Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0868e58d-0254-3921-9c05-bdf7a78129bf.roa
File: 0868e58d-0254-3921-9c05-bdf7a78129bf.roa (raw, json)
Hash identifier: 9wKYVh2vDrIWIzI7vm85cba17Vd59MitKdHoK99T31Q=
Subject key identifier: CB:82:72:6B:96:8D:1A:EF:3A:79:45:0F:4D:B3:AF:D0:DB:A6:0F:67
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE482A3F1B71F3868DDBE7740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0868e58d-0254-3921-9c05-bdf7a78129bf.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.64.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:82:a3:f1:b7:1f:38:68:dd:be:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=d3516020-684a-4904-83c4-1ba85fe71492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:d6:db:16:18:9a:47:d7:7d:70:89:3f:4a:
06:e0:62:9c:da:70:b9:05:0f:d8:54:a0:a8:d0:e8:
8c:e1:5f:d5:45:dd:bb:a7:0d:3d:71:73:45:ac:da:
7c:fe:67:02:25:d6:5d:74:65:0c:52:4e:7c:19:b8:
f3:08:1f:09:f5:7a:d2:75:63:a0:0c:b9:69:c2:38:
2e:5c:0b:ba:d9:d0:37:c8:d3:6f:6a:bd:84:dc:82:
06:31:77:1e:1b:ac:78:a2:51:ba:ac:ee:e0:a8:ca:
e6:e3:14:35:1c:3d:d9:d3:28:f0:34:02:80:f8:c7:
73:03:a7:e0:95:6c:fb:06:bd:88:56:c2:36:37:69:
4b:13:ec:a6:e2:3c:17:86:ca:8f:dc:60:fe:71:77:
57:5f:20:21:52:e4:36:fc:e6:7f:92:75:4f:b4:39:
54:7d:eb:32:a0:7b:c5:ab:8e:50:7a:ed:09:b9:a8:
e5:c7:05:0b:66:c1:12:93:ef:b2:c6:8d:06:97:12:
ed:14:94:16:7b:77:de:24:43:a1:91:4b:49:15:df:
1e:68:70:97:fa:38:7d:1a:f0:43:81:6b:1b:ca:ac:
71:a0:2e:bf:d0:ec:7e:68:12:6e:91:57:1f:03:f0:
d5:8b:c2:45:1a:44:86:c5:25:57:d3:b0:b5:09:2e:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:72:6B:96:8D:1A:EF:3A:79:45:0F:4D:B3:AF:D0:DB:A6:0F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0868e58d-0254-3921-9c05-bdf7a78129bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.64.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:5f:3e:c2:a1:d7:ba:b2:05:09:01:eb:79:26:aa:0c:37:35:
12:1a:a5:e0:b4:47:05:a9:3e:84:0b:28:5f:67:8d:52:c9:ce:
08:ff:9d:7d:d7:df:46:72:3b:e8:ce:9d:89:8a:e8:e6:4e:00:
4d:12:3f:7d:32:17:ea:69:83:5a:3a:f3:02:c4:1e:ac:82:28:
a0:cc:4f:84:29:51:35:f4:13:fc:5c:63:1d:49:52:02:12:ee:
4d:5a:dd:75:dd:61:cc:17:20:de:5a:79:19:81:88:5a:15:0f:
f8:60:d3:4e:57:a4:41:15:5c:bb:0e:0e:45:d4:fd:2d:7e:d2:
bd:2d:a5:d3:db:24:a4:85:04:f1:2f:0b:9b:69:34:25:f3:10:
91:c9:e3:3c:61:0e:ea:32:5a:9b:98:3b:f9:d1:26:bc:2c:e5:
e2:0c:ef:a4:34:02:15:97:22:60:1d:f8:1e:12:53:d3:36:a8:
c3:fe:5d:b5:1a:ef:c3:c2:bf:b3:98:f0:63:12:85:4f:51:e9:
c8:7b:7c:58:41:45:d8:4e:9f:b2:19:d5:dd:9a:fe:03:06:62:
7f:d0:11:d9:99:0f:ff:fb:46:94:f9:21:c2:8a:0d:5b:39:d5:
f6:9a:a4:47:10:c0:ab:af:d6:b2:65:ab:23:7d:2e:42:64:fe:
36:54:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:00 2025 by rpki-client