Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b7f43b4-3d2e-3a91-8d36-cae0a80f34ae.roa
File: 3b7f43b4-3d2e-3a91-8d36-cae0a80f34ae.roa (raw, json)
Hash identifier: xS/VgzDubufjQAEmP1GwogklnMY6c3+3ZzHh1Sn2w+4=
Subject key identifier: 62:1A:7B:33:2C:A1:72:FD:3D:B0:37:EA:BF:3E:9D:97:8C:3D:DD:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32CDF67ECB03595E62C32500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b7f43b4-3d2e-3a91-8d36-cae0a80f34ae.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:cd:f6:7e:cb:03:59:5e:62:c3:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=47179f03-0282-4e84-902e-ac66dc18958c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:04:a5:6c:9a:2e:1d:d7:f0:8b:fd:cd:fb:
81:f4:70:21:79:c9:4b:6d:de:fa:f3:33:94:9d:3d:
df:24:3c:0f:13:b6:74:11:6a:01:ef:dd:b7:e8:ee:
7e:82:f7:ba:13:fc:b6:b7:e6:12:c8:d1:ed:89:63:
d4:6c:c2:8e:0f:e1:9d:d1:ef:6f:2d:5e:60:85:3d:
14:c0:64:d4:c3:81:54:d3:6d:ee:8b:af:32:43:d5:
60:05:fe:7e:43:63:7c:96:cc:c6:76:56:8e:7e:f5:
bd:68:59:d8:8d:0f:d1:d4:26:98:69:48:16:5b:e6:
ac:90:02:34:55:25:3a:ee:3b:55:b7:62:07:1c:49:
7a:1c:b6:e0:1f:bf:82:2e:59:c1:2b:ae:11:d6:c8:
82:a9:c5:0e:29:a9:86:21:79:8d:c3:a1:3a:57:c2:
56:dd:71:3a:e3:52:e9:ec:e5:87:2f:97:f1:c5:ad:
27:bc:24:d6:c2:af:e7:e0:08:20:f1:c8:c3:ff:38:
d1:79:e4:1a:16:9f:02:8e:a0:7b:20:56:ec:41:a4:
39:1d:fc:86:88:e4:86:1f:f9:97:37:61:43:89:0c:
6d:33:e2:5d:de:b1:7a:41:96:49:23:ee:6b:4e:9f:
a7:b4:78:bd:71:79:42:8b:f2:db:05:07:78:39:02:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1A:7B:33:2C:A1:72:FD:3D:B0:37:EA:BF:3E:9D:97:8C:3D:DD:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b7f43b4-3d2e-3a91-8d36-cae0a80f34ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8f:69:e2:ca:6f:66:63:c3:7b:ff:32:7e:3d:24:a1:be:54:
d0:a8:bd:b7:cd:99:21:e5:c1:ef:e1:09:d1:31:62:c9:29:46:
32:b1:a3:74:19:2f:56:9e:f8:f5:74:7a:e3:0b:57:35:e8:48:
86:aa:ff:98:1c:a0:eb:3e:b0:a9:81:c0:79:6b:7e:67:71:f1:
da:6c:56:3a:53:81:77:32:24:38:29:27:98:87:3a:34:c1:3e:
7f:ca:e8:99:25:d8:08:fe:93:89:e4:13:cf:a7:3a:32:2c:9d:
0e:fd:17:7f:e2:c8:91:50:09:9f:46:24:ef:03:ca:90:ea:aa:
fe:f6:08:4c:58:b2:24:b8:c2:29:7e:ee:54:99:cf:be:18:07:
df:dd:89:74:a7:ae:68:2a:31:16:1f:2d:8c:94:77:30:ff:40:
ad:7e:a6:95:ac:08:41:87:fc:6c:2c:e1:3c:28:f7:60:17:ea:
59:fc:f3:2a:ad:6a:4a:d8:5d:10:fd:7f:7a:83:27:fa:ed:83:
c0:28:6a:38:91:17:6a:58:80:91:cc:01:23:5f:41:0c:ee:37:
6a:25:3a:04:fa:30:81:af:a0:bc:c8:14:d9:c0:8a:c2:5f:c3:
37:f2:a4:2f:6d:16:59:4e:43:5f:ff:f5:2b:71:a6:00:db:81:
82:6f:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:56 2025 by rpki-client