Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f1a2a1f-979e-3ba9-89ec-ea42baee04b5.roa
File: 4f1a2a1f-979e-3ba9-89ec-ea42baee04b5.roa (raw, json)
Hash identifier: iIkEaZ5qywucg52W2dl/bZnTOSf3zKWEfPuBas0JlxU=
Subject key identifier: 0B:24:D2:B8:D2:70:87:DC:7B:E9:16:D2:68:5C:13:CF:90:18:0B:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C965983BAE9B22C55AC0E22C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f1a2a1f-979e-3ba9-89ec-ea42baee04b5.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 52.84.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:59:83:ba:e9:b2:2c:55:ac:0e:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=6f2d8046-5048-4366-9dbc-cc1241f3395e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:17:76:bf:c9:a8:68:75:0a:09:3a:d9:76:
dd:83:c8:87:80:2c:a8:de:ee:58:1d:47:3c:18:cf:
4d:fc:46:36:07:52:fc:19:ec:fe:c8:96:e6:dd:40:
a4:f2:ff:81:9a:48:19:25:98:37:4e:9c:5b:38:4e:
1f:3e:75:da:b5:01:25:a4:9c:e6:78:30:f6:6f:9c:
9b:6d:3e:1d:72:81:f2:dd:af:75:91:82:96:28:2a:
2e:f4:6a:33:ad:b8:a3:f4:42:0e:a9:ee:25:f4:c7:
e3:80:bf:4c:15:da:82:b7:c4:9e:22:3d:56:02:31:
35:65:60:f6:d1:9b:d9:71:23:df:d8:aa:1f:b8:11:
dc:fe:f0:9f:12:72:e6:c7:59:04:20:be:0b:da:ca:
20:0e:bf:9d:fb:4a:4d:81:4f:bb:b6:75:9f:39:5d:
dd:b1:31:04:29:d6:1d:dc:49:1e:3f:87:18:42:1e:
57:a2:1a:b0:70:23:4b:69:19:4e:a9:a7:b0:46:a6:
75:c8:2a:b4:3c:1c:fa:78:0c:bb:01:fd:a7:d5:70:
7d:e1:62:8f:ec:de:5e:70:d9:46:7b:2f:78:bf:5c:
32:aa:eb:e3:41:ba:31:dc:d9:11:fb:25:da:a0:20:
78:5a:44:27:9d:e9:6d:53:e3:ea:9a:be:93:2b:79:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:D2:B8:D2:70:87:DC:7B:E9:16:D2:68:5C:13:CF:90:18:0B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f1a2a1f-979e-3ba9-89ec-ea42baee04b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:94:e1:1b:28:c0:f5:85:8d:c9:56:45:d8:1d:ff:20:6b:9c:
2d:f7:db:70:31:17:f1:52:98:30:6a:c2:5e:0e:fd:ad:b5:ac:
84:8d:d4:ed:5f:22:cf:1d:5b:c2:be:32:82:71:09:8f:8f:15:
95:37:45:bc:e6:c4:ba:f0:05:c9:f9:e9:7d:64:28:be:d2:a7:
ee:dd:be:de:cd:98:8b:41:a5:67:06:91:c7:71:7f:62:bb:24:
1d:0e:7d:cb:13:53:cf:7d:57:76:d3:30:fa:0b:b8:56:1f:b2:
3a:97:74:66:5c:1b:7f:0e:36:74:70:13:6e:2f:c7:d6:bc:8e:
81:25:56:07:71:f1:bb:80:14:c1:11:a0:9a:18:e7:31:a1:1e:
13:e4:3a:80:6b:c5:71:f0:e5:82:56:cc:00:c0:e0:38:81:06:
a6:e1:80:40:44:b1:3a:e8:9e:ab:e9:3c:1d:d4:b0:bc:34:26:
a2:a4:ca:e8:15:62:a0:31:a8:de:22:b5:4f:af:ba:bd:eb:4e:
77:5e:ae:44:bd:a7:f4:4b:58:fb:8d:57:84:c7:8d:cc:69:b7:
6a:5d:09:e4:66:6d:88:a8:77:d9:80:ae:c4:bd:2f:bb:6b:30:
9a:b8:32:2c:91:bf:e5:fb:92:99:d8:5f:d0:2c:95:64:6e:41:
0e:0e:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:00 2025 by rpki-client