Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dc21070-1c2d-3982-ae84-09eee9a65c1b.roa
File: 5dc21070-1c2d-3982-ae84-09eee9a65c1b.roa (raw, json)
Hash identifier: X+zxcU25dCGP9jZh9AubulCe8Mdm/2evaNQZNK0bV8U=
Subject key identifier: 54:39:6A:AF:71:70:41:5A:1B:90:CD:D2:D6:15:76:06:8D:54:4B:48
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCB34D65B41BD27D60B5B1B40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dc21070-1c2d-3982-ae84-09eee9a65c1b.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:34:d6:5b:41:bd:27:d6:0b:5b:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=b1ad2df2-aee1-40ae-88ef-3651b2d67c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:3b:e8:f4:9b:e2:b4:9d:47:a5:d6:56:18:
02:d4:21:d6:7e:b1:87:b0:0f:22:b1:6c:0d:e7:35:
00:b6:2c:c2:2c:64:40:48:60:e3:e7:01:b6:c6:76:
ab:1f:17:20:aa:99:a3:2b:66:b7:9a:b3:5e:83:15:
5b:ae:8f:48:bc:6c:3c:ae:6f:ae:4f:23:8d:d0:f6:
7d:30:60:91:4f:04:5f:69:76:78:eb:56:80:97:70:
33:d4:8b:c6:7d:71:9f:67:67:6f:5f:19:b2:af:80:
d8:02:fa:cc:19:21:10:20:c1:de:52:6f:bf:0f:b1:
bd:57:2d:8f:2c:0d:4a:6d:0b:60:21:02:1b:d2:fc:
0c:af:a6:37:be:60:29:a4:05:95:f0:7a:db:f2:c4:
a4:a5:92:bd:65:d4:16:e4:ee:af:fa:dc:5e:61:b5:
2f:8c:e6:3b:33:55:4e:34:a5:24:20:e7:5d:ea:a9:
47:3e:6d:0e:13:08:4d:c6:51:53:7e:db:bc:d9:cd:
95:fc:eb:8e:7c:e7:00:99:23:41:81:99:b5:c5:1b:
f4:35:9e:f8:5b:a5:47:49:9e:90:73:51:d1:6e:a4:
83:5c:1a:39:33:58:5e:3c:e4:fa:85:7e:80:f5:bd:
49:c5:86:9f:ac:06:2f:ca:e8:62:78:d3:03:56:f4:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:39:6A:AF:71:70:41:5A:1B:90:CD:D2:D6:15:76:06:8D:54:4B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5dc21070-1c2d-3982-ae84-09eee9a65c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:59:f1:fd:8d:bc:b3:79:9a:21:ff:89:36:22:9b:cd:1f:f5:
e7:97:7f:5f:3a:75:5d:20:3b:9d:cc:8f:26:b8:6e:7f:f2:d0:
f4:40:ba:24:e2:b7:c0:94:5a:b7:ef:11:cf:ec:00:2e:58:a1:
37:52:37:58:24:8d:02:e6:f8:dd:a8:2d:04:19:78:f0:b3:ed:
57:31:bb:ce:89:ac:a2:5a:fa:27:95:f3:ed:55:a1:09:de:08:
9f:b4:75:e4:52:9b:09:0e:16:63:e6:50:cf:28:83:7a:fb:82:
55:f2:d9:98:cd:ab:60:0f:95:21:ea:42:62:a7:08:32:70:bb:
1d:89:b0:a3:ce:56:2e:0a:ea:31:26:68:8d:ec:87:8d:d3:8d:
1a:64:de:49:30:49:42:39:0d:52:be:c0:a6:9a:65:51:ed:e0:
c1:ae:df:d6:e5:01:9a:74:57:d9:bd:d6:67:f0:58:18:be:12:
bf:69:01:8e:8b:f5:9a:09:5b:ca:f2:bf:46:a0:b6:82:d5:65:
74:cf:b7:d8:c0:61:68:51:ed:f7:09:e3:8a:65:72:ea:94:b7:
39:fc:68:58:69:6c:f4:b9:75:e4:7d:4b:d4:50:7d:b6:38:12:
bd:44:f4:18:5b:92:38:09:1e:c4:a0:1e:76:81:60:c1:d9:2c:
d8:8f:3a:f9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/LNNZbQb0n1gtbG0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YjFhZDJkZjItYWVlMS00MGFlLTg4ZWYtMzY1MWIyZDY3YzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSE76PSb4rSdR6XWVhgC1CHWfrGHsA8isWwN
5zUAtizCLGRASGDj5wG2xnarHxcgqpmjK2a3mrNegxVbro9IvGw8rm+uTyON0PZ9
MGCRTwRfaXZ461aAl3Az1IvGfXGfZ2dvXxmyr4DYAvrMGSEQIMHeUm+/D7G9Vy2P
LA1KbQtgIQIb0vwMr6Y3vmAppAWV8Hrb8sSkpZK9ZdQW5O6v+txeYbUvjOY7M1VO
NKUkIOdd6qlHPm0OEwhNxlFTftu82c2V/OuOfOcAmSNBgZm1xRv0NZ74W6VHSZ6Q
c1HRbqSDXBo5M1hePOT6hX6A9b1JxYafrAYvyuhieNMDVvTVXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFQ5aq9xcEFaG5DN0tYVdgaNVEtIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWRjMjEwNzAtMWMyZC0z
OTgyLWFlODQtMDllZWU5YTY1YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANN4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAblnx/Y28s3maIf+JNiKbzR/155d/Xzp1XSA7ncyPJrhuf/LQ9EC6JOK3
wJRat+8Rz+wALlihN1I3WCSNAub43agtBBl48LPtVzG7zomsolr6J5Xz7VWhCd4I
n7R15FKbCQ4WY+ZQzyiDevuCVfLZmM2rYA+VIepCYqcIMnC7HYmwo85WLgrqMSZo
jeyHjdONGmTeSTBJQjkNUr7AppplUe3gwa7f1uUBmnRX2b3WZ/BYGL4Sv2kBjov1
mglbyvK/RqC2gtVldM+32MBhaFHt9wnjimVy6pS3OfxoWGls9Ll15H1L1FB9tjgS
vUT0GFuSOAkexKAedoFgwdks2I86+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:22 2025 by rpki-client