Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/281f824c-d28c-3c84-aa71-714e5d7cd135.roa
File: 281f824c-d28c-3c84-aa71-714e5d7cd135.roa (raw, json)
Hash identifier: YpKVAgI1VePJ1b6KvTFIUz9n0dylNqiklvxBKy3KWH4=
Subject key identifier: 6B:F7:01:90:6E:05:03:B1:B6:E3:61:4E:A1:5E:5F:76:31:24:4A:BF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B8B4E8420E416611E1609600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/281f824c-d28c-3c84-aa71-714e5d7cd135.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.88.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:b4:e8:42:0e:41:66:11:e1:60:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=5da8f530-68b1-4f0d-b116-aa904569ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:77:e7:82:7f:0b:df:a9:20:a4:06:65:15:
e4:71:a0:91:59:91:64:7f:31:23:6c:1f:12:fb:3a:
c0:8d:1e:cb:8c:28:0b:26:87:bf:b1:bc:3d:d9:0f:
91:da:52:7b:eb:cd:e3:26:d6:d8:26:12:11:4a:49:
5b:e0:ba:2d:19:01:c8:f8:1b:82:18:68:c7:1f:5b:
cb:e6:6f:59:41:a6:0c:e7:23:86:6b:0b:09:16:e3:
f3:b6:2f:22:9b:c0:76:ba:11:73:47:53:81:9a:83:
a8:f8:ac:f9:a4:84:cb:b9:a9:f0:5a:a8:8d:1f:85:
ff:0d:01:d3:46:8b:64:b6:42:b1:02:c9:68:1a:a8:
69:42:11:dc:6f:70:82:5b:3a:ea:4d:a7:5a:2e:b1:
84:67:e4:fa:68:3c:7b:f9:fb:1c:37:7c:c5:83:f6:
20:56:81:09:14:ca:8f:0e:99:97:34:81:0c:dc:79:
bc:55:c0:0a:02:58:d7:e3:e5:a6:99:c8:63:1d:f2:
4e:34:8c:b7:d9:63:6f:d2:44:9f:85:b7:21:bb:27:
5e:c1:35:81:46:ac:4b:7c:32:fe:9e:69:dd:a6:1f:
b6:bb:73:a9:53:b8:89:9b:6a:a1:78:45:30:2a:a2:
ae:74:1d:cf:ab:a9:16:ef:0f:d0:43:fb:c6:d9:34:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:01:90:6E:05:03:B1:B6:E3:61:4E:A1:5E:5F:76:31:24:4A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/281f824c-d28c-3c84-aa71-714e5d7cd135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d6:79:b8:8e:0e:1b:eb:f8:14:fb:1d:b3:07:0c:de:4e:c4:
a4:47:02:0a:6b:e7:bb:c7:ed:29:c0:50:2f:10:24:4d:cd:51:
5c:c1:5f:28:87:b4:04:40:81:6e:a5:49:f1:4e:93:f6:4d:d9:
e9:01:73:75:fe:f2:03:64:7c:33:02:db:db:e1:fd:ac:3e:5e:
43:43:ce:7f:c4:32:01:f5:e1:f3:d4:6a:28:35:c5:db:67:50:
06:fd:19:c5:aa:1c:9f:d1:e7:56:a8:36:8d:5d:53:ce:02:06:
7d:98:50:fa:22:c3:92:75:67:c4:df:f5:79:8d:b2:c2:39:b2:
50:c2:db:24:45:97:56:2f:61:5e:3c:51:0b:63:33:7e:da:04:
aa:0f:85:06:ac:c1:74:f8:b4:0b:d9:d2:e7:a9:2e:72:c5:8d:
05:52:ad:b3:e0:e4:5f:12:b0:a6:51:d0:86:0d:f3:93:48:b7:
c2:64:89:ed:95:36:19:f7:87:d1:46:b1:13:29:96:73:78:fa:
17:a2:3c:7f:83:ff:93:2d:87:22:75:93:01:90:7b:2a:58:c1:
39:9a:a0:49:7e:15:e6:be:7d:90:6a:50:f0:b5:a0:ec:37:8e:
8b:c7:5a:8f:5e:05:bd:7a:d4:97:49:ab:14:07:a9:66:be:e7:
cf:ed:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:15 2025 by rpki-client