Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3081e86a-432d-33b9-9895-c0d7f5d1b8c6.roa
File: 3081e86a-432d-33b9-9895-c0d7f5d1b8c6.roa (raw, json)
Hash identifier: 4+WEnaYVUQml56bNnNTdcdJJ8x8VizqC2qQdWtBtHCI=
Subject key identifier: 05:BB:84:71:01:25:8B:9E:09:84:91:3D:EF:B0:90:C4:F5:0E:16:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401D6AA4A3D3C6A0A3EBAB8400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3081e86a-432d-33b9-9895-c0d7f5d1b8c6.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:6a:a4:a3:d3:c6:a0:a3:eb:ab:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=a0a4d9c6-c663-4080-a82a-615d904b5e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9e:3c:93:48:c6:ab:cd:1e:df:5b:ea:ab:04:
a9:03:0e:2d:05:00:da:4a:9d:db:4f:a1:31:25:88:
ef:ce:ed:08:4f:d9:53:f5:1c:f7:36:fa:20:ce:dc:
02:09:d4:14:fa:d6:2f:d1:37:e4:05:1f:b9:7e:65:
68:b2:1c:d0:4a:c1:0d:da:ca:47:48:1d:3c:c9:f9:
a0:9e:d8:d7:a8:bc:06:8e:34:0d:b1:ca:66:08:71:
92:a7:b6:8c:1c:4b:d8:8a:bc:36:a9:fb:25:32:8b:
a5:fb:dd:7b:6e:0e:5a:35:dc:a0:1c:75:7d:41:a0:
49:1b:04:9c:02:e9:a3:4f:21:e0:dd:27:c2:49:4a:
61:16:40:e9:ff:4b:e8:a3:09:8b:ab:c8:03:75:07:
c6:de:19:ae:18:ca:21:f1:76:9a:00:18:41:50:9d:
cf:dd:9c:c1:0b:6e:ce:66:3a:f5:3d:d5:50:a6:28:
9b:3f:b1:c1:ab:fb:e1:0c:51:b1:8f:9c:80:12:52:
ea:81:0c:07:47:21:0b:07:21:8f:91:e4:2b:5e:18:
0c:44:4c:f3:52:90:d6:ae:ff:70:91:da:62:38:c0:
7b:fa:41:73:94:26:bd:c6:a3:bd:5c:e2:d0:e6:23:
26:20:9a:56:fb:fd:7c:d2:fc:20:1d:d9:ca:c4:2e:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:84:71:01:25:8B:9E:09:84:91:3D:EF:B0:90:C4:F5:0E:16:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3081e86a-432d-33b9-9895-c0d7f5d1b8c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6d:8e:fd:7e:03:08:cc:cd:2c:57:2c:65:5b:ed:2a:6b:b8:
78:dd:6e:90:9a:eb:c1:2d:93:80:83:d7:38:8d:ed:97:ee:03:
d1:90:2e:5c:2a:13:4d:43:52:70:85:3c:c6:2f:11:2e:d7:bc:
41:9a:2b:fd:bb:43:c5:80:e4:ac:5d:1f:67:14:d7:ca:74:28:
2f:68:91:7f:e6:bf:51:ef:35:fc:03:00:b8:b6:0e:b4:5f:f5:
43:89:93:ee:2c:b2:29:d6:4d:0c:9b:15:27:b5:ac:46:b3:10:
bb:b9:99:8b:a0:c5:af:22:14:4c:b1:dd:7d:5b:df:e2:4f:c2:
a3:c9:67:81:98:9b:aa:97:9a:f2:b9:98:3f:d1:30:36:01:57:
f2:2b:81:a9:dd:02:e0:63:da:2b:66:0f:9e:67:bb:53:d2:d0:
3c:e0:8d:f5:f5:2b:08:49:1f:2a:54:48:63:86:02:f5:74:95:
9e:66:b9:ad:b5:00:ad:8a:1c:a1:d7:44:39:47:45:d6:4e:4d:
cd:5e:ae:ac:42:f0:b8:11:9d:9b:59:c3:43:46:dc:2d:c9:b0:
b3:0a:cf:de:bb:a2:32:96:4c:cb:3a:5b:b8:11:5e:c8:27:8c:
18:25:72:ef:d4:f0:84:8f:b4:fc:24:42:ff:30:43:a5:0f:1f:
a9:6e:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:17 2025 by rpki-client