Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e362ab76-95a6-3ce1-a2da-4dc264f21f82.roa
File: e362ab76-95a6-3ce1-a2da-4dc264f21f82.roa (raw, json)
Hash identifier: e0IzneKQ0BZcl3Ra7fIDcKd07nc3J1B/E86PmmkmyiU=
Subject key identifier: A8:31:9F:B0:BC:E3:DE:3E:97:A6:28:4E:66:D5:82:1F:C1:C9:4A:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5B4655C5068063CC3D33B680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e362ab76-95a6-3ce1-a2da-4dc264f21f82.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5b:46:55:c5:06:80:63:cc:3d:33:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=668e8f4e-18d4-4e9c-bb36-1b876e5ed479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:5d:07:b2:e8:5a:ee:1d:27:2d:6f:ca:9f:
45:73:ec:df:fd:59:06:5a:75:96:bd:3f:fd:c0:16:
12:a8:45:7b:d5:ad:e6:9e:99:0d:13:dc:d4:8f:dd:
fd:21:10:32:43:03:be:df:8d:9e:f2:b5:df:ef:66:
fe:b4:e8:7e:19:95:b5:25:90:b3:e1:02:69:68:1a:
88:de:07:11:3d:99:76:9a:26:f2:e0:be:c6:98:8a:
a4:4a:37:31:e7:b1:92:e3:07:a1:79:24:06:a0:87:
76:61:32:5a:23:f3:0b:e4:73:92:64:e4:e3:58:d8:
fd:cb:06:9d:63:d0:c0:08:75:e8:16:f2:6c:b2:1a:
13:34:fa:ed:a5:c6:9f:5f:37:8b:a1:39:fa:f9:64:
2e:ee:0b:9f:6c:0d:67:05:23:1d:fe:fc:51:88:b4:
0b:a2:39:d2:d7:57:34:b5:32:bb:2b:ec:80:0f:b7:
4b:46:7f:8d:63:c7:99:49:5b:85:22:4a:47:c4:d8:
82:19:0f:04:37:36:5e:87:00:23:90:f6:a2:ff:3e:
1a:d2:8c:3e:6a:9c:48:47:ea:de:f7:52:1d:7b:8d:
b8:05:39:dd:d9:f6:42:af:7e:9f:cd:8d:98:e9:36:
35:f3:de:a0:62:6f:93:ab:9d:5d:56:fa:66:92:9f:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:9F:B0:BC:E3:DE:3E:97:A6:28:4E:66:D5:82:1F:C1:C9:4A:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e362ab76-95a6-3ce1-a2da-4dc264f21f82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:43:ba:51:49:ec:b3:ee:28:23:ff:d6:b5:e9:56:9d:00:44:
e7:8c:e7:8c:88:18:00:74:bb:0f:06:0c:c5:e0:2c:e7:b5:f0:
56:1a:c4:e7:23:08:8c:3e:2d:89:00:09:e4:1a:a8:1c:08:d3:
d0:93:32:6e:22:95:16:ba:d7:24:0e:be:84:fe:7d:31:a5:ba:
08:a3:3a:6f:cb:67:78:91:fe:4d:d1:39:3c:7d:89:4c:47:6c:
31:99:32:dd:cb:1a:55:92:5f:89:4c:1c:e9:ee:89:08:2e:d4:
5c:47:19:5d:3e:e7:f5:7b:00:78:70:bd:ca:db:46:47:68:c1:
ff:54:59:71:10:80:60:d7:75:8b:72:f5:f8:da:51:4c:4d:a8:
4b:0a:ca:54:2f:5c:95:c7:4a:31:f0:a7:96:14:b5:72:2b:d3:
d1:42:df:a3:32:e9:18:7c:7c:7b:b2:d0:49:ec:08:03:dc:7e:
1c:f7:27:28:eb:68:9d:9b:6d:a1:e2:36:78:b4:9d:53:52:65:
5b:b2:bb:f7:ee:b4:c4:c1:8e:09:6c:65:36:fe:1a:0a:21:e4:
89:09:51:c3:16:ef:3b:93:3e:97:d3:b7:a2:7c:e5:05:ba:e5:
a8:15:72:a9:1e:5d:65:8c:92:2c:81:94:21:d6:d9:7d:20:24:
c1:c2:9c:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9bRlXFBoBjzD0ztoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjY4ZThmNGUtMThkNC00ZTljLWJiMzYtMWI4NzZlNWVkNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoddB7LoWu4dJy1vyp9Fc+zf/VkGWnWWvT/9
wBYSqEV71a3mnpkNE9zUj939IRAyQwO+342e8rXf72b+tOh+GZW1JZCz4QJpaBqI
3gcRPZl2miby4L7GmIqkSjcx57GS4weheSQGoId2YTJaI/ML5HOSZOTjWNj9ywad
Y9DACHXoFvJsshoTNPrtpcafXzeLoTn6+WQu7gufbA1nBSMd/vxRiLQLojnS11c0
tTK7K+yAD7dLRn+NY8eZSVuFIkpHxNiCGQ8ENzZehwAjkPai/z4a0ow+apxIR+re
91Ide424BTnd2fZCr36fzY2Y6TY1896gYm+Tq51dVvpmkp/GaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKgxn7C8494+l6YoTmbVgh/ByUpxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTM2MmFiNzYtOTVhNi0z
Y2UxLWEyZGEtNGRjMjY0ZjIxZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENvAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMEO6UUnss+4oI//WtelWnQBE54znjIgYAHS7DwYMxeAs57XwVhrE5yMI
jD4tiQAJ5BqoHAjT0JMybiKVFrrXJA6+hP59MaW6CKM6b8tneJH+TdE5PH2JTEds
MZky3csaVZJfiUwc6e6JCC7UXEcZXT7n9XsAeHC9yttGR2jB/1RZcRCAYNd1i3L1
+NpRTE2oSwrKVC9clcdKMfCnlhS1civT0ULfozLpGHx8e7LQSewIA9x+HPcnKOto
nZttoeI2eLSdU1JlW7K79+60xMGOCWxlNv4aCiHkiQlRwxbvO5M+l9O3onzlBbrl
qBVyqR5dZYySLIGUIdbZfSAkwcKcmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:35 2025 by rpki-client