Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b2961db-817f-3597-9714-6909909d5309.roa
File: 2b2961db-817f-3597-9714-6909909d5309.roa (raw, json)
Hash identifier: LMG3CIWC5lq4dW5mVcXO+F+X6at1FoujFK6xNeXM5QQ=
Subject key identifier: 5A:7A:53:76:B8:42:52:4F:69:CC:35:2E:93:7F:08:C0:1B:2C:70:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F810D2079E21A3205B4743780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b2961db-817f-3597-9714-6909909d5309.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:81:0d:20:79:e2:1a:32:05:b4:74:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=4305e326-1861-4c6b-8cc1-d81fbd6dc2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:45:93:58:2c:0c:d1:f3:5e:eb:f6:68:f7:
b4:2b:fd:d8:eb:67:7c:cf:15:ca:00:5c:f8:2d:2a:
ae:a7:56:bb:06:aa:13:77:5c:3c:37:2a:79:d4:5e:
22:f2:2c:ff:81:4c:b9:37:b4:fc:7b:67:2a:c0:25:
ec:d7:b9:a6:8b:06:e9:e0:c0:5b:5b:19:96:e9:42:
fe:34:7b:df:55:97:81:7f:ac:41:52:10:fe:a4:ec:
79:d0:ba:82:15:83:cd:57:7d:53:0e:43:d5:ea:8a:
05:55:92:fc:79:f9:29:57:9c:7d:3d:d2:87:75:88:
ee:34:72:af:2e:1b:38:fc:ea:9e:3b:f9:8d:7a:0c:
69:9d:21:8e:5f:19:ed:45:76:dc:87:50:69:2e:95:
54:57:d5:1d:78:f6:65:0d:27:ad:fb:15:6c:13:f9:
bb:0f:6a:aa:01:d4:37:2f:2f:01:dd:e2:61:f1:66:
36:f3:08:20:6d:43:26:4d:b8:fe:ce:79:be:20:b8:
42:06:71:3d:03:52:53:60:40:21:1e:34:05:55:13:
8e:4f:70:79:49:1b:f3:77:61:24:b2:75:f1:b6:b1:
c4:04:51:bf:94:1d:89:de:be:c0:c0:8c:57:ba:fe:
ce:0e:cd:66:7d:9c:c0:49:03:73:00:f4:79:0c:9b:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:53:76:B8:42:52:4F:69:CC:35:2E:93:7F:08:C0:1B:2C:70:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b2961db-817f-3597-9714-6909909d5309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:80:61:5d:d6:5b:93:0b:25:30:22:1f:07:24:01:b6:d0:39:
71:9a:f4:79:0f:1b:5b:d1:13:cd:1d:e8:fc:57:5e:61:e4:51:
18:95:95:b3:ce:f5:e3:73:ce:86:28:ba:ca:3f:2d:a1:ad:a7:
a2:f9:79:aa:2c:e4:84:e5:af:29:44:5c:67:77:a8:cc:4c:c3:
af:f8:76:12:30:48:ea:3e:fe:a4:40:0a:3f:ac:39:18:2d:5f:
6a:73:65:10:ef:d9:64:11:61:57:92:cd:b6:2a:97:36:e3:6a:
55:e8:0c:d6:8e:eb:ba:6f:cb:62:cf:5a:1f:f9:38:5d:e6:9e:
82:0c:40:a5:df:d7:39:19:84:cf:da:b8:98:d4:52:04:f9:ad:
2d:69:18:3d:3f:f6:68:62:d4:18:50:86:5e:3e:71:d4:86:ee:
78:a6:37:e9:a9:28:91:64:2a:25:14:62:35:77:40:5a:a6:27:
25:22:4d:c9:0d:16:8f:b6:41:37:47:06:91:4c:46:ce:e7:43:
14:f0:1c:4b:72:6a:c5:08:3f:0e:c8:f0:0e:69:f8:48:f8:77:
c8:46:19:8a:80:5d:dc:3d:00:65:0d:d8:fb:f1:de:9b:b4:03:
2e:8b:47:92:16:b1:14:e5:93:9c:3e:7c:7f:d9:8f:c4:3d:bb:
a1:2f:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:29 2025 by rpki-client