Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20f424d9-0467-3789-85e5-46cd8ba096cb.roa
File: 20f424d9-0467-3789-85e5-46cd8ba096cb.roa (raw, json)
Hash identifier: IZi1PF25lTuPWN20uQAXqUKEr7MaPfvBu1uuxkBQCH8=
Subject key identifier: 36:E0:F3:BE:53:25:E6:D0:F6:D5:B1:E4:CB:34:97:13:EF:6F:F1:D0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD318AB0DB8C25183066B800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20f424d9-0467-3789-85e5-46cd8ba096cb.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:31:8a:b0:db:8c:25:18:30:66:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=37373656-1eb6-4196-820d-8e956ec08028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:a0:ab:70:75:73:9b:83:df:1f:7d:0e:c9:
6c:5e:03:f7:58:5d:ba:07:ad:20:9d:73:c1:a9:1b:
73:7c:02:1a:01:07:77:6d:aa:fc:ec:35:8a:ab:d2:
97:e5:bb:4f:d0:83:6a:81:d4:49:12:9a:d7:0f:98:
31:b1:0a:76:52:0e:dc:01:97:96:45:48:88:a4:bd:
5f:9d:cd:d1:2b:95:0c:88:73:69:73:44:5e:98:8b:
44:48:0f:dd:4b:78:4c:e2:fe:1a:08:d5:f1:10:a1:
1a:36:a7:1c:f7:16:8d:fd:d5:44:e1:48:c6:ce:62:
3f:67:ae:cc:c6:9a:41:97:40:f0:b3:41:45:81:b0:
91:ee:b7:30:77:44:3d:bc:a3:1a:e9:ff:61:1f:26:
81:a9:e8:b7:bd:77:bd:a9:c3:e9:9b:4c:fb:41:c6:
13:ac:e0:e6:e2:e2:1e:85:a9:ea:d3:69:b4:68:a1:
c0:9a:05:e8:8a:1a:73:ab:83:48:8b:aa:4b:b6:51:
8c:d4:c6:4f:3c:ab:1d:40:21:58:8e:96:e6:2a:9e:
6b:52:b0:d8:99:ec:4b:dc:42:85:62:ac:f9:fa:f9:
54:6b:fa:86:9c:d6:23:0f:f2:10:b3:3a:d3:42:c4:
80:04:35:99:7b:eb:74:02:86:d3:7c:bf:0e:8d:fd:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:F3:BE:53:25:E6:D0:F6:D5:B1:E4:CB:34:97:13:EF:6F:F1:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20f424d9-0467-3789-85e5-46cd8ba096cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:4d:a5:73:31:1e:c8:3d:78:4a:55:fe:e4:42:3a:b3:04:7e:
2e:17:32:35:43:e5:92:0e:09:f9:9d:b8:22:e0:2d:e4:28:aa:
14:f8:f9:cf:d3:12:cc:0f:5d:cc:2e:82:b2:9c:43:88:6e:45:
4e:09:ce:8b:99:bc:3b:86:5b:e7:c1:e0:12:94:ac:d4:d2:c2:
6b:39:05:3c:ea:a1:85:e5:0f:b3:2e:85:4f:98:0d:f8:6c:09:
8a:bb:db:23:fd:c2:16:02:ec:a8:72:ba:e7:53:db:6f:a2:63:
7e:e0:2f:a6:4e:ae:03:2f:b9:1a:e8:dc:5f:76:c9:aa:aa:cc:
29:76:8f:ef:da:4b:d6:70:72:9d:b2:70:d6:90:d0:3a:43:53:
15:96:d9:cc:9a:6a:64:95:77:77:24:75:c8:3b:3f:5b:49:e0:
bd:e9:a1:54:79:5b:81:0b:b0:73:95:59:93:79:00:a2:df:17:
63:4b:f9:f5:0a:5e:0b:72:ff:93:52:50:bd:9d:e0:a6:7e:a8:
78:38:27:81:07:dd:ee:38:23:b1:81:26:89:7c:14:97:a1:12:
82:e3:53:ed:db:59:07:3c:e3:44:f1:61:c8:06:c3:30:59:38:
2c:20:a7:d3:cf:55:5a:3a:3b:77:c1:cb:4b:fa:00:d6:36:c5:
24:cc:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:19:26 2025 by rpki-client