Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09e055f2-2d44-3604-8da1-f86ff8d09e1d.roa
File: 09e055f2-2d44-3604-8da1-f86ff8d09e1d.roa (raw, json)
Hash identifier: kCmIcheKGDGF4jGLQ/O231xP6UPy/sMEhA69ysXQMKc=
Subject key identifier: 57:EC:20:AE:0B:2A:8A:68:DB:64:AB:B3:BE:99:D5:BA:03:73:D0:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DCF416FE5E283C6749DFC7F60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09e055f2-2d44-3604-8da1-f86ff8d09e1d.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cf:41:6f:e5:e2:83:c6:74:9d:fc:7f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=6c8d20e5-822b-4f8b-8ce5-92839473a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:60:49:19:38:81:e4:a0:f5:1f:af:99:e3:
27:d6:16:e9:19:37:0a:15:4f:3b:66:1a:35:ef:7a:
b9:6b:6a:44:9d:22:89:6f:7b:78:ae:01:17:a6:0a:
89:41:9c:ac:0f:1b:ca:6c:b2:d0:c8:6c:d2:35:e9:
68:a2:e5:bd:dd:54:4b:f3:5d:2c:10:83:64:b9:a6:
1e:a4:0d:bb:94:f4:79:f6:b4:a7:6d:3c:c5:76:77:
39:18:34:69:fe:77:9f:a3:30:ce:b8:42:6e:06:0b:
29:d1:75:91:26:d0:c1:43:ae:b3:a1:35:be:db:ff:
42:4b:87:be:9d:72:e0:be:d4:ca:dc:d8:1b:26:3a:
23:f1:d4:d8:a3:95:a2:29:3f:7a:09:1e:16:44:54:
c8:fc:ea:19:8f:0b:d0:74:0d:8d:4b:1a:17:1a:ba:
bd:3e:9d:60:bb:5a:3c:74:53:f4:fe:70:e5:22:4a:
f4:9e:83:a7:78:c9:d8:f5:bf:52:5f:8a:c0:3f:14:
b4:70:04:ed:a2:12:b4:ff:48:1e:e5:32:3b:52:78:
98:6d:fa:73:04:89:8c:f9:cc:bd:3e:04:f5:10:3d:
fc:74:c3:fd:8b:49:d6:c7:40:9b:47:0c:f4:49:eb:
4c:cc:9f:a9:84:13:1a:c3:6f:be:43:f4:23:20:20:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:20:AE:0B:2A:8A:68:DB:64:AB:B3:BE:99:D5:BA:03:73:D0:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/09e055f2-2d44-3604-8da1-f86ff8d09e1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0f:62:07:17:6d:20:a1:b0:d5:26:9e:c1:ef:99:47:51:02:
9b:e8:06:f5:c1:e4:ed:79:5b:52:ae:1e:c1:63:82:4e:13:a9:
48:eb:70:ad:35:d8:79:ea:6b:70:e7:4e:f1:63:d4:3e:0a:57:
13:5d:43:16:37:f4:f9:78:c0:63:4f:99:8e:74:b3:77:ec:37:
d0:f0:fb:ab:cd:d7:0e:48:b0:6f:f3:df:9e:24:2e:69:4f:1b:
b8:29:a3:b6:0d:fc:4d:96:c9:7c:82:19:dd:6e:bd:03:eb:6b:
61:79:e2:d6:2b:08:ef:dc:5b:60:49:82:fb:07:0a:9d:8c:6a:
2e:0c:22:f4:84:f5:54:6d:65:d9:70:ad:ed:97:b1:8d:8d:87:
cc:c6:ad:27:da:d9:67:5b:53:d8:8d:74:e0:47:4b:73:e9:0c:
62:65:f9:4a:79:33:9e:8d:73:2f:b8:22:78:37:d2:df:0d:b1:
02:ae:ab:2e:d1:c0:e3:46:77:04:d2:34:7d:61:8b:70:06:4c:
7a:d1:b3:74:af:a9:09:4f:3c:36:a2:ec:4e:97:46:06:c3:3a:
1e:e1:87:56:ee:7e:e8:25:d5:a4:2a:0c:b0:08:6c:64:58:1b:
70:b3:6c:92:9f:a8:e9:df:2a:dc:c5:ec:a2:fc:03:32:7d:12:
6c:cc:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:09:13 2025 by rpki-client