Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51e4354e-7e87-3ebe-bab3-cd7d004948d5.roa
File: 51e4354e-7e87-3ebe-bab3-cd7d004948d5.roa (raw, json)
Hash identifier: tdxD5g39PU8i0kZIKELZ9gsCw9XBPbcMjPV9dgpLFxA=
Subject key identifier: 31:4E:35:75:0D:DB:77:20:1A:BA:12:D3:4D:52:2C:29:AF:6B:90:B4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5AED356A2724FF7479564A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51e4354e-7e87-3ebe-bab3-cd7d004948d5.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:ed:35:6a:27:24:ff:74:79:56:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=e6c521da-f978-449d-8b79-38410eeee00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:9d:b5:a8:68:71:23:11:2f:c9:c4:bb:2e:
3f:d6:4b:0f:23:2d:00:e6:12:62:fa:ab:e2:10:ae:
4c:24:54:89:27:ed:bf:1d:94:98:b0:43:bd:4b:b9:
e3:0d:ae:3c:a0:a2:f6:2a:1b:a0:bb:7f:9b:1a:55:
5e:b1:7c:86:26:64:ee:3b:1c:db:05:58:d5:58:7d:
38:65:69:f6:22:44:77:34:b7:84:24:46:5a:1d:e9:
29:6a:72:87:66:40:f8:fe:87:3f:22:69:42:3d:15:
ac:03:29:5b:fe:fa:ca:f9:15:2a:ee:ef:d9:40:f5:
54:e6:46:0a:ba:fb:d1:cf:5c:3a:0b:34:fc:66:00:
b7:f3:d8:12:f1:46:48:f3:d9:48:8a:25:5d:06:76:
7c:42:28:38:b9:b6:cf:e6:63:31:45:bc:63:34:38:
b3:b3:e2:2d:b1:eb:6d:68:9f:02:3d:0f:90:ff:31:
70:9d:4b:ac:b0:02:e4:84:c6:8a:fb:c7:43:5d:9f:
c9:a6:bc:b8:85:ef:55:3e:6f:11:16:e2:8e:d2:27:
63:e6:e1:f8:5a:a4:59:f8:6f:f7:c4:65:bf:a8:a1:
41:18:2c:c4:a7:4f:50:8a:c0:03:a6:ac:83:b8:f5:
d4:67:ac:a9:e4:5e:fe:06:36:41:29:5c:f4:42:29:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:35:75:0D:DB:77:20:1A:BA:12:D3:4D:52:2C:29:AF:6B:90:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51e4354e-7e87-3ebe-bab3-cd7d004948d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:72:81:79:cd:4f:92:8b:9a:45:99:f3:88:51:06:b3:7c:22:
fb:2a:de:73:03:36:ff:68:d5:6e:52:c8:b5:36:39:37:d9:a3:
ac:65:30:c3:69:4b:b6:21:6e:23:c1:02:c6:58:8b:26:0a:01:
05:63:9f:30:91:c5:10:80:ee:a5:a4:90:a6:a5:5e:dd:0c:4a:
19:b4:85:1c:92:f5:38:75:30:96:90:ca:e3:19:76:ce:12:1a:
a5:93:5d:96:0d:93:32:83:f9:a6:b4:8b:f5:18:4a:fd:c6:65:
d5:e3:f8:ee:2b:a1:3d:c2:55:7c:ba:29:48:dd:f6:62:1f:2f:
4e:7d:63:0e:eb:9e:42:47:b8:6b:65:4f:ee:38:14:ec:0f:22:
da:77:eb:f2:f3:cc:47:61:65:69:86:d2:6e:80:82:c8:5c:02:
25:e1:ce:cb:d9:9c:9f:7a:e0:31:f7:3c:d8:1e:07:73:c5:57:
51:89:43:fc:5e:f3:e4:80:44:d1:f8:8b:7b:25:39:48:ca:e9:
6d:58:11:48:25:3c:06:37:a9:bc:40:56:4c:1b:5b:c4:92:0d:
3d:f8:75:77:83:28:d7:bf:1d:2f:51:bb:46:ba:41:cf:1b:2a:
80:f3:5d:82:5e:ec:38:5a:64:c5:a7:91:ca:74:6e:e7:15:38:
e5:fa:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:55 2025 by rpki-client