Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0628a615-b485-3dfb-9b54-978f72f41d1c.roa
File: 0628a615-b485-3dfb-9b54-978f72f41d1c.roa (raw, json)
Hash identifier: D49vYfm4T56xtc1DYL8MnEvRQW3DmCyF9BUtlmSrmLA=
Subject key identifier: BD:3F:31:A8:A7:44:15:53:32:D5:E5:3A:50:20:F3:8A:02:47:C4:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D810970844511C1FB106400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0628a615-b485-3dfb-9b54-978f72f41d1c.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 52.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:81:09:70:84:45:11:c1:fb:10:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=5c222a9e-318a-4a18-806a-ffaa035f3e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:b8:f1:c8:f8:06:3e:23:dd:df:20:d2:78:
85:95:e2:cc:74:fd:05:d2:de:29:af:92:a5:e9:83:
f9:6c:41:9b:33:a8:91:6f:b2:75:82:4d:01:1b:9e:
d7:46:c6:34:8b:62:e5:51:7b:85:dd:85:ce:86:bb:
19:af:3d:7f:d6:dd:a5:66:cc:11:38:df:af:83:17:
a2:d9:67:63:d7:0d:94:ad:be:a0:8e:65:68:0d:e9:
40:1e:ec:cd:ff:9c:c6:b6:10:7b:a4:0d:d3:7b:cb:
ef:fb:fd:ee:22:69:07:9c:55:88:ab:a9:3c:cd:53:
8f:0f:d0:02:d4:0e:d8:0e:1b:a0:49:5c:40:10:da:
d0:5a:d2:21:ac:d3:0e:97:2b:a4:04:4a:28:d1:82:
1c:ff:9f:df:4a:d2:0a:7e:fc:f3:28:ea:a8:6c:6b:
55:a3:83:af:e1:71:44:cd:f6:a9:b5:5f:bc:d9:6a:
45:4a:f2:ae:d2:60:48:3a:ae:82:ba:a9:c0:e8:83:
57:42:b6:1b:4c:3c:f7:42:57:53:d7:93:3d:f5:3e:
42:57:55:df:fb:25:ce:d4:fd:44:23:1c:80:53:54:
0c:e3:68:6a:77:7e:0c:b2:43:ab:1c:64:3f:9b:f4:
cc:19:cd:72:01:c7:13:da:c9:d9:fb:49:c3:83:05:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:31:A8:A7:44:15:53:32:D5:E5:3A:50:20:F3:8A:02:47:C4:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0628a615-b485-3dfb-9b54-978f72f41d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:7a:42:a9:06:25:3d:6d:c4:6f:1f:d1:08:e8:58:1c:27:24:
28:e0:a7:48:8d:fc:10:df:cd:05:62:db:01:40:b5:d1:9f:ff:
e5:af:16:4d:a8:65:1f:85:d5:3f:79:65:29:df:41:21:f7:4e:
2b:ed:18:53:2e:f8:9f:f6:95:40:8a:61:1d:42:5d:fe:80:89:
bb:3f:42:25:d3:16:d6:bf:77:a2:c0:2f:8b:09:20:6b:2a:e5:
46:eb:75:e4:d4:30:c4:c1:a8:8f:d3:17:07:92:4b:37:78:29:
fa:ee:b5:18:e8:24:c3:82:a9:e2:3a:85:ed:20:81:79:40:ef:
bd:17:33:03:2d:56:0a:25:eb:23:5f:bb:c8:ae:e6:18:9e:cc:
9b:7f:7b:b2:68:4d:94:36:a7:60:89:16:45:0a:d0:04:fd:bd:
83:95:35:5f:f6:21:8a:0f:b6:6c:d6:c4:07:eb:a4:23:65:1a:
3f:e7:2b:cb:8a:c2:01:85:dd:6e:d6:4b:c4:08:c8:8e:c4:3c:
8d:09:c8:98:60:3c:53:06:a4:72:9d:fa:31:e1:66:c3:d6:1c:
2e:65:ad:8e:cc:59:9f:1f:54:ec:a0:3f:88:00:e4:30:a5:cd:
86:85:35:b2:65:bb:78:0e:bd:69:f1:6b:12:2e:d5:b2:42:78:
10:2d:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:54 2025 by rpki-client