Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/536d011d-301a-386a-b054-0f44a3acb3b0.roa
File: 536d011d-301a-386a-b054-0f44a3acb3b0.roa (raw, json)
Hash identifier: bsPb5ffn85lx7ruVtxfGBL25SeBj8dhA9dPlnA8mPO8=
Subject key identifier: 5D:CF:1E:2B:A3:4C:0D:6A:C7:2F:1B:75:A3:1F:DA:3B:DD:23:06:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB9FE74D1D4F7827FC9EAD820
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/536d011d-301a-386a-b054-0f44a3acb3b0.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b9:fe:74:d1:d4:f7:82:7f:c9:ea:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=bc066ded-dfb3-4f0f-bd29-7a5c8320c601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:96:c3:a9:87:a0:3a:4c:d8:d8:25:4d:ac:
74:46:cc:45:ae:e2:28:66:0d:ce:f9:12:7a:f3:8b:
b1:02:f5:b1:77:6f:79:48:82:b6:cc:1c:80:72:17:
67:63:b9:ff:94:85:26:a5:36:ca:4d:ff:45:99:e3:
44:cf:c0:7c:3d:30:9c:27:2e:b1:63:b8:54:a9:ac:
99:83:a0:9a:60:1f:c2:22:dc:b4:b6:28:63:05:6f:
bd:3e:3b:90:1b:e7:ac:72:95:09:1b:e1:6d:54:f7:
52:25:cf:5a:83:6c:3b:eb:80:71:58:da:23:c6:9a:
9c:7b:39:f0:c1:49:c0:14:42:99:ee:46:6e:6b:19:
58:40:07:1a:d1:9a:0c:75:3e:a2:7f:72:ba:f7:fd:
d4:16:93:98:5c:3d:ff:47:cb:5a:b4:9c:6f:02:d9:
ce:fa:02:93:75:d4:74:1a:0b:c4:94:5c:78:22:f5:
dd:25:2f:af:da:19:1d:6e:4b:e7:11:3d:58:28:fa:
86:5c:85:74:99:45:ee:c0:81:c9:57:af:c8:c2:65:
6b:66:9d:17:4a:c1:6b:96:f1:d9:55:46:0f:ed:b3:
8f:cb:1e:9d:51:27:3c:20:55:e9:17:33:0d:dc:4e:
aa:a9:63:d5:6b:64:07:3d:a6:74:73:15:cc:1a:ee:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:1E:2B:A3:4C:0D:6A:C7:2F:1B:75:A3:1F:DA:3B:DD:23:06:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/536d011d-301a-386a-b054-0f44a3acb3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:68:51:ad:06:2d:e1:b2:42:51:1b:e9:11:74:05:48:ff:c3:
e6:6f:a4:1c:b2:09:39:8e:00:80:22:ce:ab:83:43:9a:5e:4d:
81:d6:39:51:ed:26:0b:4c:b9:79:bb:8b:af:1c:8f:0c:42:96:
21:8b:59:d5:da:95:a4:d9:17:ed:9e:a7:1e:2f:f8:d5:d0:88:
be:5c:86:00:39:7f:09:5d:ed:74:56:e9:a5:c7:94:df:ec:01:
51:43:2c:ec:01:d4:51:25:d3:88:47:4d:04:3c:f9:1d:bc:11:
72:a9:7c:43:87:53:0a:9c:ff:f0:90:2b:96:8c:0a:41:39:dc:
5c:be:e3:bd:f0:d5:0c:a3:59:b4:3b:37:c8:79:2a:2f:93:09:
ef:3e:6c:7d:8a:00:4c:ab:c4:f7:ad:ea:55:a8:6e:1d:9a:48:
e5:38:d3:35:d9:99:cd:57:54:01:00:72:61:b4:4b:d9:76:32:
5a:91:90:44:bb:f6:cc:c9:9f:1d:f9:34:70:b2:6d:07:5a:aa:
8c:b9:85:5b:b6:18:52:9e:84:8c:e5:35:7c:f5:d8:ba:29:f1:
a2:f6:63:8a:84:92:fd:5b:da:a4:e8:3f:e7:04:f2:2b:5c:32:
65:ca:f5:36:f4:30:62:95:42:e4:45:d2:b4:c8:11:c6:bd:42:
b8:6c:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:17 2025 by rpki-client