Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42fd8eef-23f0-326d-8bfb-2578ecfd4021.roa
File: 42fd8eef-23f0-326d-8bfb-2578ecfd4021.roa (raw, json)
Hash identifier: 4Z/+N5SED6W25S8ZR3hOSCxesmxM13IIXOrG7vuySAY=
Subject key identifier: FA:80:25:6E:14:7F:B0:CD:44:E1:8D:B6:2C:45:0F:C0:1C:53:20:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4943060C262491BBDAA5600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42fd8eef-23f0-326d-8bfb-2578ecfd4021.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:94:30:60:c2:62:49:1b:bd:aa:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=f3d446ec-8573-4fbf-a9ef-943865eac7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:7e:4a:be:15:ab:87:0d:21:b6:75:1e:6b:
10:ac:7a:67:f0:19:2a:09:6d:2c:fa:fa:98:cc:e9:
2e:27:52:49:1c:ef:f1:71:fe:30:c3:eb:96:b7:49:
9b:57:12:0a:ed:c2:63:9e:8f:8b:2a:7b:8f:9b:a1:
14:5a:27:5e:e0:be:3c:09:ee:2d:42:6f:6b:24:c1:
e5:c5:a0:00:f6:06:98:55:eb:94:a3:15:da:73:bc:
29:5b:4b:d0:ae:4d:90:12:b5:4b:0e:0a:01:c5:1a:
1b:84:1e:c1:d2:7a:cf:44:af:09:79:42:5d:d4:60:
8c:14:e7:1f:46:84:2a:6f:ed:d6:93:20:a8:79:a7:
15:8a:82:47:00:dd:c7:f6:75:29:07:60:30:90:8c:
de:5f:6f:c1:ee:f5:83:6e:ad:56:58:bf:41:3f:41:
99:08:2f:dd:ef:20:e1:09:0d:a1:f5:7f:4b:67:aa:
58:50:8b:b2:73:66:ec:e5:0b:a9:aa:77:3e:b2:92:
6d:9c:a5:14:ec:a3:25:29:7a:ce:e6:75:6b:4d:cf:
5b:f2:b3:a0:d3:c8:02:81:6b:cd:ba:ec:ea:51:dd:
c6:17:1d:3b:4a:e4:62:49:33:31:11:ff:6b:44:e2:
c8:5d:a6:8a:d2:80:12:4d:b4:9a:0d:c3:78:5b:3f:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:25:6E:14:7F:B0:CD:44:E1:8D:B6:2C:45:0F:C0:1C:53:20:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42fd8eef-23f0-326d-8bfb-2578ecfd4021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f2:07:b8:96:97:f8:27:5b:f1:e4:b7:b1:92:1a:b4:68:a5:
a4:01:35:28:d6:5f:ba:71:34:93:2c:58:2d:bf:45:2a:8d:a9:
c3:7a:87:1c:73:a7:6a:51:13:21:e6:0d:ac:4c:f3:f9:a5:e0:
ed:fc:1f:85:bf:ad:87:13:74:44:f5:3f:2b:a4:0e:80:ae:32:
88:7f:e1:9c:ef:41:f2:46:af:86:79:da:9c:7e:2a:29:c1:d7:
83:35:d0:5a:6f:57:61:64:3d:88:a3:20:e9:03:6f:af:10:15:
e2:9e:17:cd:af:c6:b4:66:85:a0:be:9e:a3:92:54:d8:65:89:
00:3f:fc:62:d9:4c:3c:31:d0:e2:d7:dc:5c:24:57:5a:6b:3f:
de:cc:01:34:20:1e:aa:4a:64:9a:57:01:a0:2f:9f:24:95:b4:
a4:6d:ad:4f:ec:0f:68:98:fc:8a:01:9c:ad:1a:4e:6a:df:7a:
d7:c6:0d:df:e7:3f:77:fd:4b:86:ae:ba:56:da:cd:6e:f8:72:
d3:43:aa:43:fe:e7:37:e9:71:8b:67:e7:75:17:0e:b0:da:8c:
5f:f5:0e:1e:ee:b6:cc:d0:72:f5:77:5d:b1:4b:bf:d4:bf:ac:
1b:c8:03:af:dd:c8:fc:fa:58:8f:53:1c:c0:22:4e:f5:f1:b8:
70:8e:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:14 2025 by rpki-client