Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2d0ba35-9e84-37be-be52-f1bae077efdc.roa
File: f2d0ba35-9e84-37be-be52-f1bae077efdc.roa (raw, json)
Hash identifier: ukmgK7+xfNuNuRXmyG5iP4GA0SiBn4/S93YOJwTTdGw=
Subject key identifier: 6D:23:FC:47:F4:8E:04:F0:C7:DC:C2:47:BD:15:71:D0:6E:D1:6F:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404435F919481EAD78073E3AE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2d0ba35-9e84-37be-be52-f1bae077efdc.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:35:f9:19:48:1e:ad:78:07:3e:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=5d828322-f5cd-4df6-b348-e34eba02dfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:db:92:3f:54:be:3e:b8:ec:1c:e7:18:4e:
eb:f2:d9:70:39:16:21:24:8a:10:64:f7:b2:d3:00:
75:5c:c5:51:6f:24:de:e4:2c:42:d7:4c:cc:2d:26:
d3:80:71:ae:bc:3b:85:9a:22:72:6e:20:5c:f1:96:
6f:5f:77:19:aa:7d:2a:a3:4d:6a:94:77:dd:57:07:
36:0c:68:1b:55:b1:13:f4:5e:8c:79:1a:83:0b:ff:
8a:14:6c:c6:f0:e2:88:b0:ef:3b:48:0a:1e:14:65:
ff:71:43:d5:97:58:3a:c7:72:93:e3:ab:9a:b7:01:
45:93:53:45:a1:14:39:16:71:98:2a:ad:b2:0a:ca:
47:f8:b9:c8:f4:63:10:c6:82:75:90:f7:3f:41:33:
9a:0c:83:39:0c:47:d3:76:62:09:22:2e:76:1b:5a:
33:63:6d:b0:3e:38:93:94:88:1c:cb:7d:08:2e:05:
4a:45:55:eb:32:73:50:53:76:1d:33:28:65:69:ec:
36:cf:a0:82:a9:aa:25:fd:19:07:59:28:7d:a2:27:
78:dd:6c:7b:b4:1f:b6:d8:14:b4:c2:8e:17:61:bf:
04:58:56:2d:51:d9:86:c7:a0:a6:f6:fc:44:4a:7f:
77:16:a7:1c:63:89:88:6b:67:89:85:eb:57:a5:a3:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:23:FC:47:F4:8E:04:F0:C7:DC:C2:47:BD:15:71:D0:6E:D1:6F:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2d0ba35-9e84-37be-be52-f1bae077efdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b2:04:4c:d2:d7:75:45:30:fa:7c:b1:59:60:74:ce:10:34:
b8:68:1f:bf:cb:4a:60:66:40:c4:f8:14:2e:9c:6f:d2:90:31:
08:97:0e:1d:a0:4b:be:e7:b3:81:4e:ba:88:0f:78:5e:bf:8f:
ac:5f:3d:a9:04:bb:ff:1b:bf:dc:70:95:13:88:82:4a:48:35:
04:f0:e0:82:92:ff:71:75:d2:4b:53:5d:7d:a8:44:54:65:a3:
49:fc:2e:4c:84:ac:7a:a9:3a:53:ee:0b:ca:9e:d2:77:05:49:
cb:2d:2e:ed:01:9a:cb:4b:37:f2:88:6e:94:dd:ea:74:66:2b:
9c:f0:fe:c5:9a:09:2b:75:ff:6b:9a:f0:ee:1e:49:ac:72:ed:
a3:4b:87:cc:78:77:c0:c2:14:ca:87:62:57:72:bd:ea:9a:51:
a1:d8:4c:e1:94:fb:76:2c:23:99:f2:85:53:39:d1:44:8e:ac:
c3:3d:9b:3e:55:05:2e:33:9a:44:eb:b6:b9:8f:94:50:d6:6d:
22:44:ce:c4:9a:6c:b4:9f:46:26:e3:5a:c7:ea:de:e0:9b:4c:
76:91:7e:2f:3e:86:41:09:60:46:33:bd:32:ba:0e:71:c3:84:
26:81:31:87:f1:4e:c0:72:57:c0:ea:3c:c6:7d:06:b7:49:a8:
e8:91:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:29 2025 by rpki-client