Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43d3f619-2595-3626-92b9-c161b24c5adb.roa
File: 43d3f619-2595-3626-92b9-c161b24c5adb.roa (raw, json)
Hash identifier: ddehZnwjLofya3CCv7rWo2BU/Wrnm+dhIOionlps1Uo=
Subject key identifier: 20:C8:FF:08:F0:C4:08:CC:D7:26:FF:9E:D1:12:76:20:ED:F0:DE:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406A5D4484C24272841E812540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43d3f619-2595-3626-92b9-c161b24c5adb.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:5d:44:84:c2:42:72:84:1e:81:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=ddfc5538-e116-47a1-801d-496f7d3ffdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:18:27:c2:c8:43:19:45:ca:a3:d5:7c:d6:
a1:38:63:08:65:89:bb:da:de:81:b7:71:5f:a1:18:
ec:fd:c6:0e:d7:18:68:7b:7a:27:21:55:95:9c:21:
2f:9a:31:4b:2b:fd:9a:cc:6d:fc:62:56:bb:11:d9:
73:02:49:c5:8a:cf:2f:e2:67:98:ed:38:f1:a2:da:
60:f8:69:fb:45:01:17:31:24:d5:fe:21:a6:ad:1b:
f0:63:1e:bf:64:14:2a:b2:a2:fc:b5:0d:4e:0c:83:
05:06:d3:f9:34:20:39:29:87:dd:c5:7b:c3:04:44:
5a:89:39:65:c3:e2:08:16:5d:e9:88:0f:4a:2d:87:
cd:02:66:77:ca:41:8f:e1:88:a3:62:d8:75:30:0f:
a2:26:2a:8f:48:19:64:51:f1:4e:8a:d2:fa:4f:e0:
e0:28:5b:df:69:04:1d:22:ff:bc:b6:c5:72:7c:03:
c7:14:09:01:8d:86:00:fe:79:45:17:9a:ed:a7:40:
4b:cf:4f:60:86:58:31:55:1a:13:c7:76:e8:2c:bb:
66:05:3e:77:c2:b8:04:ff:8b:08:ee:4c:58:a6:84:
20:0a:d3:f5:3d:92:34:b8:e2:16:7e:d2:f5:36:4e:
ac:e3:75:b5:34:26:79:f0:df:16:e4:d8:9e:15:03:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:FF:08:F0:C4:08:CC:D7:26:FF:9E:D1:12:76:20:ED:F0:DE:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43d3f619-2595-3626-92b9-c161b24c5adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a6:71:68:17:86:aa:18:e1:fd:84:71:1c:59:20:f2:87:c0:
d9:79:ce:ea:3e:f1:ac:5d:75:24:47:bf:1b:84:99:33:87:6f:
aa:d0:70:5d:c9:cb:8a:2e:ec:b8:1c:af:3f:63:bf:1e:09:1c:
21:55:2d:9b:cc:15:4e:8d:bd:47:e2:66:e8:72:8e:83:04:18:
00:92:f3:37:9b:ea:39:f3:b4:0d:37:e5:6e:4d:a5:68:bd:52:
a2:29:84:13:d9:29:d2:02:60:a4:2c:a7:9d:30:11:18:91:34:
df:fd:d8:bf:64:38:17:db:df:db:4a:f6:fa:de:1c:8d:ce:0f:
3e:d7:de:9c:48:80:dd:b2:f2:5b:61:8e:5d:f8:32:75:b9:55:
ef:7b:68:0f:07:4e:e1:a5:c0:fd:b4:07:c3:5c:0a:b4:7b:7b:
cd:c8:e5:ef:a5:ff:89:7e:cb:4b:28:b9:d7:6d:29:22:f2:fc:
c5:01:13:4a:1a:19:9d:31:4a:4d:44:bb:b7:e3:84:58:86:86:
7e:91:70:a9:f4:bf:a2:d8:5f:6e:75:7a:0f:cf:1a:ea:2f:6b:
51:66:65:62:36:97:0f:92:54:f8:ad:be:2c:22:81:14:21:c1:
45:5c:02:17:81:49:88:51:70:1a:e3:e0:da:73:93:54:de:53:
8c:78:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:50 2025 by rpki-client