Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd0a6e3c-529f-3d90-8ce5-c3a088224603.roa
File: fd0a6e3c-529f-3d90-8ce5-c3a088224603.roa (raw, json)
Hash identifier: h3o4VXy2u/dqkImXAFTbwzuyNccHJHsdMop1idw9hL0=
Subject key identifier: 6D:5A:3C:ED:B4:8D:11:39:6E:88:8C:D1:8C:CA:0F:4B:FC:D0:D5:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCEF5034FB546CDE2DD682340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd0a6e3c-529f-3d90-8ce5-c3a088224603.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 54.64.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:f5:03:4f:b5:46:cd:e2:dd:68:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=e5c2649b-fa4d-475c-9d45-e551c5128d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:ae:04:b9:b4:0e:09:21:73:49:94:8a:0c:
4e:48:17:60:22:16:52:2f:00:ca:05:88:35:c2:ef:
33:1a:b6:ad:6f:77:a9:84:89:fb:b1:7c:50:e3:21:
ef:e7:a2:a1:50:e8:01:ea:87:f3:3e:d9:85:0a:27:
e9:72:11:55:bc:a6:42:99:2f:97:eb:98:d4:d9:ff:
44:ce:17:b0:80:15:ca:78:ad:1a:a9:ac:60:06:1c:
25:6f:53:c4:b4:d7:81:b7:36:7c:17:b8:93:00:10:
9f:e1:90:d1:dc:2c:e0:e2:b3:e9:82:e0:71:1c:a7:
90:be:36:b2:2c:64:87:7f:0e:80:af:8e:0d:2f:f9:
ad:6e:0a:d6:bc:fd:62:58:d5:5c:c3:16:9d:e4:80:
c4:09:cf:eb:ed:60:0f:55:d9:1d:db:e2:74:8e:e6:
d0:31:1d:ec:a0:71:a7:43:24:64:2d:14:33:71:58:
0a:98:f9:01:ad:f5:c8:59:41:b5:41:1e:f2:98:ee:
ba:4a:08:d5:1c:6c:f3:c4:06:5c:ed:2f:32:af:5b:
0c:24:c3:80:65:51:43:88:4d:78:75:2c:5d:bc:0f:
bb:50:cb:86:8a:2a:8a:13:1f:63:5b:d6:25:ed:cf:
62:7f:d4:c9:72:c5:fb:cc:5c:25:a3:d5:f8:e1:26:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:3C:ED:B4:8D:11:39:6E:88:8C:D1:8C:CA:0F:4B:FC:D0:D5:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd0a6e3c-529f-3d90-8ce5-c3a088224603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.64.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:44:1a:12:f7:79:93:99:45:11:b1:ad:43:0f:19:53:67:51:
3f:ec:b1:52:ba:24:19:b4:60:f3:e6:fb:96:11:a1:12:43:79:
51:5e:64:7f:aa:a4:d5:32:65:d8:27:5f:20:0e:ce:a2:22:81:
df:51:fa:b2:2c:a0:fd:0e:34:be:88:ed:dd:97:ad:14:71:5a:
2b:e4:c6:14:33:95:19:6e:40:b4:ba:16:17:99:cf:e2:28:a9:
36:5f:69:6d:60:52:1c:1f:1e:70:15:f3:8d:ef:cc:01:58:d8:
50:c7:d3:54:a6:b4:04:93:1e:cd:dc:bb:fb:55:d2:66:7d:a8:
d1:47:05:e3:9d:cd:0a:e4:97:7c:5b:2c:60:08:d5:75:8d:04:
2a:af:f4:d3:e9:bc:bf:54:90:fb:4b:bc:52:cb:59:7c:f4:ff:
1d:5f:30:6a:fb:8a:59:6b:3f:06:71:54:b7:7b:f7:88:48:5b:
ac:d0:7f:d7:6d:ce:33:58:e5:1c:a2:1c:bc:27:87:2d:0b:32:
1f:53:71:1f:3a:df:1b:07:16:f9:4a:5e:26:c3:fd:f6:ab:6e:
9b:46:56:9f:82:45:45:47:6e:1d:c3:e0:19:7f:05:07:5e:9e:
3a:16:1f:81:ee:14:b3:3e:b0:eb:8a:8f:35:a1:76:e8:44:3f:
fc:0b:66:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/O9QNPtUbN4t1oI0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTVjMjY0OWItZmE0ZC00NzVjLTlkNDUtZTU1MWM1MTI4ZDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsmuBLm0Dgkhc0mUigxOSBdgIhZSLwDKBYg1
wu8zGratb3ephIn7sXxQ4yHv56KhUOgB6ofzPtmFCifpchFVvKZCmS+X65jU2f9E
zhewgBXKeK0aqaxgBhwlb1PEtNeBtzZ8F7iTABCf4ZDR3Czg4rPpguBxHKeQvjay
LGSHfw6Ar44NL/mtbgrWvP1iWNVcwxad5IDECc/r7WAPVdkd2+J0jubQMR3soHGn
QyRkLRQzcVgKmPkBrfXIWUG1QR7ymO66SgjVHGzzxAZc7S8yr1sMJMOAZVFDiE14
dSxdvA+7UMuGiiqKEx9jW9Yl7c9if9TJcsX7zFwlo9X44SZ+CwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG1aPO20jRE5boiM0YzKD0v80NWHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmQwYTZlM2MtNTI5Zi0z
ZDkwLThjZTUtYzNhMDg4MjI0NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDNkAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADUQaEvd5k5lFEbGtQw8ZU2dRP+yxUrokGbRg8+b7lhGhEkN5UV5kf6qk
1TJl2CdfIA7OoiKB31H6siyg/Q40vojt3ZetFHFaK+TGFDOVGW5AtLoWF5nP4iip
Nl9pbWBSHB8ecBXzje/MAVjYUMfTVKa0BJMezdy7+1XSZn2o0UcF453NCuSXfFss
YAjVdY0EKq/00+m8v1SQ+0u8UstZfPT/HV8wavuKWWs/BnFUt3v3iEhbrNB/123O
M1jlHKIcvCeHLQsyH1NxHzrfGwcW+UpeJsP99qtum0ZWn4JFRUduHcPgGX8FB16e
OhYfge4Usz6w64qPNaF26EQ//AtmPg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:36:50 2025 by rpki-client