Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7c346fa-e49c-3cc6-bcd5-9e61e22f011d.roa
File: f7c346fa-e49c-3cc6-bcd5-9e61e22f011d.roa (raw, json)
Hash identifier: HiX595YjH0YUSq95hhg1ijikd2loFfKN1jdb2rs7YWc=
Subject key identifier: F9:09:9A:26:3E:97:9D:42:4A:A0:CF:B2:D1:CB:A8:30:1A:11:1D:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6E8F1346A18FBF01B0151480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7c346fa-e49c-3cc6-bcd5-9e61e22f011d.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.240.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:8f:13:46:a1:8f:bf:01:b0:15:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=8416fe51-eb8e-4711-99f7-fc8d6e852f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:62:f7:95:5f:3b:76:78:45:ff:c6:de:ef:
c1:97:1b:3f:8a:d1:a6:eb:ea:9a:2f:8e:45:90:86:
c9:db:0b:ea:45:29:8c:65:cf:06:2a:a3:81:ab:c3:
1f:1b:f0:fc:05:b7:a9:ac:ba:99:d6:a0:39:52:3a:
1d:95:1f:7d:a6:e7:e3:15:d0:bf:e9:b4:42:c9:96:
0b:58:36:ad:73:cc:73:81:e7:9d:f6:ba:56:80:68:
c7:b8:47:51:d1:b5:f6:b9:db:9d:bb:91:75:e7:b0:
0b:21:91:b7:c3:8d:fd:0d:d6:c8:da:4c:97:36:dc:
45:00:75:ee:27:d5:05:c7:ce:01:dd:16:d0:22:34:
03:96:c1:4b:19:c5:a2:50:24:37:37:fc:fc:98:af:
34:32:84:3a:82:7b:27:5f:64:ab:2d:12:7d:99:06:
8d:35:18:1f:2c:cb:a4:b5:4a:0e:d0:89:2a:b0:b1:
3a:3b:bf:13:90:55:d8:f1:09:74:09:ff:19:ee:16:
18:23:e5:0f:37:e7:cc:c1:5b:64:c3:31:ff:e5:84:
bf:0b:88:bd:01:81:49:d9:6b:4b:ca:ef:6e:1a:a1:
c6:64:56:dd:13:d5:ef:b0:de:76:48:01:e7:b9:26:
e8:c3:09:ee:71:c0:10:02:37:f4:83:62:a8:2c:d4:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:9A:26:3E:97:9D:42:4A:A0:CF:B2:D1:CB:A8:30:1A:11:1D:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7c346fa-e49c-3cc6-bcd5-9e61e22f011d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.240.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:d0:ab:d1:e1:19:75:38:86:12:75:30:88:a1:57:a3:a8:2f:
f9:99:9e:bb:55:20:d2:7d:0c:c6:f4:3b:68:35:9e:55:3f:cd:
7a:89:78:14:66:2f:93:66:8e:7f:be:37:89:96:74:66:52:0f:
17:72:72:90:54:e5:36:0d:93:8d:24:84:29:15:c9:8d:6f:7b:
e0:55:06:0c:42:f3:5e:71:5e:65:a5:39:3a:6d:55:31:de:7d:
ae:c1:ae:82:65:ce:19:a2:67:2a:27:69:d8:a1:51:a1:83:dc:
2c:1d:d1:02:59:e0:c8:1c:28:d8:ef:04:b8:93:39:f3:b8:74:
92:48:cb:5f:7d:a1:63:8e:8d:7e:8d:3b:ad:f9:64:25:be:60:
61:30:4d:0f:fa:75:5c:59:5d:a0:17:20:a1:05:64:2e:54:a4:
72:31:ee:7a:66:a4:d6:14:6b:d9:95:67:c9:4f:94:91:91:29:
26:36:a0:c8:f1:e0:2b:d5:16:60:47:97:33:3e:6d:00:97:ce:
40:3a:de:6a:10:ea:cf:39:b4:3e:80:a8:2f:84:f2:3c:35:11:
b1:dc:35:51:ae:7a:ae:f2:11:2f:a1:a4:df:41:1e:bd:ef:b3:
f8:66:46:e2:98:dd:d3:6a:62:32:ce:74:62:a4:6c:e4:ac:80:
9d:8b:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:55:37 2025 by rpki-client