Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ddc86cd6-940f-332d-ade3-b0935f36d859.roa
File: ddc86cd6-940f-332d-ade3-b0935f36d859.roa (raw, json)
Hash identifier: 5itNfabB2a//qK1f+lVDLye9D1oPsTxug7RtXUE4AVE=
Subject key identifier: 83:19:AE:F4:5B:48:12:5A:69:34:20:EC:3A:C3:98:5C:CE:B4:5E:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96705A7B230A9704F5E58780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ddc86cd6-940f-332d-ade3-b0935f36d859.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:70:5a:7b:23:0a:97:04:f5:e5:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=77cbda3e-423a-4f48-a480-0a735d5190cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:a3:35:63:9d:14:36:2d:9f:23:2c:7e:4e:
28:64:13:b3:80:ae:88:e0:93:e6:cc:87:bf:a0:81:
44:7c:4f:ae:00:f7:3e:32:4b:cb:2b:d9:30:8f:56:
ef:c1:db:bb:e9:61:9a:b8:a3:6b:67:ea:93:d5:f1:
af:17:10:a2:2f:fe:7f:0b:c9:fc:81:ac:c7:de:d3:
c3:ff:1f:25:03:9f:5d:51:78:60:44:0f:03:86:75:
49:4e:ec:77:e5:86:28:65:cc:7e:f2:5b:20:0b:7e:
1f:5f:bd:89:f8:b4:b1:cc:c8:60:31:4d:e9:aa:00:
bf:b7:8f:bc:53:f1:f7:e2:24:29:cd:53:56:d4:98:
c7:66:22:9b:e7:bd:0f:c4:48:b3:87:0c:82:b9:15:
94:fb:b3:18:2d:24:7e:76:60:34:d3:8e:70:42:34:
4b:22:ec:f8:f1:42:7f:4c:32:85:13:7a:0a:6b:47:
50:31:b2:df:00:36:b4:70:5c:23:8f:c8:b5:12:8e:
3d:3f:cb:04:df:78:5d:d0:2d:e8:69:f1:c6:93:80:
69:ad:f9:88:fe:0d:4c:a6:d9:a2:14:ab:d5:c1:91:
66:26:41:2a:b7:9f:d6:8e:ce:aa:ff:09:ff:92:1f:
14:19:32:94:0d:9f:6c:67:5a:e8:fd:f7:7f:8d:bf:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:19:AE:F4:5B:48:12:5A:69:34:20:EC:3A:C3:98:5C:CE:B4:5E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ddc86cd6-940f-332d-ade3-b0935f36d859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:07:21:85:d3:fd:46:0e:c4:a2:74:57:ac:d8:04:ae:8a:6e:
90:06:04:32:ef:2b:ce:f3:06:28:aa:56:42:ea:a7:95:e6:2b:
cf:c0:b4:1c:23:51:74:f3:d6:c4:3f:92:32:c2:6a:64:ed:52:
d3:8b:f4:fc:8d:4c:9b:4e:de:f8:9c:ca:14:4c:47:4d:d5:72:
73:e4:f4:d0:5e:d8:08:7c:69:04:5d:21:bc:33:ad:3d:8e:a4:
c0:88:76:e2:8e:6b:0f:4f:77:65:4d:0e:2a:fe:88:56:c9:24:
2c:66:d1:fd:ca:28:e1:54:ff:58:e4:ee:16:8f:50:5c:28:3a:
f5:60:b9:e7:2c:e0:05:7f:2f:9c:62:f4:3a:71:85:69:9b:63:
6f:b1:10:16:e2:18:0e:bf:2b:98:76:03:a6:f2:63:38:1d:64:
c1:6b:02:1a:ad:19:58:25:a8:2e:8a:aa:40:ad:8f:04:7e:e3:
44:8d:9e:13:17:d8:bf:1c:68:e9:d2:1e:7c:f7:5f:38:e8:9a:
70:af:6f:cc:e6:ef:fc:f2:52:0f:2a:96:03:6e:10:f2:ef:09:
5a:28:54:2a:3d:f1:06:72:7a:81:60:55:ab:d8:53:99:28:0a:
ac:41:1b:e1:d6:77:96:81:72:e3:65:8e:b9:78:f3:da:fa:d4:
33:03:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:56:11 2025 by rpki-client