Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d49e90b-ebf2-369a-b04a-7b39ac21865c.roa
File: 5d49e90b-ebf2-369a-b04a-7b39ac21865c.roa (raw, json)
Hash identifier: XM7Bm8d/P6ilxgfSwcNZwZ5nam2rb7yU6qrylYrWnc0=
Subject key identifier: 0F:D1:72:48:71:2C:4F:4F:48:F8:60:C6:AB:8B:D0:86:A0:6B:27:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F80EF75094C3400A1692F1100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d49e90b-ebf2-369a-b04a-7b39ac21865c.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:ef:75:09:4c:34:00:a1:69:2f:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=6111c0e9-4ea8-451b-a461-0747232d0b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:88:02:2b:6b:ab:17:25:88:51:e1:fc:90:
8a:7e:d4:e7:40:43:8d:9d:8c:6f:02:b1:b5:63:e5:
b9:74:97:33:5f:0d:10:ba:25:e8:39:2c:fb:94:53:
4e:8a:47:a5:d1:b1:f0:9f:ee:f2:6e:f7:16:87:28:
27:b8:35:ef:b3:04:18:ea:64:71:8e:a2:fa:21:7f:
b7:2e:13:ec:0b:c9:45:b5:c6:a0:78:ad:2a:d4:c0:
a4:62:db:1f:af:e4:0e:a6:0b:e1:4e:40:98:1a:4a:
a4:41:ad:92:f7:9c:e8:7d:b8:df:da:e0:7c:06:56:
b0:05:54:9e:2e:22:55:05:e3:32:ed:b6:47:5e:8c:
3a:3f:12:ee:1d:35:45:c3:17:60:8d:55:37:5e:27:
75:06:42:2d:e9:45:cf:24:2f:4a:bc:ff:7d:51:36:
cc:0c:ba:25:c6:d7:5a:f8:75:c9:45:b4:8f:5b:a0:
91:23:c8:a5:dc:49:b1:7b:15:07:f8:ad:44:1e:41:
86:f0:58:21:94:b6:79:2d:6c:fd:00:4f:93:61:61:
a0:b9:12:51:11:15:f6:0a:49:67:c6:14:b2:01:ed:
92:1b:21:61:c5:fc:a0:9e:01:c2:ab:e3:f1:2a:96:
a9:80:e0:6a:84:06:18:19:d2:e1:1c:69:66:8c:64:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:72:48:71:2C:4F:4F:48:F8:60:C6:AB:8B:D0:86:A0:6B:27:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d49e90b-ebf2-369a-b04a-7b39ac21865c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a0:7c:fd:f9:1c:67:1c:0a:3c:1e:3d:cd:06:a1:d1:f0:c5:
36:a1:6f:4d:81:6f:09:29:b6:e9:5f:fa:73:8c:f3:32:91:3a:
37:e9:99:12:91:a4:fa:07:d4:56:53:55:12:d1:6a:23:ea:70:
fc:f8:95:96:0e:f9:e9:c0:df:f2:c0:ee:b2:6c:2a:d4:fc:3e:
53:bb:b9:db:ee:17:ef:20:09:ad:ea:94:6e:fc:28:9b:e4:5e:
e3:61:a7:d4:38:b8:ab:50:f7:c4:7e:01:62:2b:7a:1d:6f:d5:
56:20:93:8c:56:5d:2d:89:aa:14:6d:03:82:f9:d9:f7:c8:c7:
d7:81:35:0d:9f:9b:b5:76:d4:8d:b5:a8:e0:78:8e:7e:f5:d7:
be:2a:d4:f3:76:0f:34:fd:07:f4:3b:b4:65:47:d0:e6:ab:a6:
ba:ab:53:05:40:0d:f4:b6:c4:2d:a8:05:b3:ea:2a:5e:a3:6f:
91:c4:75:9d:80:14:04:a6:46:a3:58:70:0a:5c:7d:f1:fe:3b:
ee:42:70:00:c1:79:f1:2c:19:07:79:c5:57:b1:39:16:b1:81:
7a:ea:de:0a:50:cc:8a:a0:a4:09:b8:45:5f:11:b3:d8:77:ea:
2f:91:30:96:2a:18:bf:11:96:bd:c2:23:e5:d0:04:f9:6e:d2:
37:15:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:21 2025 by rpki-client