Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41838542-2cda-3e39-a50d-832007ccc2f1.roa
File: 41838542-2cda-3e39-a50d-832007ccc2f1.roa (raw, json)
Hash identifier: njxI+H3F57pfnTNvcYKRaJueBmMaVcAkYDotGB8ox5g=
Subject key identifier: 4B:54:E2:48:9A:7A:03:CB:63:B4:C8:E0:F4:0B:F6:D5:68:41:47:BC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B550D177E890F11B9011F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41838542-2cda-3e39-a50d-832007ccc2f1.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:55:0d:17:7e:89:0f:11:b9:01:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=6703f7d7-ae99-4eff-81ee-0fe6e62298d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:fe:1a:d3:cb:00:42:23:a0:15:96:40:6c:
be:6e:bd:80:ee:0b:e8:6a:c6:ba:a4:ba:69:79:7c:
39:4c:fb:88:6f:2e:7d:ff:b0:3c:12:b5:d1:ca:37:
8b:bc:60:dc:c5:2e:07:aa:67:35:ad:f5:06:bb:93:
26:cd:75:99:5e:fe:3c:2b:49:41:7b:68:3b:90:60:
4d:0a:47:fd:8f:50:8a:0f:8d:1e:3e:9b:c4:c8:db:
08:27:e4:48:b5:1e:66:ec:39:44:c3:71:ac:37:ce:
78:eb:66:13:2a:44:5d:eb:fc:f3:f4:9e:0d:62:00:
42:47:3e:32:bd:06:8d:26:40:f8:f0:de:ec:ca:54:
56:83:62:11:52:63:9a:69:d2:e4:59:aa:7b:2b:fa:
fa:e7:e6:0f:b2:4d:d5:b2:2d:e4:da:a7:9b:b1:e8:
75:55:b5:b4:fb:6e:95:03:c5:05:b1:61:92:b3:d7:
34:9b:fa:87:d8:e8:b7:cf:f8:2a:50:db:8d:31:f8:
68:e6:4e:00:e6:de:9d:b7:13:65:2d:c5:8c:30:e7:
8d:1f:24:4d:a9:b1:ea:83:b6:85:9b:23:b9:2d:f3:
00:5e:26:7e:6c:fb:7a:bf:9c:b0:a0:aa:32:a4:d9:
91:0d:ec:59:fd:9a:d3:52:a0:77:56:f4:06:b3:d9:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:54:E2:48:9A:7A:03:CB:63:B4:C8:E0:F4:0B:F6:D5:68:41:47:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41838542-2cda-3e39-a50d-832007ccc2f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:31:f7:7f:d0:55:d3:50:e0:28:a4:a0:e2:f1:ce:ee:16:45:
82:da:43:f5:36:a0:95:f1:e8:5e:8d:43:e6:3b:0c:a9:24:56:
74:51:55:02:4d:67:39:ad:b2:ef:be:5b:e3:56:a9:ec:0a:b9:
d9:eb:bb:a8:c7:90:4f:06:26:ea:a6:d8:54:01:f1:5e:25:ba:
91:f1:43:b3:78:0e:a2:3d:15:ae:d7:84:c5:f9:f4:25:d1:31:
0b:8e:99:fd:4d:66:d6:5a:01:e1:71:ff:5d:d2:20:d4:75:77:
9f:cd:08:c6:cf:e2:70:05:21:5f:d9:ee:0d:58:87:2a:fc:30:
20:50:6a:44:e2:b5:6d:b5:52:d9:c9:98:98:a0:cf:64:3a:9b:
91:d7:fd:86:17:8a:6c:49:3b:29:ef:36:e0:32:ae:81:9d:a6:
cf:f6:e3:11:95:19:9d:cc:6a:ff:33:0a:3c:39:95:43:55:29:
76:fd:a5:5e:80:b6:54:78:f7:8d:1e:04:b4:ad:c4:74:34:45:
1e:97:f0:ac:28:46:80:21:e0:19:ec:70:35:ac:29:5d:5e:b6:
24:d0:57:5e:c2:f6:de:a0:9a:0e:98:b0:54:78:d5:bc:fe:77:
98:a3:19:71:8a:79:c3:3e:23:a3:42:9d:f3:42:4b:67:97:89:
e2:16:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:02 2025 by rpki-client