Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f27ac9f-769f-39d1-a4d6-35f6c9328851.roa
File: 1f27ac9f-769f-39d1-a4d6-35f6c9328851.roa (raw, json)
Hash identifier: zRkPsEiFoWfdvH0BrMzN49ER4XZApyATDM+S9ecki3I=
Subject key identifier: 2F:28:96:55:02:B9:26:B5:9E:8C:F5:7D:5D:40:AA:9D:9E:77:FE:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE4829D8584411482FF3B48B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f27ac9f-769f-39d1-a4d6-35f6c9328851.roa
Signing time: Fri 12 Aug 2022 12:00:00 +0000
ROA not before: Fri 12 Aug 2022 12:00:00 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e4:82:9d:85:84:41:14:82:ff:3b:48:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 12 12:00:00 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=49b842d8-5c6a-4742-b3b0-f45a6d9fe527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0f:89:69:bd:ca:5e:6d:ca:1b:75:02:68:e7:
ca:c9:d7:37:c2:73:fc:3b:c9:12:a5:dc:7b:3d:bf:
d6:1d:f8:7e:2b:fe:3e:11:40:03:83:a6:e5:d8:44:
bb:fa:25:64:c6:82:6a:51:de:cd:5c:4a:ca:1e:69:
b4:b4:e9:38:3e:e5:ac:04:2e:45:11:b8:79:b2:83:
c6:70:a1:dc:b1:ac:b2:37:38:52:35:ba:de:b5:2d:
91:be:21:a4:94:a4:12:20:85:ed:ae:58:0d:0e:4c:
7e:f0:bd:29:17:0b:61:f3:d5:ae:6f:f7:a0:da:f6:
27:78:c0:c3:d5:ec:a0:63:b8:54:60:cf:07:80:48:
dc:9e:98:35:f1:ae:c7:a9:ad:0c:90:bc:71:8e:10:
f8:da:06:05:61:6f:7a:e0:c9:ff:c5:cf:7b:fd:b3:
e9:68:9b:70:73:8c:3f:6f:c6:6b:90:12:30:1b:f0:
62:32:6d:08:ab:56:3c:0c:49:a0:e9:25:06:db:46:
b7:e5:75:7b:72:9e:b2:55:2e:b0:59:db:c4:d0:c9:
66:82:e6:b7:43:a4:6a:5c:cf:68:4c:94:64:c4:6e:
ac:7d:f9:e3:3b:af:26:03:1c:e0:aa:cf:eb:43:26:
f0:5d:60:97:3a:f2:45:4e:20:85:9f:bb:7d:b5:1d:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:96:55:02:B9:26:B5:9E:8C:F5:7D:5D:40:AA:9D:9E:77:FE:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f27ac9f-769f-39d1-a4d6-35f6c9328851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b2:76:ef:5c:61:7d:48:75:f2:07:de:4f:59:db:80:01:af:
e8:78:02:49:0b:e6:4c:95:c9:e8:21:f1:3f:ba:ab:e1:e5:58:
04:95:d1:b9:44:26:8f:ad:9a:61:11:d1:58:f4:53:08:e2:0a:
43:6b:5a:0c:60:6b:12:b7:66:9c:a7:43:1b:ad:2f:0f:ad:f9:
56:d9:64:44:c2:be:b6:1c:35:11:4c:44:b6:ba:fc:a9:86:92:
f8:f8:5f:fe:89:77:e5:6b:97:07:36:c1:7d:e8:90:09:b2:e5:
43:0b:1e:a7:b1:c6:b3:71:6b:49:36:8a:f8:64:2e:a4:c4:ae:
a0:4c:82:8f:b0:28:b0:00:73:08:f3:b5:36:25:63:45:b0:04:
b0:f8:6f:69:d6:13:2f:21:c7:c3:30:3b:2f:6b:57:1e:d7:e7:
59:21:8d:88:6c:88:f7:42:f1:55:5f:1e:30:7a:20:89:e3:44:
f0:b4:e9:1e:b7:36:8e:c8:83:62:66:63:3d:49:b3:2b:06:05:
9f:77:ca:6a:7a:04:16:37:6d:9a:a4:32:3d:6d:40:97:84:13:
5a:49:30:54:3b:9b:ae:e0:b1:1a:28:ed:60:a2:05:e3:05:e8:
70:71:7a:90:1e:44:c0:62:3b:cb:b6:93:e5:6b:c7:ce:6a:8b:
41:76:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:30 2025 by rpki-client