Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49b24774-36de-3e53-a910-515b025b50c6.roa
File: 49b24774-36de-3e53-a910-515b025b50c6.roa (raw, json)
Hash identifier: 6fXBtF1/M7mo1hfglN2adCmu8Z51mHhz5802aa+xcl0=
Subject key identifier: 4E:F5:C1:98:AA:35:3D:05:B4:68:D7:C4:3B:E8:7F:FA:B7:4E:B0:B8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409172AB551DCE72EEEB44B880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49b24774-36de-3e53-a910-515b025b50c6.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:91:72:ab:55:1d:ce:72:ee:eb:44:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=d03f146d-ed7a-4675-8e02-a57e69b4403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:77:6a:c0:40:c6:d6:3b:ef:4c:1f:c7:e6:
c7:84:77:e6:af:4f:16:05:a2:e2:7d:9f:f1:17:f7:
6b:ee:63:e5:4b:ef:8a:01:d0:a2:a2:f4:b4:ec:60:
52:93:cf:fe:28:6c:1d:92:d4:3d:2d:4c:2d:e0:d9:
61:17:c3:37:f5:2a:1a:ef:56:bf:89:80:f6:db:74:
b2:1c:b7:88:ee:a7:c1:d3:84:f3:1a:f3:0b:32:c2:
cc:28:d0:d7:c6:db:88:91:62:bc:33:db:6c:98:f5:
6c:c2:a7:a8:b1:1b:84:bf:74:44:1e:70:c5:7a:cf:
9b:4f:3a:36:53:c0:ea:e4:be:43:3b:7c:c3:c5:d7:
72:5a:5c:bd:c9:3f:3d:bf:37:69:5d:bc:73:52:65:
17:05:fd:4f:ef:b8:f5:19:ab:31:0d:85:00:cc:ee:
04:54:3d:db:a3:2e:a9:97:92:6a:db:30:f8:b1:ff:
4f:e6:d8:b2:80:dd:52:07:ce:87:50:7c:b1:eb:92:
04:d9:4e:92:af:cf:37:13:0b:5b:ef:09:62:ed:da:
24:d3:70:6d:c7:f9:91:5d:60:39:ea:a3:08:25:5c:
06:94:c9:2a:00:bd:af:26:58:17:8e:85:0d:10:3c:
f7:7c:e8:7d:26:63:5a:45:72:c9:e7:f1:12:06:b2:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F5:C1:98:AA:35:3D:05:B4:68:D7:C4:3B:E8:7F:FA:B7:4E:B0:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49b24774-36de-3e53-a910-515b025b50c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:7c:b7:6d:5f:ea:94:fd:3d:5b:05:ea:1c:1e:65:c7:c1:46:
ca:5e:45:5d:ce:32:88:71:ff:e1:c9:11:c3:e2:7d:51:66:0f:
fa:36:ee:da:07:8b:53:a4:41:06:29:30:75:00:4c:b0:88:64:
4f:90:20:11:59:bd:6b:73:71:df:7a:04:10:9f:47:30:d3:b7:
1e:d5:72:d1:90:9f:02:55:9a:09:09:73:7a:19:95:80:a3:f0:
3e:84:30:33:2b:d0:14:95:4c:0c:44:09:df:bc:91:35:c4:2e:
62:59:e2:d3:1f:1e:1b:9a:d8:4b:9e:fe:3f:95:39:af:be:7c:
f7:d0:f3:df:4c:5d:07:c3:a7:05:d6:ea:e8:ab:d7:73:29:ae:
eb:18:90:5c:62:c2:93:72:69:9e:18:a2:80:bd:72:63:04:67:
22:b0:a3:0b:ac:88:c6:a4:ab:47:bd:f3:95:0e:2b:66:21:fd:
67:73:73:75:8b:2c:6f:ee:cc:7c:4d:bc:b4:84:04:d3:de:b4:
2a:2b:74:57:45:29:b2:0e:28:64:11:a2:70:7a:c1:b2:fc:00:
00:4b:03:a9:c1:79:b2:c0:36:2d:7b:eb:6d:eb:c8:ac:d9:1a:
12:b3:e7:14:42:20:d0:b0:bc:14:82:0f:e5:98:40:49:dd:57:
c3:bb:ac:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECRcqtVHc5y7utEuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDAzZjE0NmQtZWQ3YS00Njc1LThlMDItYTU3ZTY5YjQ0MDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEd3asBAxtY770wfx+bHhHfmr08WBaLifZ/x
F/dr7mPlS++KAdCiovS07GBSk8/+KGwdktQ9LUwt4NlhF8M39Soa71a/iYD223Sy
HLeI7qfB04TzGvMLMsLMKNDXxtuIkWK8M9tsmPVswqeosRuEv3REHnDFes+bTzo2
U8Dq5L5DO3zDxddyWly9yT89vzdpXbxzUmUXBf1P77j1GasxDYUAzO4EVD3boy6p
l5Jq2zD4sf9P5tiygN1SB86HUHyx65IE2U6Sr883Ewtb7wli7dok03Btx/mRXWA5
6qMIJVwGlMkqAL2vJlgXjoUNEDz3fOh9JmNaRXLJ5/ESBrIodwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE71wZiqNT0FtGjXxDvof/q3TrC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDliMjQ3NzQtMzZkZS0z
ZTUzLWE5MTAtNTE1YjAyNWI1MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCNFQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYXy3bV/qlP09WwXqHB5lx8FGyl5FXc4yiHH/4ckRw+J9UWYP+jbu2geL
U6RBBikwdQBMsIhkT5AgEVm9a3Nx33oEEJ9HMNO3HtVy0ZCfAlWaCQlzehmVgKPw
PoQwMyvQFJVMDEQJ37yRNcQuYlni0x8eG5rYS57+P5U5r75899Dz30xdB8OnBdbq
6KvXcymu6xiQXGLCk3JpnhiigL1yYwRnIrCjC6yIxqSrR73zlQ4rZiH9Z3NzdYss
b+7MfE28tIQE0960Kit0V0Upsg4oZBGicHrBsvwAAEsDqcF5ssA2LXvrbevIrNka
ErPnFEIg0LC8FIIP5ZhASd1Xw7us2w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:39 2025 by rpki-client