Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9d159b5-2c16-3d10-8651-f9dc947241dd.roa
File: f9d159b5-2c16-3d10-8651-f9dc947241dd.roa (raw, json)
Hash identifier: OJ/updMWza4zAZ5ldG2wZT71ufyQqc4DJn1ExTmaotE=
Subject key identifier: BC:3E:D9:E7:44:C8:12:99:64:0E:F9:23:37:77:0B:B9:2B:E6:21:AA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD8CF92E8B2A176809D721D8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9d159b5-2c16-3d10-8651-f9dc947241dd.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.144.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:8c:f9:2e:8b:2a:17:68:09:d7:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=762cc5bd-07d2-4354-b662-9647785619f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:5a:ec:7a:61:67:43:2f:1a:85:bd:0f:5b:
22:99:9c:18:78:07:bc:c2:6f:81:89:37:fe:0f:48:
8e:43:5c:47:f6:91:0c:f9:7b:ad:a5:a3:1b:f2:71:
a8:f4:88:f5:0d:1c:aa:cc:4b:7d:f6:08:df:6f:54:
49:8f:fe:5c:a3:3d:4b:3c:38:2f:6f:ca:6c:af:44:
49:58:69:ad:fb:1f:1f:c4:8a:78:0b:90:f1:bc:a1:
74:ec:28:34:3d:74:0b:b0:7e:15:07:cb:9b:3f:c0:
f2:02:e1:f1:89:0f:ce:a6:ec:9e:37:41:61:40:e5:
0d:71:b6:93:70:b5:b9:18:ba:9b:08:3a:ab:14:0f:
1b:6f:ef:e1:af:2b:bf:f4:42:29:9c:4e:19:68:35:
e2:32:9b:c2:ef:63:7f:ca:71:e4:54:3c:63:a2:0f:
1e:ba:66:e4:ea:21:5a:49:66:20:19:7d:d5:c7:2c:
a5:e3:73:15:80:11:84:7a:14:b0:95:d8:c8:b0:a8:
34:6c:4e:60:3c:9b:6e:40:15:d1:10:03:ac:a7:27:
00:7b:82:79:d0:4b:aa:04:6a:13:7d:b6:5a:a6:83:
38:6c:ee:4e:b1:e9:76:93:59:33:3c:43:69:1c:14:
8c:b4:ae:36:bc:67:3b:4e:18:cb:2a:12:cd:e6:54:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:D9:E7:44:C8:12:99:64:0E:F9:23:37:77:0B:B9:2B:E6:21:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9d159b5-2c16-3d10-8651-f9dc947241dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f6:f0:05:c9:a7:f8:02:46:ea:1b:52:46:5a:bf:d1:c5:fa:
d7:2c:7f:5b:a6:95:f2:3e:ff:49:24:83:c2:6e:fe:5d:94:f7:
1e:56:ba:2a:ec:0c:60:12:3f:07:15:39:5d:22:e2:07:eb:18:
84:9d:ca:a6:7b:7a:3a:65:c2:98:ed:19:fd:03:55:d4:dd:d2:
8d:5b:f3:05:1f:e4:fb:f0:ae:e9:a8:e4:7f:65:c9:a7:66:76:
50:87:92:27:d6:f9:6a:13:21:60:ba:7f:20:64:a7:57:00:80:
90:45:8f:e2:2c:6d:ad:13:70:fa:0c:96:4b:e6:4b:fe:77:d7:
44:b1:2f:18:3f:60:c8:ee:66:97:dd:10:60:97:d8:eb:d1:41:
07:60:ff:25:e3:40:05:68:88:0b:15:3b:0e:ce:3b:19:94:9d:
ba:b6:94:a9:3d:25:96:ee:0e:52:5c:07:17:2b:21:be:06:83:
e1:41:90:11:c8:33:54:e9:0b:8b:7b:58:37:2d:9e:7a:fb:ab:
26:46:6e:b6:66:02:de:f6:12:8b:55:fd:55:6a:37:fd:8e:e0:
8e:30:75:c4:65:88:0c:a9:20:2d:bf:3a:ff:50:49:26:26:34:
27:d1:2d:1d:b5:86:c5:d9:7a:b8:66:42:80:6c:07:93:6b:28:
71:43:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:19 2025 by rpki-client