Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41ebb798-9a62-3d60-a960-483a4f4bdc35.roa
File: 41ebb798-9a62-3d60-a960-483a4f4bdc35.roa (raw, json)
Hash identifier: f70p+yYNcY8+E+7Gm/UKuBfGh3T8Vh6fyvakuG/nnlg=
Subject key identifier: 82:C2:7B:58:99:84:CA:3D:1B:09:C4:36:24:7A:71:D2:B7:69:BB:29
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0B6B88BA28379B6AE0E43700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41ebb798-9a62-3d60-a960-483a4f4bdc35.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:6b:88:ba:28:37:9b:6a:e0:e4:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=0601428e-581b-4a05-b196-ec793b4b2c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:60:58:69:a4:98:7f:90:ef:16:5e:16:b0:
1a:52:ad:38:ea:d7:d5:36:52:b2:ef:f6:18:e1:cc:
3e:fb:7d:86:df:1d:e9:40:5e:1c:4a:c6:04:fa:98:
36:25:00:cd:19:9a:75:80:06:e5:72:5e:1c:a2:88:
06:a5:70:a6:73:a8:66:2e:3d:7c:7f:8a:e1:c3:f7:
b6:e3:d4:88:2a:66:57:ba:37:78:38:3e:49:51:a8:
b2:b2:6b:5d:8b:0c:d9:12:11:4f:60:80:77:7a:6f:
42:23:1c:2e:bd:e6:e1:bb:72:05:1e:b9:09:65:97:
81:fa:09:0e:fb:70:20:c7:b6:ab:c1:c1:85:dc:78:
ff:08:5a:f3:b8:ac:d1:42:6f:7e:fe:35:1b:64:36:
cf:71:f0:6a:26:8c:9c:1e:ee:82:c3:d6:82:e9:43:
8d:1c:aa:27:75:be:84:ee:34:d1:4c:af:c0:f5:c1:
a3:bb:30:5b:ec:4e:f8:7d:40:78:20:69:2e:54:a5:
04:d5:14:3a:1e:5b:cc:81:0d:ae:46:7f:d0:2d:1f:
d2:66:ad:a7:6b:e5:e0:53:f5:7d:dd:79:e5:22:87:
03:7b:5b:64:1c:0f:d1:b0:d9:17:3d:3a:31:8d:7b:
6c:81:19:c7:9f:d0:69:5a:3e:4c:77:62:55:f6:72:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:7B:58:99:84:CA:3D:1B:09:C4:36:24:7A:71:D2:B7:69:BB:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/41ebb798-9a62-3d60-a960-483a4f4bdc35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:1f:5a:17:0c:7c:14:d1:b9:0b:e5:21:65:19:f9:e6:68:d6:
d2:bd:36:5f:62:ca:09:ca:54:7f:a8:ce:be:05:a5:69:ee:5f:
e0:d9:fa:54:c2:d0:c2:28:ff:b3:13:a1:02:bf:78:26:16:61:
e2:87:f0:83:92:ac:65:c0:33:9c:40:ae:08:1c:a9:43:77:dd:
ce:9a:b0:b0:a1:3a:bf:4b:21:6b:fe:15:56:02:d6:c5:37:43:
3d:01:02:cb:e9:26:cb:7a:be:63:8f:b8:75:0b:3f:b1:67:90:
37:af:f4:a8:84:31:4d:a9:60:22:86:5b:08:ba:fe:c9:6a:42:
56:68:78:a9:67:ee:39:48:af:8d:57:69:ac:8b:8a:2e:ce:64:
15:b6:6d:4d:1e:a1:0b:bf:38:75:8d:8e:87:6c:2e:1f:3d:7b:
c5:83:42:5d:a4:c0:2b:45:ee:ab:6e:4e:77:81:6d:0e:fd:e1:
45:7f:68:c2:e2:e0:98:04:58:55:3e:bf:69:40:39:2f:ff:2c:
9d:e5:ee:da:24:54:5c:b5:18:76:0a:1f:c6:58:d9:a4:bf:83:
40:c3:4c:10:8c:70:0d:1c:26:13:43:15:47:69:c6:0c:f4:b2:
a4:9e:97:83:b2:e0:da:27:4d:7a:26:78:1a:dc:05:65:8c:e9:
d5:2e:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:32:33 2025 by rpki-client