Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e45cfe82-2120-352d-b27d-59adbd32434d.roa
File: e45cfe82-2120-352d-b27d-59adbd32434d.roa (raw, json)
Hash identifier: KxYFox8HVpBu6ljErDUxvGmaaLN+Tj5Okr9ZA6OrMm4=
Subject key identifier: 32:41:80:E5:A9:65:A1:EA:F9:94:04:03:90:34:20:EC:38:9A:2C:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE438398C752D5057EFD83900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e45cfe82-2120-352d-b27d-59adbd32434d.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:38:39:8c:75:2d:50:57:ef:d8:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=f856a84b-1772-4e94-9956-799c866911b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:c8:9b:cd:a8:17:cf:0c:95:61:5e:bd:44:
e8:5a:58:d8:6b:7e:4b:15:3b:85:9d:f2:86:c7:b5:
16:74:2a:b8:c8:65:4f:4a:bb:ed:16:04:c6:71:60:
7f:f1:9e:aa:8b:02:cb:2c:a5:c4:a2:96:94:d8:8d:
6f:52:2b:e3:99:03:25:7a:9f:e7:16:c3:1d:44:28:
87:cf:01:d7:6b:6f:1e:86:1c:6a:9f:c6:13:a1:84:
0d:f2:da:8f:41:13:23:21:35:b0:a3:cf:60:15:cd:
ec:ae:25:60:6a:02:a0:91:2a:76:64:81:3e:62:97:
f2:b4:8f:cc:7b:18:9b:1f:cf:b8:5c:2b:3d:24:c5:
fe:04:0d:89:33:3f:5b:52:19:a5:78:f0:fa:a1:b2:
f1:94:63:4f:10:24:1d:2e:17:95:11:78:fb:c6:26:
61:35:cf:a8:fd:a9:9e:c8:c0:62:a7:22:90:23:9d:
f8:78:c9:f3:2c:e5:b9:f6:21:64:ab:4a:b8:86:0f:
b5:f2:4d:83:75:1f:a3:31:7d:f0:08:80:e7:43:0b:
94:40:fe:c1:32:87:76:34:b4:aa:de:0c:b6:0c:b2:
26:62:21:35:7a:0d:1d:92:27:09:45:e3:0e:7a:0c:
9e:aa:87:94:95:61:61:ab:d2:4b:17:da:70:a1:ba:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:80:E5:A9:65:A1:EA:F9:94:04:03:90:34:20:EC:38:9A:2C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e45cfe82-2120-352d-b27d-59adbd32434d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:7b:48:66:ed:54:d1:50:4c:85:f2:4f:25:ed:dc:50:ba:d4:
1a:91:ba:2d:8a:40:77:18:64:18:19:25:7a:d9:09:61:f5:9a:
03:6e:76:4b:84:f3:9b:2d:05:a3:26:e7:7b:84:1a:d0:79:a3:
3e:5a:26:f1:a2:c3:5c:86:f0:e3:4c:1f:8f:9e:df:e6:4c:d4:
08:4d:44:f0:f6:55:9f:9f:4a:fa:f7:9e:42:2d:50:f6:54:1e:
f9:47:77:16:94:6f:07:9d:d0:da:32:1d:fe:91:7f:a6:f6:ad:
1f:36:f8:21:21:d3:b3:10:cb:27:ec:d2:54:f0:bf:ad:b4:d5:
53:6d:45:ce:56:f6:e2:8b:d4:91:bb:47:1b:99:c2:99:06:89:
f0:5f:df:28:e0:c2:7a:ca:ce:4c:b3:2f:00:33:ec:75:e5:59:
79:f9:ad:a6:10:05:bc:c7:a5:b1:cd:af:25:7c:07:70:95:72:
90:9f:17:dc:c1:30:d9:e7:d5:16:bc:0b:2b:01:b8:d7:38:4d:
05:8a:93:a7:62:b4:e6:5d:92:2b:26:79:4d:42:4f:ed:82:54:
da:ad:81:32:e2:5e:0a:4b:32:39:c5:44:ee:c4:e8:0e:74:c3:
49:7d:e5:7a:b6:e0:ff:37:5a:9d:b5:d5:91:d5:66:a6:0e:3a:
dc:9e:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:52 2025 by rpki-client