Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd5fa389-8c8b-3a75-9990-ce706d749eb5.roa
File: fd5fa389-8c8b-3a75-9990-ce706d749eb5.roa (raw, json)
Hash identifier: FdVQi8KSUxS65FRsPiJOXajebPRRd4RtEXUYTH1Dvv0=
Subject key identifier: 38:2D:6C:6F:10:EF:BF:CB:00:B1:25:A7:16:27:40:5C:12:21:DF:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BB80A65859770BB41217880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd5fa389-8c8b-3a75-9990-ce706d749eb5.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:b8:0a:65:85:97:70:bb:41:21:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=ddb6528e-ad20-4d64-9e72-d79c7092de2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:f9:a2:40:d1:ea:b1:a6:5a:f7:5c:14:d4:
13:63:78:b5:99:90:44:65:b3:2a:ef:01:ae:a3:70:
2e:ca:78:7d:bd:b1:ea:7e:67:1e:63:24:26:47:51:
f7:ad:cc:1b:5c:a1:c7:a0:30:61:e0:65:95:16:5f:
92:85:17:08:0e:56:c3:26:e8:a4:49:55:a6:3d:f4:
21:5f:0a:fb:90:b3:77:63:b0:88:76:8b:50:64:00:
d7:90:00:02:f0:57:80:f8:8e:fa:56:ed:2e:37:5c:
6a:ff:dc:03:45:4d:bc:58:60:83:80:ab:16:12:8b:
5f:c6:bc:f6:b8:72:81:a1:8c:40:e0:da:fe:2c:d4:
ca:16:43:f8:01:f7:b3:95:2a:29:b4:72:76:65:e9:
b5:45:95:00:fe:d2:bd:8a:fa:56:d4:3e:1b:1a:71:
eb:87:fa:e1:36:91:6e:b2:b6:ef:12:85:d7:32:cc:
60:2b:0e:b1:0e:f5:85:ad:94:97:3d:eb:74:0b:d6:
a4:0b:4a:e5:c8:70:04:19:c3:f5:8c:3b:28:52:73:
65:ff:3f:0c:b5:28:d5:4e:9b:b7:96:e2:4c:1c:f8:
c2:94:ec:e6:6f:f6:0a:4b:f2:4d:67:ff:51:fc:fa:
94:11:0e:09:a8:e3:aa:8a:48:51:2d:27:d9:51:2e:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:6C:6F:10:EF:BF:CB:00:B1:25:A7:16:27:40:5C:12:21:DF:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd5fa389-8c8b-3a75-9990-ce706d749eb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:db:48:6d:e3:b4:b7:b8:f0:df:86:02:e9:ff:e1:42:80:95:
a3:ba:c3:ee:db:0e:64:b5:5c:c5:3e:db:52:df:cf:59:38:15:
d7:a2:38:bd:ad:84:8a:07:4d:ac:8d:27:b5:e5:82:da:f7:fc:
2c:87:fe:4a:00:cb:28:90:fd:43:2f:3b:b3:ab:5c:64:1a:e1:
43:26:99:42:bd:ed:a1:1f:b6:be:f2:43:81:4e:95:61:20:be:
b9:30:c7:3a:7d:48:f4:61:b2:62:b3:cc:58:4e:ce:f0:9f:51:
82:2f:8c:84:f3:a8:1c:cd:3d:3b:19:85:60:cb:7f:bc:df:82:
31:fc:07:e2:30:39:78:88:c5:79:e9:45:ff:09:5b:63:07:53:
15:d4:b8:13:3a:44:c2:99:5c:c3:f6:ac:bb:d2:38:9a:95:66:
d4:de:34:dd:f2:e1:a2:af:e5:1c:b6:26:66:4f:89:f2:17:d5:
59:e8:3a:c7:ed:ec:98:9e:2d:75:d4:e4:85:5f:61:36:83:61:
f2:d8:c8:28:d7:18:b4:c3:c7:93:05:c1:71:38:ad:72:72:ec:
8f:ec:bf:70:ea:17:61:dc:bd:62:bf:3c:33:1b:d1:70:c7:4c:
24:96:8a:b9:5b:0e:57:f2:6a:6e:9d:e6:7b:7b:b8:02:5d:95:
b8:06:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:29 2025 by rpki-client