Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8dbf270-112e-33ef-966f-62f7b89dbd68.roa
File: e8dbf270-112e-33ef-966f-62f7b89dbd68.roa (raw, json)
Hash identifier: 7jk5u53uwM8RQ+SW9Y7L/4LQqVYGeTXSFYupE1M4T0M=
Subject key identifier: 1E:11:14:B5:68:9E:19:02:E8:CA:7B:5D:8B:7E:ED:00:AE:9D:CD:6B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F83C14115D12935C0A0EA8310
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8dbf270-112e-33ef-966f-62f7b89dbd68.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:c1:41:15:d1:29:35:c0:a0:ea:83:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=bf2e587d-9746-4d3e-bbfa-484e61e6c2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:2b:06:5f:78:bd:ae:7a:de:83:27:7b:20:
d7:42:0a:88:b0:c8:62:ae:a7:63:c4:70:6c:e3:0e:
e3:13:01:10:54:1f:77:b4:a0:53:9f:05:9f:f3:38:
8d:5a:b8:25:2d:a3:7d:50:bc:95:d2:27:57:f7:e5:
71:56:2f:9b:07:9b:eb:07:d3:04:61:8f:1d:b0:3e:
62:97:3d:a1:05:3d:d3:b3:b1:11:de:56:5f:db:21:
47:56:56:18:b3:86:af:96:38:4f:f8:b3:f2:4b:6d:
c6:ea:bc:1a:33:24:6d:35:ba:4e:08:21:58:80:87:
ca:5e:23:c0:5b:a0:cc:ca:75:64:bb:0d:c3:34:78:
0b:75:83:d0:ec:bf:0c:d5:be:dd:72:13:9e:91:31:
5f:55:1f:f5:ca:76:22:e0:68:e0:b9:f2:be:74:89:
93:3a:4e:7c:d9:d1:bc:45:a9:d3:bb:fd:56:9a:65:
8a:47:b7:40:31:9c:da:5e:00:bc:7f:5c:ee:e7:e4:
4c:41:eb:1c:3b:59:1f:45:22:8f:a4:86:61:61:47:
c4:8a:2e:a6:63:9d:71:bb:9f:48:d1:42:43:c7:6e:
f2:da:75:b0:7e:be:09:c1:a1:f6:4a:68:01:f3:b5:
03:3f:0b:8b:6e:eb:a3:4b:8c:6c:00:9f:d0:66:d1:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:14:B5:68:9E:19:02:E8:CA:7B:5D:8B:7E:ED:00:AE:9D:CD:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8dbf270-112e-33ef-966f-62f7b89dbd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:e1:a7:18:9f:f9:4c:d3:9e:ec:67:9b:8d:8f:0f:2d:8f:2f:
66:9d:90:c1:4a:a6:df:fb:e7:f0:ad:b7:7f:d9:f7:9d:81:7b:
b5:28:f6:89:2e:c8:a0:d0:d5:b1:ea:6d:94:2c:6b:ea:f9:5c:
c7:c5:e0:c0:33:74:72:8e:87:58:0b:e8:09:c7:76:8c:3f:30:
be:0f:4e:a3:16:ee:f5:29:d3:a1:72:97:26:18:b5:36:2a:32:
de:3a:ae:cf:fb:07:f7:ae:23:2d:2a:2d:fb:ef:71:35:91:36:
82:84:71:ff:04:50:74:61:22:25:ea:93:88:79:23:a9:ce:dd:
04:38:14:1d:4e:b1:10:ef:82:1a:59:23:a5:87:57:3d:d2:55:
b6:9a:27:f5:d0:fb:bf:8a:2e:fd:5e:3b:7c:97:fb:34:e9:fb:
da:7b:ea:44:d8:03:6f:16:05:67:44:7c:0f:c5:44:a8:5e:d8:
59:71:be:82:fc:f4:29:56:99:03:89:99:c8:9d:37:74:a9:5b:
41:20:b0:70:0b:75:45:1d:3e:c6:1c:5e:ba:64:d0:86:47:61:
25:ff:eb:34:f1:70:17:0d:ec:b7:28:c5:7a:60:c2:b3:43:0e:
9f:e4:b4:6b:2d:4a:2f:e0:af:46:3a:a4:b9:42:1b:70:93:5a:
c8:8e:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:19 2025 by rpki-client