Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e88567c-8cc6-3341-80fa-96f59595b521.roa
File: 5e88567c-8cc6-3341-80fa-96f59595b521.roa (raw, json)
Hash identifier: rl3HJasfMwvtyl2vcwGR0vD75Fei72b7gjU3fORomRU=
Subject key identifier: E9:D7:EB:0C:10:D0:6A:31:02:D6:F7:03:22:00:69:98:6A:8D:B3:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D810879D77EBA2BEF93901840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e88567c-8cc6-3341-80fa-96f59595b521.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.119.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:08:79:d7:7e:ba:2b:ef:93:90:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=5c36b484-3828-456a-9c63-c1a8a05438d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:0b:70:a8:21:91:68:c2:1e:f7:ee:d6:a5:
26:a8:74:87:5f:36:05:5a:67:cb:f4:a5:b2:e7:fb:
b1:46:24:c0:3b:be:64:5d:ae:c4:43:6b:4d:b7:24:
1a:63:d2:cb:98:20:27:43:ca:d7:9d:75:f6:a7:fc:
b4:35:b5:86:69:15:86:dc:b4:35:2f:07:48:19:38:
3c:de:60:ee:99:56:a4:35:88:b6:f4:f7:02:44:74:
e8:b5:9c:dd:b5:05:d3:a3:05:26:70:58:52:17:ea:
9a:5f:f6:0a:19:27:3a:49:e0:5c:75:7a:ba:3e:e7:
9d:7b:ea:ae:9d:d7:bf:3f:cd:40:c0:ea:0b:d1:ff:
2d:34:8d:6f:db:f8:72:52:5a:6f:3d:28:2c:41:85:
6a:5a:c1:3f:26:b2:5e:4a:1a:a9:f2:87:8c:7f:af:
a9:20:c9:67:74:a6:d0:56:9f:23:61:eb:fd:f0:6b:
dc:ff:12:f8:77:bc:05:21:7f:e3:1a:68:2a:2e:e4:
91:12:bd:f5:59:f8:9e:77:05:9f:53:10:11:b7:02:
f8:a3:87:cb:80:8f:b3:72:65:07:ee:e7:df:3a:21:
6b:fe:5f:7d:09:56:6a:a5:1c:0b:c5:eb:5e:9f:1a:
49:31:3a:6a:16:9b:79:ac:ee:98:14:0c:dd:a2:19:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:EB:0C:10:D0:6A:31:02:D6:F7:03:22:00:69:98:6A:8D:B3:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e88567c-8cc6-3341-80fa-96f59595b521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:a1:3e:65:41:e0:59:27:27:cc:34:9a:55:04:a3:f6:df:e9:
d8:c0:f5:97:83:80:b5:d3:94:03:6c:46:71:49:d6:87:3c:c0:
8a:60:b1:b6:77:44:89:ec:d6:6b:f4:e2:e0:b2:7c:f1:de:6e:
1d:90:2b:85:6d:5d:c9:45:71:be:42:c6:bd:3f:ad:4f:2b:4d:
af:49:7f:cc:c4:9e:6d:cd:69:fa:f0:ff:43:78:ba:96:16:55:
ec:68:51:67:c2:fb:59:11:95:66:73:76:84:4e:5d:1e:2c:ad:
49:d7:b2:cc:3d:cf:c2:09:a6:0b:c0:dd:4d:3b:0b:f2:08:33:
ae:16:62:d7:d3:9d:3c:1a:2e:12:ca:ad:a0:aa:d8:33:8a:32:
66:21:10:d4:20:99:75:e9:6a:bc:a2:3e:e4:b0:eb:95:21:25:
d9:5d:74:0e:ee:8a:15:c2:57:db:80:a4:d3:ea:46:1f:9d:a4:
65:d5:98:5c:2b:e9:31:40:81:03:5f:d2:c7:72:17:20:6a:aa:
ec:99:c9:c9:28:ce:91:94:91:eb:2e:17:60:92:b1:df:ff:a8:
af:b9:14:03:30:64:18:cf:54:89:22:52:cd:ec:6d:3a:59:c6:
da:23:6e:14:15:6d:ad:75:d7:f7:53:6e:90:58:15:47:10:f9:
39:ad:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:36:52 2025 by rpki-client