Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31eddde8-9de8-37f8-b981-31bd4a9b00ea.roa
File: 31eddde8-9de8-37f8-b981-31bd4a9b00ea.roa (raw, json)
Hash identifier: b4ACz9zzcX+WbjQN7mOsNNdQ7SLMPzoqV2AOl+cObD4=
Subject key identifier: AC:67:F2:07:AC:6E:58:B6:5A:B0:58:8C:AD:88:D9:80:B4:6A:5A:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7DAD54B42129302F2EA2B0D0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31eddde8-9de8-37f8-b981-31bd4a9b00ea.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7d:ad:54:b4:21:29:30:2f:2e:a2:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=7ec68aba-0b73-4eb4-a940-90834494b1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:9a:f8:13:13:7f:1f:f6:d1:f2:72:e8:22:
9a:c3:41:4e:7a:42:a4:97:93:fa:d2:fc:46:6e:d6:
b4:e6:d8:44:f2:b7:75:25:39:ed:b3:c0:a0:f1:79:
a9:5a:c9:70:05:5b:b1:df:54:49:8e:04:b8:44:6a:
06:3d:49:98:2a:b0:99:ee:6c:3e:fa:f0:8d:14:6e:
0f:db:ca:81:06:bf:f2:6e:f0:bc:cb:d2:2e:8e:69:
93:c1:2b:83:88:9c:6f:d1:61:4f:f6:c0:2e:81:d0:
81:59:41:ae:9e:82:ae:69:16:8e:19:71:a0:59:d1:
e7:b5:4e:75:71:fb:b1:bb:08:b4:8f:88:01:e9:31:
02:99:48:9e:5b:ca:9c:8e:23:20:92:52:48:1a:21:
b0:cd:8b:5f:d8:fe:16:8a:89:0c:38:89:c7:e3:d2:
83:4b:e5:0a:49:50:d8:bd:3c:36:6c:eb:5f:3e:7f:
1c:00:e5:90:e2:0e:58:f8:a1:08:ef:24:1c:b1:c9:
ff:a9:06:fb:e0:85:80:99:cb:d3:68:7b:7f:28:43:
c5:40:ea:6f:70:29:16:4b:c6:e8:11:9b:a4:a3:7b:
60:5f:aa:09:b6:f2:d4:2b:bf:a2:74:a7:b4:7a:a5:
05:b6:8f:14:22:4d:62:aa:d9:c5:51:41:1b:db:d4:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:F2:07:AC:6E:58:B6:5A:B0:58:8C:AD:88:D9:80:B4:6A:5A:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/31eddde8-9de8-37f8-b981-31bd4a9b00ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:59:25:1f:6e:9d:97:01:d1:40:7e:99:45:1b:e5:4b:17:62:
07:c3:ee:82:be:67:27:34:4e:44:99:17:da:f7:12:3d:6c:98:
4c:71:f7:62:d0:1c:0d:c8:b9:a1:66:c0:58:d8:58:b6:54:0e:
7b:0a:3a:54:63:8f:10:ad:fe:bd:ec:aa:8b:d3:cd:a1:ae:6f:
28:42:d7:c2:18:3d:d5:cf:9e:23:8b:25:cd:9b:94:2c:fe:7d:
0b:43:44:17:8f:64:9b:35:f9:d2:62:6a:81:17:68:60:63:65:
8a:6e:7c:89:b9:4a:25:82:bc:69:5c:46:4e:f9:14:3c:a6:a9:
6d:00:75:35:fc:45:6b:98:e9:b2:65:0b:cd:f4:a1:09:ac:cc:
22:12:2c:d5:79:61:02:92:72:83:16:bd:f0:21:04:21:5a:3f:
6a:d9:bd:f1:8d:b0:0a:e1:c6:32:56:8b:2c:e9:0d:1b:ad:aa:
5e:f5:e7:12:0e:8f:b9:00:99:b5:7a:1d:ec:6b:c0:b1:ff:db:
63:e7:49:e1:38:cd:a4:45:18:3e:1d:7d:3a:73:44:45:8d:2b:
dd:3a:7b:1a:18:bc:ca:d7:10:4d:00:93:aa:48:04:a8:22:df:
0a:d0:6f:b4:c1:73:9f:7c:e6:74:82:c4:9b:df:0a:b1:80:84:
a9:83:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:54:00 2025 by rpki-client