Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/171930c2-ed19-3796-b645-164c0a8843d6.roa
File: 171930c2-ed19-3796-b645-164c0a8843d6.roa (raw, json)
Hash identifier: e+RSMcIiAKA2vSMrHImsnvhUBihr1LEPoNFCcfONcic=
Subject key identifier: 00:13:88:78:32:59:A7:E3:5B:F6:C8:C1:43:4C:57:DE:72:80:57:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD1A9BA4569BEFD59AE978E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/171930c2-ed19-3796-b645-164c0a8843d6.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:a9:ba:45:69:be:fd:59:ae:97:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=69524e08-500f-4c52-aa04-a7dbb8b2489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:ac:03:06:9c:cf:97:6e:18:2c:db:cc:16:
a4:fc:9c:fa:cb:c7:9d:40:63:cd:02:18:9b:2e:64:
fd:67:83:ba:59:73:77:bd:e3:fb:71:a6:3f:82:5d:
f3:bc:b0:c8:2e:22:36:0e:dd:11:15:10:41:2d:74:
64:95:f9:06:2c:eb:bd:ce:b3:11:cf:a4:97:83:85:
10:73:0a:91:60:f6:8d:1f:28:6f:b3:57:10:af:1a:
a8:93:c5:ad:b6:3c:44:6b:92:f9:49:ab:66:4c:0d:
74:45:42:95:44:d1:3c:21:bf:ad:27:79:3e:af:ca:
fa:3d:39:6b:10:50:72:44:fb:0b:73:95:58:54:6a:
9d:b4:3a:1f:d3:f0:a9:24:b9:21:af:42:27:5c:ab:
69:20:eb:64:28:f5:ac:cc:d5:20:61:c7:dd:5d:bd:
f1:e0:ef:bc:c6:5e:2e:d5:1b:bb:29:ad:cc:9f:e1:
5f:77:13:e1:75:fb:8f:dc:ce:c4:5d:60:af:79:0c:
75:7a:d0:74:ba:c7:0a:a3:c4:91:de:9f:5d:b2:01:
7f:d7:9e:a1:fb:ba:32:e5:f8:1f:3a:7c:d5:4b:72:
5d:39:57:53:a0:60:b1:48:2e:4f:4b:fd:04:8d:9b:
2c:74:9c:82:cc:d6:64:be:2c:1a:18:04:ca:d4:01:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:88:78:32:59:A7:E3:5B:F6:C8:C1:43:4C:57:DE:72:80:57:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/171930c2-ed19-3796-b645-164c0a8843d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:14:33:b6:a9:2f:6e:43:ff:44:3b:75:60:01:30:84:85:0b:
51:5f:7a:7a:70:76:ae:b2:19:2e:59:f5:48:e4:46:7e:83:c1:
ff:71:42:de:23:81:e4:04:6c:e2:62:1d:d3:0d:fb:8c:da:3d:
8d:ea:78:4e:11:61:9f:d2:34:88:8e:2e:b1:cd:b1:56:92:d6:
d5:02:27:1f:9f:9e:90:20:9c:ef:a6:48:21:b7:5d:bc:07:ac:
4c:40:17:4f:0d:a5:34:cf:57:be:ef:cf:cd:37:6e:8c:5d:eb:
90:10:bd:ee:98:02:48:01:da:8b:ff:c3:f9:94:bf:e0:21:3a:
ba:1a:af:66:5b:2a:6e:1e:31:a3:63:42:ab:a7:2b:e8:fc:4d:
cc:a9:1c:0f:d9:16:bb:dd:36:69:62:47:d9:72:1f:96:e4:b7:
4e:a0:ac:2b:b6:6c:b7:bb:d7:c9:37:2a:10:21:8a:67:e5:3d:
17:21:e1:86:54:be:ec:4a:08:c9:50:c3:ba:29:20:40:fc:57:
27:bc:b8:31:6f:ff:82:d0:b0:ca:28:2e:f0:00:ff:6d:db:d1:
7e:e2:f7:07:5b:48:51:f0:d4:ca:b3:ac:6d:3e:5e:24:3a:d8:
85:5c:aa:48:e4:f4:4f:9d:88:69:29:c1:db:54:ee:1f:bb:27:
61:64:c6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:24 2025 by rpki-client