Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14b29647-62d1-3c11-b1c7-f07f0157b060.roa
File: 14b29647-62d1-3c11-b1c7-f07f0157b060.roa (raw, json)
Hash identifier: tvTIuS44FSmr7x0o4krDQHA39DUgdGwjH3WC22P827Y=
Subject key identifier: 7C:9A:78:F8:8D:77:07:C5:A5:A9:B6:70:37:A5:5B:3E:C8:67:3C:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F836F5AAB5833CF5C3227ED00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14b29647-62d1-3c11-b1c7-f07f0157b060.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:6f:5a:ab:58:33:cf:5c:32:27:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=4293a3c9-d113-4dad-b36d-e79b055bb0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:89:c7:07:e7:18:92:ab:16:f5:22:9e:aa:
de:94:12:01:22:4f:85:87:90:bd:90:fe:eb:2a:bb:
fb:e9:49:28:6c:31:0a:6d:ea:d0:5e:57:bf:5d:fd:
d0:95:8b:58:96:26:f3:92:8a:48:b1:0d:c7:57:2c:
11:6f:ca:2e:7e:c7:7f:31:5e:5c:bf:4d:4a:b6:fe:
0c:dd:5a:99:0f:f5:83:0f:64:4d:1d:1f:e8:c0:ed:
38:f0:ee:f0:4b:0d:a3:30:3e:f5:5e:3b:32:e7:5e:
92:e4:87:61:a5:6c:72:d9:47:8a:a8:fd:3d:cb:29:
37:f3:09:28:8d:35:fa:12:74:d6:0e:30:6f:47:ee:
88:1f:b6:7f:6f:bb:b2:62:a1:6b:d8:73:ba:4c:d5:
d3:72:13:a9:cd:00:86:de:c7:2a:84:93:04:cc:4c:
fc:4b:5b:06:99:a6:51:29:d8:b7:02:58:37:49:92:
a1:d0:2e:b1:02:11:c0:40:43:52:6f:f1:98:38:f6:
0b:8e:91:5e:ed:a6:80:69:68:13:97:b3:b1:71:25:
8e:69:52:37:d8:9a:f6:6f:80:09:4c:5d:1f:f7:db:
f1:a0:e5:77:e0:b6:05:22:8f:bc:bd:7f:13:df:5f:
49:93:4d:19:d6:04:15:9d:7e:7e:bf:84:2e:39:c7:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:78:F8:8D:77:07:C5:A5:A9:B6:70:37:A5:5B:3E:C8:67:3C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14b29647-62d1-3c11-b1c7-f07f0157b060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:dd:b6:f0:b1:30:65:89:08:32:1e:88:54:aa:98:ef:16:ac:
6c:6c:fd:7c:06:95:ea:96:e2:55:e1:ec:fe:33:e6:64:14:40:
74:29:ad:68:d1:ec:03:ed:8a:7f:d4:5c:f7:69:7a:68:4a:10:
42:3d:c7:fb:59:ef:5a:08:72:df:86:fb:f9:2f:26:93:83:c3:
7d:24:a3:8e:71:22:7b:e5:0e:e9:95:71:ca:49:07:f7:3b:dd:
6a:ad:4d:27:f4:e1:fb:07:a5:24:b3:b0:a4:97:35:1a:4f:ec:
c9:f8:23:d7:99:46:45:65:6e:11:ae:00:ed:19:6f:3b:f3:90:
1c:2b:49:8f:ce:66:15:c6:e9:70:99:4f:6f:51:e7:95:b2:14:
80:55:a6:18:2e:26:f2:a2:06:e8:79:f8:84:69:15:99:46:b5:
a3:27:b1:75:15:41:62:d5:1c:13:2b:50:f9:0d:56:13:be:ab:
cf:eb:31:e1:d1:ed:af:3b:c8:60:a6:5e:1b:d8:72:a1:85:9b:
80:00:8f:60:a8:c3:6b:99:ec:18:20:bc:34:5d:8c:a0:a5:88:
69:67:11:48:3d:45:d1:a9:1c:c6:b3:e5:e0:1e:6a:e2:76:99:
c8:cd:8a:e0:c3:cd:49:bf:e7:04:4d:16:56:5a:8f:d9:8a:f0:
6f:ad:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:50 2025 by rpki-client