Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d598ac3-7c2b-3f2d-935e-1f663f9c1d54.roa
File: 3d598ac3-7c2b-3f2d-935e-1f663f9c1d54.roa (raw, json)
Hash identifier: KijCSnqvCdC3X1kLNU2ZtiEn3szNOeyZpGjhcT3hqJc=
Subject key identifier: 83:AE:56:80:39:5D:B5:2E:4B:84:96:6C:A8:31:FD:FA:B1:7C:47:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F836F4DEFB16FED11555B3300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d598ac3-7c2b-3f2d-935e-1f663f9c1d54.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.220.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:6f:4d:ef:b1:6f:ed:11:55:5b:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=f73a64cf-9115-4fee-85a3-52449dd1adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:05:41:f6:43:4e:98:57:0d:cc:9e:45:de:
75:81:e2:77:8a:75:b0:51:73:62:c8:c0:94:fa:b2:
e0:45:62:e0:1e:e4:49:e4:25:a1:a6:e8:b1:6c:bc:
72:e3:b4:dd:4e:79:f0:28:23:f9:59:54:54:52:3f:
2a:95:93:53:f8:65:3b:7a:51:15:49:c0:f3:52:55:
48:85:bc:37:c7:1b:0e:c7:fe:05:0b:b6:a7:7e:50:
ed:c8:bc:c6:f0:70:a3:ed:69:a6:82:9c:22:94:b5:
00:d4:48:6c:28:53:11:df:06:08:7d:db:fe:78:81:
ee:9d:1d:08:68:b2:42:aa:17:24:3a:b3:48:35:dc:
ea:1a:b8:e0:98:52:92:02:a0:4a:90:24:04:57:39:
3f:e2:15:6e:af:96:48:b5:a1:87:47:07:29:f1:e6:
71:64:1b:5b:b2:1b:3f:e3:0a:65:15:dd:57:fc:9d:
95:c4:a5:f6:3b:d6:be:18:6d:aa:77:46:ef:9a:a0:
6b:b8:89:ee:18:14:df:23:8c:50:58:82:df:df:b9:
b6:9a:23:89:8a:74:cc:2e:bd:83:12:fe:6c:64:eb:
9a:38:24:e5:e6:9b:62:41:ae:1c:05:d8:5b:d9:03:
cb:f7:d0:14:7e:42:2b:a6:7c:86:af:e7:1b:37:88:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:56:80:39:5D:B5:2E:4B:84:96:6C:A8:31:FD:FA:B1:7C:47:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d598ac3-7c2b-3f2d-935e-1f663f9c1d54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.220.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:63:82:6c:b4:6b:77:57:ce:05:0e:8a:52:a8:52:fa:b6:59:
de:7d:01:fd:9d:2c:da:05:ca:dc:f1:2c:ba:f8:b5:53:2a:20:
30:64:27:9d:8b:ab:36:8d:6a:0d:be:f7:85:04:72:c5:e7:b6:
eb:5e:92:6b:c5:5d:2c:64:46:83:ee:2c:7e:11:55:d4:1d:37:
16:ec:f8:45:67:2c:30:50:6c:a2:3f:ca:5f:0f:97:6a:c1:83:
27:6a:36:c9:ba:41:56:ba:68:88:e6:6f:c7:96:93:26:6a:9c:
7a:c8:87:83:a0:52:a8:3f:9a:77:e6:4e:b9:21:18:eb:db:fc:
58:53:e0:77:4a:73:93:31:a0:bf:56:ac:df:48:82:29:ac:d3:
fb:0c:0f:57:49:25:87:43:89:5b:96:93:cf:b8:e2:c2:07:f7:
97:2e:e2:7a:50:c9:8c:9f:f7:08:8a:ed:3b:95:30:ed:8b:39:
23:b4:a9:d8:fa:69:ae:5d:0f:ff:3f:56:33:13:25:55:38:0b:
0c:3f:3d:e7:0c:0a:e7:de:01:9b:b2:be:3f:2e:1a:ac:ac:da:
a5:2c:b3:24:4b:da:0e:d0:ce:d4:1c:5c:49:79:0e:53:fd:e0:
42:31:27:4b:24:6a:12:eb:48:66:79:25:6d:46:8e:c9:18:66:
40:3e:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:08 2025 by rpki-client