Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ee9505f-fcb1-3cee-b3bd-77a97b2454a1.roa
File: 2ee9505f-fcb1-3cee-b3bd-77a97b2454a1.roa (raw, json)
Hash identifier: fLliIXwVs78JMyuhk8QX3/qx7Lkgtmd1iwFfwlwKYlk=
Subject key identifier: B5:22:72:EF:A8:13:8B:CF:03:FB:CC:F7:18:01:06:61:59:3C:1D:75
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D9D9D9E1F37940040C7DFD780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ee9505f-fcb1-3cee-b3bd-77a97b2454a1.roa
Signing time: Mon 18 Apr 2022 04:00:00 +0000
ROA not before: Mon 18 Apr 2022 04:00:00 +0000
ROA not after: Mon 23 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.32.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9d:9d:9e:1f:37:94:00:40:c7:df:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 18 04:00:00 2022 GMT
Not After : May 23 04:00:00 2022 GMT
Subject: CN=79d99411-97a1-4c3a-9c2f-44ec05faf0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:05:61:05:3a:11:14:87:26:39:d9:8e:22:b2:
92:7a:99:48:71:83:c0:cf:6a:b7:48:bd:e1:9f:6e:
69:d3:4e:8c:36:5e:f3:20:c4:b6:0e:9b:c2:c2:10:
02:4c:b8:1b:cc:e0:81:f1:66:f1:3d:67:04:ea:2b:
fb:55:aa:a5:ce:63:aa:6d:69:28:de:52:79:b4:aa:
16:55:11:bb:5a:53:9a:0b:dd:c1:17:3c:56:af:49:
db:e9:c5:9b:00:6f:1f:58:cd:9c:f4:c1:c6:2b:d9:
89:9d:30:67:7d:71:ba:e3:c2:20:82:52:82:2a:34:
87:c2:84:19:e9:9f:91:ca:24:c0:18:9c:ec:d6:87:
0e:1a:b5:1d:ea:45:53:10:fd:03:47:6c:bb:f0:29:
a7:7e:97:6f:84:7b:dc:33:57:5a:2e:4c:b5:f6:f3:
17:33:fa:de:d5:d5:20:61:7e:63:25:eb:95:a8:1d:
c4:52:5b:9c:03:38:88:23:6f:60:a2:4c:63:58:eb:
ee:c7:7f:c4:cc:96:95:45:16:a9:d2:01:93:70:41:
bb:7f:6c:f3:2f:79:95:1d:25:05:30:50:3d:e2:a8:
cc:0a:58:fc:0d:be:9f:0a:7d:77:75:67:fd:30:09:
cf:e3:a1:00:22:72:47:f9:df:25:a2:06:0b:cc:1f:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:72:EF:A8:13:8B:CF:03:FB:CC:F7:18:01:06:61:59:3C:1D:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ee9505f-fcb1-3cee-b3bd-77a97b2454a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.32.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:25:ef:2b:e9:6a:e1:88:83:36:3b:55:6e:2b:83:ea:ec:95:
f3:88:8d:5b:b0:9f:1e:9d:3f:f1:7e:7b:32:f5:88:f8:21:57:
5a:ad:c1:7e:a8:5c:57:03:05:19:06:a5:c6:82:b7:ad:4a:d0:
df:4f:84:74:16:dc:08:5c:50:e7:f7:8e:ed:67:50:86:2d:26:
63:5f:2f:9a:bf:6c:43:a9:b1:85:af:15:cb:f8:aa:a6:e6:69:
a2:1d:45:c7:c6:4f:2f:ad:64:6f:a9:df:84:25:95:09:c6:52:
bc:73:cc:84:b3:8c:0d:4e:10:7d:19:82:9e:aa:7f:fd:39:93:
59:d6:32:4d:e5:fb:0b:16:7e:37:f5:d9:2c:8e:e5:c5:f3:b0:
79:31:0d:73:b9:f3:85:c8:49:f0:57:d0:1c:9d:27:e3:96:e3:
ee:2d:95:e8:fe:18:ec:8c:a7:08:03:2f:c8:e4:e1:86:93:b2:
3b:14:4c:95:f7:fe:f1:4e:1a:d4:78:88:9d:f1:69:1b:be:c4:
61:e3:58:e8:67:7f:7b:91:fe:db:9e:12:0e:79:fb:d7:79:e1:
6c:f3:5d:b0:c6:8c:f0:3f:51:2b:a3:1f:b5:f7:d9:18:32:10:
e6:75:63:9f:72:25:32:dd:46:7b:c8:53:b6:7b:ce:55:15:d7:
c6:77:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:32 2025 by rpki-client