Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e8d6baf-a1f0-3130-839e-12383df2d670.roa
File: 2e8d6baf-a1f0-3130-839e-12383df2d670.roa (raw, json)
Hash identifier: cRXqqqbFPnm80TeMijxLY6BFqxxqN1xhCB21zCtDeKw=
Subject key identifier: BB:AA:84:9B:70:97:E1:44:B6:BC:DF:13:81:13:99:96:FB:3D:A0:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD27C16CBBE96B7C9FBC21640
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e8d6baf-a1f0-3130-839e-12383df2d670.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:7c:16:cb:be:96:b7:c9:fb:c2:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=970df0f0-949d-414c-af9e-7d1a1f1980e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:99:c9:4e:68:e8:60:1c:7f:35:90:3d:20:
6d:90:c8:cc:0e:96:3b:b6:e0:d8:44:e1:f2:a2:6c:
85:0d:e5:52:b4:14:9c:d8:84:8a:8c:8d:af:7a:1a:
e8:e3:2b:01:25:2e:af:0e:6f:d9:46:00:c8:3f:30:
4e:a6:85:64:ac:ec:fd:90:81:5e:6c:9a:4a:49:a3:
c7:64:0d:1f:0b:ba:50:be:77:0a:a1:a1:34:86:61:
82:27:d8:83:2a:76:f3:f9:42:d5:ea:c0:80:db:09:
e5:97:3a:d9:83:a9:05:0c:2c:64:20:86:e9:0b:58:
77:3d:3d:55:47:d0:21:ca:af:cf:1a:27:3a:cd:b6:
ec:1e:58:37:94:50:c8:52:fa:4b:91:85:b0:69:1c:
08:5c:11:ac:86:aa:25:83:6b:a6:59:31:82:84:3f:
a9:e0:b7:5f:ef:c0:3d:62:ae:f9:2b:b5:64:88:89:
73:79:91:0c:61:35:61:06:af:27:34:7b:af:47:8d:
9d:5d:54:40:ca:10:56:6e:e9:21:ae:b7:fa:be:a7:
b4:e4:b0:3c:d9:61:d2:21:3d:01:3a:85:60:0b:55:
51:ae:b3:76:01:d1:a1:e6:71:23:43:4d:2e:a6:7a:
51:9b:d0:45:7c:6a:ff:ee:7f:93:41:e2:a4:61:71:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:84:9B:70:97:E1:44:B6:BC:DF:13:81:13:99:96:FB:3D:A0:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2e8d6baf-a1f0-3130-839e-12383df2d670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:1c:61:25:46:6a:5c:72:10:33:a5:e4:24:49:50:a8:16:4d:
df:4b:0b:3b:1b:8d:25:b7:ff:6b:94:61:68:bb:ce:cd:ee:54:
4a:dd:1f:94:e1:00:b2:ef:3a:52:a2:12:a1:48:fd:0f:d9:23:
a1:f9:28:22:32:2c:27:36:ea:67:1f:31:97:24:c5:6a:40:a9:
3f:1a:a7:7e:04:2a:c1:bc:ab:93:77:ff:b4:1a:03:d0:b8:d1:
c3:1f:36:3b:34:3c:a0:e4:f3:a5:c7:79:6d:f3:b3:2f:a0:0f:
3a:ad:e6:c7:95:1c:ce:8d:fb:cc:57:a4:9a:9f:98:10:e5:48:
2f:56:7f:90:c0:70:46:94:d9:4f:ee:39:5f:4f:9a:f7:70:69:
14:7c:a2:90:7e:36:6d:7c:4f:67:e3:85:bc:e6:a0:5c:e1:e6:
fc:02:5e:43:34:ec:d3:1b:67:51:98:b2:09:7d:2c:2d:11:1e:
47:f5:2d:56:7c:2f:df:a3:ac:5d:a7:78:9c:4c:b6:7b:40:72:
15:9f:aa:04:9a:84:f7:8e:08:31:33:76:ca:0c:04:e3:71:48:
48:92:7b:e1:84:06:55:09:72:93:5e:9c:ed:0f:39:2e:a8:25:
6a:05:3e:6c:84:c7:dc:bf:8a:76:e3:88:02:f1:6e:e5:72:bd:
f3:ec:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:24 2025 by rpki-client