Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3efb8c87-2906-3818-8ed8-d4a21bb9f1f1.roa
File: 3efb8c87-2906-3818-8ed8-d4a21bb9f1f1.roa (raw, json)
Hash identifier: Yjo+wd6XDB38unV/PuNYyeN5bL0wogM4GQZ0qp8hXSk=
Subject key identifier: B5:9C:1A:23:BD:BC:7D:B5:AC:70:21:21:DF:F9:2C:BD:87:A8:6D:E6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F3CE4D6AC31ED4097120760
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3efb8c87-2906-3818-8ed8-d4a21bb9f1f1.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.0.0.0/11 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:3c:e4:d6:ac:31:ed:40:97:12:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=a8ff8361-24c1-428e-b84d-96b24b664d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:80:cf:a3:05:1d:80:77:5d:e2:76:60:8c:
74:3c:0e:f1:81:37:4e:56:40:a4:52:d4:92:9e:86:
dc:e0:51:39:ca:47:1e:ca:80:55:21:6e:77:0d:ed:
45:c4:48:b8:ac:d7:54:cc:e2:7c:31:1a:26:d0:c0:
8f:88:34:35:09:4d:ff:28:44:0f:d5:b2:3a:a5:72:
6a:18:27:d7:68:be:73:df:93:17:92:2f:71:ba:64:
cf:97:79:52:e1:a8:24:5e:46:82:c5:8b:3e:b0:83:
a6:1e:bb:5d:83:ff:22:a0:7e:f6:90:4a:99:dc:81:
6d:18:4e:fc:05:d3:6e:c9:bc:36:55:3b:45:97:6b:
34:65:79:3a:c0:fe:3e:83:2f:07:21:a5:aa:03:7e:
1b:6f:dd:ce:78:b3:63:9f:23:89:81:18:e8:9b:72:
1e:20:5d:cd:3c:6a:dd:6f:d9:e8:a8:b3:23:a3:eb:
d7:e5:c2:7e:56:a9:a1:17:2d:37:8b:55:6f:26:6e:
7a:de:11:d7:62:4c:bf:37:6c:cc:77:7f:1f:e0:6f:
82:d7:61:96:40:fd:7f:74:3a:a1:d5:2f:23:3a:4f:
7b:fa:c2:21:54:8d:ae:ed:9a:6f:8a:1b:2b:d5:0a:
90:66:28:c9:ec:3b:ca:0b:43:e8:1f:78:65:57:6d:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:1A:23:BD:BC:7D:B5:AC:70:21:21:DF:F9:2C:BD:87:A8:6D:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3efb8c87-2906-3818-8ed8-d4a21bb9f1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.0.0.0/11
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b5:26:33:a8:01:ec:a2:c2:e7:e2:66:21:0c:ee:5c:9d:25:
94:02:62:27:95:91:01:91:eb:4d:c9:58:bd:6a:08:8f:a5:fb:
ca:52:3e:6a:47:7e:78:d0:1b:7c:e5:3f:bf:5f:f6:c5:e5:76:
a7:79:10:a8:a3:72:5e:8e:ec:05:e2:f4:7b:1b:27:ba:d4:07:
92:ce:8a:a6:be:dd:54:51:a8:1c:e6:fe:30:f4:8c:9b:5a:5f:
fe:0f:dc:65:90:e1:3c:29:34:06:b8:0c:31:fe:3a:57:55:f7:
ad:72:78:5e:65:46:29:1b:4a:9f:13:2b:aa:d6:d0:08:4e:ae:
39:61:7a:75:47:08:a9:d2:68:98:3d:70:44:67:98:f7:5f:96:
7f:36:66:ba:c6:66:41:d6:ba:f7:36:a3:fe:29:bd:e0:32:30:
f0:b0:47:45:e9:a0:f3:ff:e0:3a:54:18:26:11:6f:3b:43:75:
5b:fb:a2:01:2a:25:a8:10:8b:e7:2d:3a:04:5c:fc:c4:00:69:
70:80:37:d1:00:c0:7c:4f:bf:61:ba:33:24:63:77:4d:79:d2:
3c:08:59:c1:6b:8c:c0:5c:8f:b4:29:96:7b:89:a8:8d:26:7d:
8e:08:44:2b:3a:e2:e7:0b:f3:05:8b:90:58:d6:d8:a7:8c:c8:
57:35:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:29 2025 by rpki-client