Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ee6cab1-1025-3359-bf10-c2ad945c8063.roa
File: 4ee6cab1-1025-3359-bf10-c2ad945c8063.roa (raw, json)
Hash identifier: QDLuLszlI1z3HXn0nN9L+tjDamyD2BJIXRfQJKvrgzM=
Subject key identifier: 03:3E:88:E2:E5:08:DE:55:3E:88:E6:78:8F:36:84:12:2B:4A:DE:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9605ACA3CEDF6D6F0DA1E900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ee6cab1-1025-3359-bf10-c2ad945c8063.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:05:ac:a3:ce:df:6d:6f:0d:a1:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=31a4cb85-d329-4e6e-818a-cacea8c26cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:5e:87:2e:6f:b8:40:5e:af:e1:4f:df:63:
b6:38:01:d0:b4:41:61:fa:b3:85:ee:58:80:00:de:
01:ac:7a:67:27:72:83:35:cf:c1:04:90:ea:ec:25:
3a:e1:25:5a:52:33:fa:8a:e7:73:63:73:ed:84:3f:
b4:e6:70:aa:f1:98:23:a5:1c:93:19:8d:38:27:03:
b8:84:fd:7d:e6:eb:6a:d8:cd:b4:7f:26:c1:ed:a6:
43:3b:b0:f9:95:93:eb:83:7b:bc:b5:38:f3:c9:54:
60:97:5b:94:45:63:aa:2c:75:1c:1f:8c:3b:e2:49:
0a:2e:5e:58:73:31:c3:ec:f2:43:90:20:44:9f:51:
6d:19:92:1f:0c:11:f1:9d:c4:bf:2d:b5:be:49:f1:
62:fb:24:15:c8:61:91:aa:ee:05:e7:1d:e9:41:51:
7e:0f:61:6f:4f:a1:62:29:c7:c7:8f:91:cc:1d:91:
a5:65:d9:bf:12:b9:3e:bf:ea:60:0f:95:93:52:f2:
9a:4e:d7:d9:69:cb:00:82:a2:bf:fc:37:a0:da:42:
28:e6:ae:a9:c8:06:f7:e2:07:a7:21:6a:e6:dc:06:
13:a6:91:9a:49:6a:3f:cc:d1:5e:73:6e:d8:5a:a5:
ee:8d:d3:58:03:ec:e3:b1:e3:13:40:27:8f:e6:ae:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:88:E2:E5:08:DE:55:3E:88:E6:78:8F:36:84:12:2B:4A:DE:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ee6cab1-1025-3359-bf10-c2ad945c8063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:45:32:a9:e0:c8:37:2b:dc:12:c9:d9:f6:3d:9a:35:ba:59:
ca:65:65:98:00:b2:dc:39:83:f1:8c:eb:5d:3d:f8:0b:91:4d:
da:1c:df:dc:a3:f1:6c:f7:c8:07:b1:38:c6:46:04:59:29:47:
eb:57:03:c1:ec:ed:0f:da:da:34:6c:d2:85:97:ed:a8:7f:f8:
fa:75:6c:af:dd:55:8a:a6:1a:19:69:7e:22:6e:32:74:31:7b:
db:eb:8d:a1:26:2f:3a:16:45:9d:16:ac:92:e1:01:07:94:82:
77:82:86:74:59:ee:e1:36:c5:77:25:41:4b:14:9f:8d:a8:7d:
5d:b7:f9:88:e3:78:cd:a7:41:5b:c1:ad:f5:71:c2:d4:03:b8:
3a:f5:cb:60:66:fc:bc:59:d7:0f:0a:d9:b5:3d:e6:0f:de:cc:
5c:90:73:cd:89:34:cf:5f:05:00:c4:e7:07:67:63:d8:64:33:
e4:05:67:25:00:42:c5:74:0f:1c:35:65:c2:26:67:aa:67:5e:
53:61:df:8d:ce:f2:ba:04:38:00:b5:d1:2f:a7:04:d9:31:5d:
90:53:4b:1a:a8:4b:42:63:ad:c1:b1:5e:3f:36:63:4b:82:65:
5c:3f:fb:c2:1f:6f:10:1b:ae:08:9d:74:03:4b:12:6e:6e:a4:
7e:e1:b6:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6WBayjzt9tbw2h6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzFhNGNiODUtZDMyOS00ZTZlLTgxOGEtY2FjZWE4YzI2Y2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZdehy5vuEBer+FP32O2OAHQtEFh+rOF7liA
AN4BrHpnJ3KDNc/BBJDq7CU64SVaUjP6iudzY3PthD+05nCq8ZgjpRyTGY04JwO4
hP195utq2M20fybB7aZDO7D5lZPrg3u8tTjzyVRgl1uURWOqLHUcH4w74kkKLl5Y
czHD7PJDkCBEn1FtGZIfDBHxncS/LbW+SfFi+yQVyGGRqu4F5x3pQVF+D2FvT6Fi
KcfHj5HMHZGlZdm/Erk+v+pgD5WTUvKaTtfZacsAgqK//Deg2kIo5q6pyAb34gen
IWrm3AYTppGaSWo/zNFec27YWqXujdNYA+zjseMTQCeP5q4AswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAM+iOLlCN5VPojmeI82hBIrSt6pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGVlNmNhYjEtMTAyNS0z
MzU5LWJmMTAtYzJhZDk0NWM4MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHNN8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFFMqngyDcr3BLJ2fY9mjW6WcplZZgAstw5g/GM6109+AuRTdoc39yj
8Wz3yAexOMZGBFkpR+tXA8Hs7Q/a2jRs0oWX7ah/+Pp1bK/dVYqmGhlpfiJuMnQx
e9vrjaEmLzoWRZ0WrJLhAQeUgneChnRZ7uE2xXclQUsUn42ofV23+YjjeM2nQVvB
rfVxwtQDuDr1y2Bm/LxZ1w8K2bU95g/ezFyQc82JNM9fBQDE5wdnY9hkM+QFZyUA
QsV0Dxw1ZcImZ6pnXlNh343O8roEOAC10S+nBNkxXZBTSxqoS0JjrcGxXj82Y0uC
ZVw/+8IfbxAbrgiddANLEm5upH7httk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:24 2025 by rpki-client