Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/520f434c-5e42-38a8-918e-4e5a678d0e57.roa
File: 520f434c-5e42-38a8-918e-4e5a678d0e57.roa (raw, json)
Hash identifier: DUOYLx/YZzBq0TAVA6WpEvfSI3vSaZuaIakGEvODnaA=
Subject key identifier: 49:12:2D:0D:DB:F3:3D:B6:0C:39:0B:03:31:07:CC:91:CC:11:BC:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE4A30375DA9A9B23627895A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/520f434c-5e42-38a8-918e-4e5a678d0e57.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:a3:03:75:da:9a:9b:23:62:78:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=84f76cdc-0393-4858-a7fc-723be4dd1e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:c4:09:ab:9c:ff:21:ae:88:67:27:b7:87:
76:4e:80:0d:59:e5:0c:a5:03:9b:87:ea:8c:8e:ae:
78:ae:a9:8a:37:69:dc:df:aa:cc:e6:56:db:9b:fa:
4c:a7:c3:19:d0:01:29:30:8a:58:6c:2b:97:e3:de:
e8:5f:91:e2:27:69:f1:e7:c8:08:9b:d3:b8:ed:1d:
43:be:5c:84:ac:d4:08:2a:a7:f3:4a:b8:e2:09:7e:
c7:4d:64:75:bc:77:c0:0c:c0:94:bc:12:43:41:60:
17:9f:c3:59:34:1d:c3:5c:f1:a1:5d:3d:8b:7e:94:
8b:c6:6f:6a:6a:62:85:b6:80:20:ae:fd:e7:4c:4c:
0c:2d:45:42:4d:4b:8a:db:46:5e:50:de:73:b4:b9:
b5:63:90:a1:f8:ed:f1:61:84:b3:8a:c6:1a:0d:a6:
4b:23:7f:ee:d9:c7:25:00:f4:5b:20:db:b6:cb:17:
10:3c:d8:5d:c3:88:13:fb:96:46:44:b0:03:c9:ac:
11:09:6f:71:fa:6e:1d:27:dd:5e:a5:b2:06:3a:d9:
4d:c6:dc:4f:ae:09:45:aa:fd:e0:66:19:e2:d5:be:
b2:13:e7:96:a6:b1:4b:74:0f:f8:52:fc:2f:66:e5:
be:7d:b8:a0:aa:3d:18:f4:81:e1:ca:aa:ed:6d:7a:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:2D:0D:DB:F3:3D:B6:0C:39:0B:03:31:07:CC:91:CC:11:BC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/520f434c-5e42-38a8-918e-4e5a678d0e57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:44:33:af:3d:e4:5d:88:95:a5:80:f2:76:84:98:19:1a:3d:
8f:6c:e9:6b:a7:d3:7a:0d:6c:7e:58:2b:0a:27:41:da:16:49:
27:1c:13:32:60:2c:a4:80:49:cc:df:ac:29:e3:b6:6a:97:89:
d6:69:48:8a:a8:59:13:95:2b:de:39:08:c4:4f:42:b7:6c:1a:
28:dd:40:36:e1:4a:1d:17:5a:6e:51:f2:e9:ae:17:8f:49:11:
ad:af:56:44:85:fd:6f:5e:a7:a4:34:4d:47:ec:be:9a:cd:86:
05:ec:0f:e3:38:8b:8a:73:8f:8d:a0:9a:d8:e4:76:c0:0c:8f:
7f:f1:46:d6:95:b7:48:4a:83:2a:fd:b1:dc:4f:66:7c:5f:a5:
05:60:48:09:9a:b6:6e:9c:fd:3e:6d:d4:71:4b:91:79:36:9f:
74:c9:38:c6:12:38:f5:a9:11:54:5f:db:8c:41:90:02:d2:9b:
84:b5:5c:9a:1b:d0:9b:9c:35:09:5f:44:b5:17:d8:f9:f8:a6:
81:f2:b9:44:ff:6b:da:2a:75:a5:c0:e7:13:d6:db:fe:2a:23:
9f:8b:d4:ee:ac:6a:73:4c:57:d0:b1:d5:61:0b:4b:96:60:84:
22:cd:c2:84:89:85:79:1b:54:e3:32:da:94:a0:24:13:08:b4:
b6:c1:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:24:23 2025 by rpki-client