:c0:f9:1f:
b3:97:4f:87:a7:aa:7b:81:d7:cc:c6:30:e5:cd:8a:
8a:72:0c:11:8a:79:d0:b2:d6:b3:e5:f5:e9:da:17:
08:1f:87:c4:8f:df:a9:41:ae:47:cf:cf:d1:ca:b3:
cb:1f:3a:ab:d1:e3:ec:30:b4:58:de:f5:18:89:af:
ec:af:2d:2f:e7:a6:57:d3:e9:d0:c9:8d:09:97:f7:
58:ba:d5:1d:6d:11:00:09:cd:a4:a1:7b:fc:77:d4:
8b:ac:c8:96:36:52:4b:f5:eb:0f:72:c1:ee:53:b3:
d1:31:ed:df:fd:46:79:05:d7:d9:8f:24:03:0c:26:
60:72:e8:5e:cb:38:b2:1d:7a:8a:27:67:c9:43:8a:
c6:b6:41:7f:f0:d3:a8:30:30:29:8a:d9:0a:cc:78:
30:d3:b0:1d:61:c6:8b:ce:b0:1a:95:74:00:32:cf:
0f:8f:2f:b1:34:8e:30:0f:17:b8:5f:02:69:af:43:
4d:c7:ac:fa:04:e4:fd:de:83:d4:8b:c0:c8:14:d8:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:38:D1:50:E9:2B:59:F3:B9:17:4F:0D:15:B2:D5:2C:A5:21:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d94b1476-b298-3c31-8c8f-2234e5def53b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b9:78:37:8c:2f:52:d5:bc:e0:ca:a1:60:82:97:ed:65:b8:
94:08:75:72:83:d8:71:0b:6a:96:af:0d:26:bd:3f:08:77:4d:
96:c7:f6:02:49:4f:6c:f6:0f:3d:e5:64:56:6b:94:81:89:0e:
6d:15:79:49:43:e8:8c:e3:fd:e3:ea:62:ee:e6:1b:e6:0f:53:
bc:5e:a4:23:a7:52:41:6c:c5:d9:ba:82:e2:e8:19:9b:3b:f8:
b9:4a:d2:52:ab:ca:be:aa:9c:43:87:72:06:13:b8:18:f9:44:
5e:f9:14:be:2a:fb:fa:67:79:88:ab:af:a2:d2:19:91:02:5f:
26:cb:da:e5:92:4a:c7:be:e9:25:23:3b:35:ac:e5:3c:7f:f8:
10:e3:32:91:6a:9d:27:c4:41:71:ab:95:03:dc:df:0d:30:6d:
6c:bd:8a:4f:c7:49:07:5a:84:d8:0d:75:64:5a:54:3a:51:92:
d9:06:16:c7:97:9e:54:46:01:90:65:b5:31:05:90:6c:ce:5d:
8f:3a:b5:a6:61:22:14:1b:77:ed:f2:50:e0:1b:f5:29:fa:de:
84:dd:80:79:85:b9:ee:be:fe:fa:22:bc:de:b9:87:cc:77:77:
57:ce:32:3b:45:b3:32:d7:81:af:2c:1b:a2:7f:0a:61:c6:ce:
88:03:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:10:15 2025 by rpki-client