Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39dfbdc8-2234-3f89-9f5a-64a133e7ac8e.roa
File: 39dfbdc8-2234-3f89-9f5a-64a133e7ac8e.roa (raw, json)
Hash identifier: O1XffdiJ6QhVVS6XvOnhwvDZMCSUeAyG7cNikJUiGng=
Subject key identifier: 2B:AD:CF:3F:21:64:C9:FA:29:B0:69:1E:FB:6B:85:D3:82:C5:FE:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4A2C090E8D4B309BA0D0C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39dfbdc8-2234-3f89-9f5a-64a133e7ac8e.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:a2:c0:90:e8:d4:b3:09:ba:0d:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=99fed875-746f-41c4-9709-551c2f3c4f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:49:32:ef:78:b7:73:18:88:46:ac:d7:10:
37:5f:a6:66:38:6a:4b:54:f6:a0:eb:b9:37:a9:d6:
4b:97:d6:c4:00:29:0e:16:f8:55:90:3a:c4:f8:0c:
d1:f3:6e:ea:1e:fd:74:90:d8:6e:3c:72:5c:de:54:
d4:ec:d2:6a:0b:c5:1d:8d:da:01:98:8d:6b:b2:af:
15:fb:d1:98:93:1e:95:35:b9:0b:80:25:26:97:77:
8d:0f:18:61:f5:6a:06:9b:de:99:4d:74:91:c9:6a:
24:22:93:7e:6f:1f:0e:34:f5:0d:fc:88:40:82:1d:
e1:6b:dc:c2:a2:ee:a9:6b:a2:65:19:4a:48:25:b2:
90:fa:1f:60:16:16:c4:83:aa:30:92:d9:d9:23:11:
12:0e:d8:ff:80:ae:e2:d6:4d:7b:3f:f1:5d:84:bb:
2d:0b:f1:5b:80:ab:db:16:cd:1b:2a:1a:ec:fd:7d:
7e:b9:2a:3a:8d:b0:ad:12:56:50:d9:12:b0:7f:7e:
36:8c:a5:65:4d:35:09:2d:57:4c:90:dc:ec:90:fb:
db:23:c7:9d:64:d6:c6:f9:95:b5:7b:1d:7d:82:4d:
6c:c6:47:af:14:66:35:d2:cd:a0:d1:ae:7b:ad:f3:
b6:1f:27:e8:3d:fd:41:a7:96:6e:c5:d6:a4:23:f6:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:CF:3F:21:64:C9:FA:29:B0:69:1E:FB:6B:85:D3:82:C5:FE:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/39dfbdc8-2234-3f89-9f5a-64a133e7ac8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:1d:df:03:9f:eb:58:41:45:db:eb:fe:38:9e:e8:77:41:4d:
5d:71:63:64:be:fe:7e:d2:74:8e:3b:96:2e:88:b5:5c:54:76:
84:0a:fc:6c:53:e6:d2:d4:ed:44:6b:41:40:b4:34:a4:7b:31:
ef:f4:82:f6:af:1b:d8:50:43:b7:6b:c5:33:80:46:45:16:6c:
72:6b:51:d6:29:0b:dd:c4:35:5e:5c:2d:14:a0:f3:df:6d:8f:
9d:c4:29:df:9f:7e:c5:01:a3:5c:e7:a4:26:c7:50:78:9a:63:
0b:92:03:cb:b6:6e:17:b1:11:40:23:7d:df:a6:ba:e2:b3:55:
f2:23:09:b6:c8:96:99:ff:96:15:53:29:fc:c2:18:90:32:02:
89:31:6e:6d:e0:18:f0:1c:cb:b5:c5:94:9b:b5:a1:df:e5:ad:
bb:59:36:86:24:43:11:20:46:7e:05:2f:12:c9:ee:65:f0:c6:
1f:e9:cf:cd:0d:31:af:0d:f9:2d:a0:a9:a4:e5:9a:a6:dc:d0:
a3:92:52:d6:1b:6b:45:44:71:aa:18:a4:1a:5b:c0:82:29:0e:
1d:12:cb:cb:b2:61:2b:de:a5:d9:6a:42:e1:3d:62:82:ea:2f:
cc:da:ed:d3:10:8f:b1:a7:1f:f6:06:87:08:d6:54:c1:98:19:
e4:ff:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:30 2025 by rpki-client