Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f29e99eb-8675-3d4a-8c42-630f4e37c648.roa
File: f29e99eb-8675-3d4a-8c42-630f4e37c648.roa (raw, json)
Hash identifier: piG3sR99D8n7l/rXbr1OYgmFGD6nIUPShU56saHA4tE=
Subject key identifier: 39:19:99:13:AD:1B:47:13:F7:21:F0:EB:7F:38:91:CF:E8:BA:D7:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32ADD44CD4A9E2F03303CD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f29e99eb-8675-3d4a-8c42-630f4e37c648.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:ad:d4:4c:d4:a9:e2:f0:33:03:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=319b059c-2d76-4d2b-9158-16cbb49c05d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:09:03:02:ef:20:43:12:9a:76:3b:70:00:
4a:5d:6d:bf:0e:13:6d:39:b4:76:0a:c0:ea:21:0a:
ec:b4:59:12:c2:cf:f5:f5:7a:ef:b5:2b:1a:95:ab:
9a:80:9b:1e:8b:68:ce:71:70:f6:4e:48:c2:77:9a:
81:11:8c:73:0f:91:cb:a9:72:f7:78:f7:2d:27:a5:
6c:9c:e5:1c:f6:ba:7e:0b:40:e8:4d:b6:05:6e:2a:
f6:e2:90:52:3a:a4:b9:44:dc:40:54:a8:c2:e5:e7:
13:4a:4f:ae:d3:e5:dc:e5:50:4e:cd:c1:8a:66:0f:
00:8a:f2:b5:dd:a9:aa:d6:13:a9:eb:7f:0f:30:a5:
9c:45:a4:fd:3e:a4:43:d7:89:4c:a9:be:98:f6:fe:
70:31:05:c0:71:ce:35:a2:6a:75:84:e6:df:45:c6:
a7:4d:62:e2:a5:d4:f4:08:0d:18:28:7e:17:60:2c:
dd:9a:80:77:ea:7f:9f:be:49:f0:52:d3:7c:5e:3b:
8f:82:b4:5d:41:d5:16:0d:68:65:88:d6:22:da:46:
2c:d7:97:fb:92:cc:28:72:62:b2:64:f6:8e:ec:fa:
74:42:55:16:3c:d6:8a:64:a2:de:e7:8c:a6:d9:b7:
04:4b:d8:1c:59:84:6a:db:20:4d:0e:b0:f9:ff:dd:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:99:13:AD:1B:47:13:F7:21:F0:EB:7F:38:91:CF:E8:BA:D7:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f29e99eb-8675-3d4a-8c42-630f4e37c648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:16:6f:ba:ef:b5:da:c9:b9:58:9d:2f:bd:dd:50:f8:60:bb:
9c:df:8c:e7:4f:a3:86:5e:f6:14:7a:d5:cd:a5:78:6d:c3:ae:
d5:52:85:f8:81:3f:16:4f:8a:43:79:bd:c5:eb:3b:c4:61:4e:
29:92:8b:6e:f7:82:f0:a7:39:d2:61:0a:c0:fc:d3:ff:68:81:
fd:8b:79:08:2d:57:92:d0:32:f6:cc:e2:9b:88:f4:80:03:cc:
d8:b4:0e:f2:66:58:6b:38:6e:87:68:f5:83:c5:0b:07:ad:9e:
da:92:94:e0:fe:85:e6:0a:85:0c:b4:75:51:82:2f:5b:18:2e:
73:73:0d:42:b9:5c:bb:b9:dc:c2:33:fe:4f:b7:11:00:68:a9:
3e:33:cf:1d:ef:b5:48:55:fb:d4:32:b7:ac:de:f9:dd:55:3a:
e7:00:f2:66:b5:a4:66:ff:38:50:a3:66:55:28:ac:ac:fa:64:
9d:87:71:12:3f:fb:90:ba:a7:96:36:3a:07:aa:ba:0d:ee:e8:
83:24:47:11:47:ff:19:0b:ba:9b:68:2f:e5:d6:70:ec:1e:83:
9d:a0:ca:74:08:25:54:9d:8d:6c:04:3d:b3:ae:da:20:88:82:
82:d9:9d:5d:83:20:e5:50:54:76:34:87:15:95:01:13:28:82:
06:28:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:42 2025 by rpki-client