Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dfed55a-e4df-3ef5-a80f-f724766849e7.roa
File: 0dfed55a-e4df-3ef5-a80f-f724766849e7.roa (raw, json)
Hash identifier: RhfHqXPbOrkU9CKX8NV63j9rPthF4zHNQkjkdj/Zd9Y=
Subject key identifier: 2F:3D:C4:62:0E:E4:D4:8F:4A:5B:4E:57:8B:78:7C:07:3B:EE:DB:D7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BA4E60484F2F58A04D5CC670
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dfed55a-e4df-3ef5-a80f-f724766849e7.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ba:4e:60:48:4f:2f:58:a0:4d:5c:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=24c99d87-7f7e-4c7b-965e-867e38334f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:f0:94:6a:38:9a:a2:a5:d6:7f:fb:e3:5a:
c3:df:3b:3c:aa:bc:31:64:9d:38:07:cd:8b:ca:a2:
27:c5:bc:59:7c:65:bc:b8:a1:0d:5e:b0:5b:ad:18:
99:57:42:a6:d6:68:a8:cc:c3:27:a6:fc:1c:90:40:
50:01:56:c8:3e:9a:28:25:59:f5:95:3a:8f:f1:10:
0b:6f:b6:ae:8b:fb:fb:e7:9d:46:bf:47:0f:7d:fe:
98:ca:d4:14:f3:45:f7:61:68:55:cb:5b:e7:53:ab:
92:f7:c5:9b:a0:82:5c:b5:db:54:b1:2b:86:f0:bd:
93:96:8b:e6:17:14:5a:7b:51:35:21:12:18:89:a2:
48:1b:80:36:e1:5f:98:f3:f7:e2:d1:c8:87:72:af:
90:9f:43:a9:68:dc:0e:01:a5:91:29:bc:26:db:d7:
83:ec:90:d5:27:c6:40:52:d4:1d:e4:41:fe:4c:77:
9b:12:fd:b6:8a:0b:ef:00:f7:ac:73:bd:9d:05:18:
58:e1:93:cb:96:24:40:ed:e0:a3:1f:b0:bd:d8:85:
34:c1:14:d8:d7:6d:57:7d:cb:bc:f1:5a:a8:0b:67:
0b:e3:c8:5c:e1:72:25:8a:dd:81:34:0a:30:ed:70:
05:48:91:e5:00:2c:e5:06:ed:e8:ab:fb:4b:54:35:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3D:C4:62:0E:E4:D4:8F:4A:5B:4E:57:8B:78:7C:07:3B:EE:DB:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0dfed55a-e4df-3ef5-a80f-f724766849e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:74:88:dd:89:56:1c:0d:73:25:3c:0f:d2:37:88:d8:e8:4b:
52:33:3c:9d:79:21:7b:7b:c2:67:31:96:3e:3d:fe:ff:00:dd:
61:fb:de:4b:31:3b:4d:f3:89:56:b2:56:53:cd:bb:a0:05:33:
d0:40:b3:81:59:81:8c:40:cb:a2:22:3c:7d:63:8f:02:9f:f2:
45:6c:0c:08:4e:9a:d3:7a:55:6e:59:88:ca:d8:55:3c:f6:da:
1d:f6:b2:b3:e6:2f:17:aa:fa:05:a4:26:3b:0b:94:fb:9e:1e:
1e:1d:16:a1:20:4b:66:35:13:b8:b2:81:22:b0:9c:7b:f7:d0:
bd:32:ae:24:41:0e:bd:a6:6f:00:e8:83:29:61:a3:43:b6:73:
6d:56:05:03:56:4d:02:2a:ca:9b:d9:25:68:df:c7:98:68:fb:
83:3c:5f:97:be:71:76:26:c0:e0:57:9d:21:c1:15:14:e4:0d:
74:44:0d:0c:48:20:2b:ee:07:3a:92:3a:3a:3d:46:0c:e3:02:
18:7b:11:e8:f9:02:90:48:a3:01:b0:95:51:d7:19:a0:ba:b7:
6c:dd:22:05:37:99:7b:06:5a:92:f8:e1:73:a4:46:5c:08:fe:
e4:e6:9b:f1:69:ab:a9:80:8e:ad:d0:dd:59:be:b2:c0:fe:e8:
9f:50:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:03:21 2025 by rpki-client