Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d91b019-3dfc-3c96-8489-1e8447d03fc8.roa
File: 4d91b019-3dfc-3c96-8489-1e8447d03fc8.roa (raw, json)
Hash identifier: spnmmjZBOYGemW3EbH/4yOdRILvKEbAUvWhZs7iHUno=
Subject key identifier: 24:2A:2C:62:97:84:B7:48:96:1A:A7:09:2C:4C:61:A6:F9:54:7F:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E20AE53A878EBB51A149BFB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d91b019-3dfc-3c96-8489-1e8447d03fc8.roa
Signing time: Fri 03 Jun 2022 12:00:00 +0000
ROA not before: Fri 03 Jun 2022 12:00:00 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:ae:53:a8:78:eb:b5:1a:14:9b:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 3 12:00:00 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=82230b2c-451f-4949-8ca2-742a18c5832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:b8:75:5f:33:62:de:e9:d3:d0:68:ca:5e:
00:be:3e:80:5f:45:9f:f5:aa:25:ac:e3:fa:8e:97:
62:1d:62:ee:e8:b4:87:fe:08:fb:f6:1b:a8:d6:af:
e7:45:1c:e4:7a:00:76:18:cc:3d:78:f6:40:cb:85:
79:85:17:87:6a:7a:14:e1:be:75:e2:81:02:4b:de:
79:d2:87:47:2d:df:b1:8a:cd:73:19:4c:c9:54:53:
38:83:cb:b0:55:0a:4c:cb:0b:0f:3a:99:28:d8:82:
7e:ee:78:4c:f7:29:c1:bc:d0:78:c8:09:77:fe:e2:
e3:db:fa:8c:8b:38:f3:e9:af:08:86:be:12:55:8e:
3a:de:fd:9c:6b:76:1e:86:fa:bc:f0:47:1c:35:0c:
06:ce:7c:a5:88:ae:7c:68:78:5c:90:fb:06:b0:ef:
c0:2f:e7:06:2b:07:de:e4:f4:49:9d:08:71:80:11:
74:88:bc:6c:92:55:e3:35:d7:d3:da:0f:28:43:01:
41:d1:d4:ac:38:65:06:6f:0c:bd:f4:dd:f3:73:e7:
ad:c4:c5:33:30:28:49:95:a8:12:d9:2f:c0:9c:00:
22:09:44:15:fa:e0:77:d8:31:6f:7f:27:ee:57:1d:
d3:e1:31:d0:25:28:67:42:4d:c5:fc:fd:67:00:7b:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:2C:62:97:84:B7:48:96:1A:A7:09:2C:4C:61:A6:F9:54:7F:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d91b019-3dfc-3c96-8489-1e8447d03fc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:e9:5e:bb:f0:5d:e8:80:ac:3e:ae:11:cd:ba:2f:db:06:72:
58:b3:cb:36:62:ff:17:59:5b:bd:db:d1:f2:2f:7b:dd:65:80:
6b:77:8b:54:e3:f5:71:e1:3a:39:64:7d:82:56:f4:b8:07:5b:
dd:b1:e5:97:45:c8:bb:6c:10:6d:4d:d6:7e:34:3e:0c:cc:7c:
38:2b:8c:cd:7b:33:a5:35:aa:7d:8d:25:a8:8d:6e:71:b1:41:
65:8d:5b:a5:c8:bd:07:32:e3:98:ce:a4:8b:81:84:db:93:82:
14:e7:2c:35:c8:f0:98:b3:f8:26:6d:5a:df:bc:80:9c:a3:34:
7f:90:dc:37:42:51:b9:21:eb:0f:9b:ec:7d:05:14:f7:2e:2f:
52:de:5f:03:c4:e3:0b:ee:a9:07:ec:80:f2:5a:0d:9f:db:7d:
4e:8d:25:0e:21:4d:18:fc:b2:66:9f:e5:a8:89:d4:74:b6:20:
fd:5a:ab:22:4f:a4:cf:9e:d3:05:42:ad:12:5c:14:6b:be:61:
f8:63:3a:b1:63:3e:b0:df:2c:49:06:30:1a:66:ee:21:88:39:
d3:4c:3e:0d:e2:ac:b2:57:0a:4c:65:5d:2a:85:d8:ec:fe:b3:
5d:43:fa:65:86:ae:07:e4:74:5b:b9:49:7b:d2:05:09:aa:03:
e5:d2:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:16 2025 by rpki-client