Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fcfcf87-c0ad-3a90-a45f-4e7709076413.roa
File: 5fcfcf87-c0ad-3a90-a45f-4e7709076413.roa (raw, json)
Hash identifier: o/Sap4hqjSPW0VcLOdgv6jhZQ15FY8KHu5qa55FNrK0=
Subject key identifier: 3E:F8:64:4F:32:DF:14:62:4C:AE:03:DF:16:B5:C7:DC:BC:CC:AD:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1D8A8042B02BEED478F91300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fcfcf87-c0ad-3a90-a45f-4e7709076413.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 52.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:8a:80:42:b0:2b:ee:d4:78:f9:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=3683c541-c868-42e6-bcf0-cf2ac6f3d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:90:3e:9a:fe:83:ca:33:64:b1:59:bf:bc:8f:
8d:f4:f0:1e:16:ac:66:af:54:ee:62:2f:3e:f8:94:
85:9a:e3:f9:6f:39:ae:c9:ca:32:5c:40:3b:d9:c1:
db:f0:0c:37:7f:18:97:80:cb:e1:e4:8e:f7:6b:b1:
67:2b:74:fd:94:ff:9f:d3:4e:96:ac:1a:4f:e6:ea:
7f:3f:ce:55:fd:16:30:3e:10:b6:11:64:42:12:7b:
0e:ba:b7:8f:c0:8d:44:55:b3:01:e0:64:30:aa:fd:
3d:ef:95:28:e1:af:f7:42:41:f8:9a:c7:e0:fa:68:
9e:cd:ff:08:9c:3f:14:66:13:c2:59:c7:8b:89:e9:
44:38:21:8c:ef:65:4f:2f:2f:35:9e:6c:6f:0e:5e:
39:bc:65:34:b0:0d:5c:25:16:9e:cd:30:17:e4:26:
a8:08:fe:ab:de:ac:be:96:6d:90:14:b0:67:cc:82:
0f:1c:de:1a:36:8e:f1:28:01:4b:a5:41:5b:94:a1:
fe:93:33:11:e4:7d:bf:cc:c8:e4:b3:f2:4e:a2:4d:
58:06:cf:6b:6e:b0:62:79:8d:92:18:36:41:3a:e9:
0a:84:be:c2:06:08:1c:9d:32:af:f0:d8:af:5c:d5:
28:52:c4:bf:91:51:d4:de:aa:db:33:1b:c3:aa:23:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:64:4F:32:DF:14:62:4C:AE:03:DF:16:B5:C7:DC:BC:CC:AD:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5fcfcf87-c0ad-3a90-a45f-4e7709076413.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b1:b7:88:41:17:69:ce:c7:1d:e8:d4:74:9e:12:c7:ce:2b:
13:c4:c7:59:9d:33:5d:5a:85:1f:65:a9:92:9c:2e:eb:e9:9e:
7a:d8:ca:bb:22:ec:5e:74:b1:c8:c0:be:0f:05:5e:7c:1c:d1:
40:d6:30:48:9c:5f:15:9a:b6:55:15:86:da:c9:54:79:7f:4d:
b0:24:04:d4:0f:53:7b:4b:e2:37:2e:a5:a9:ba:91:18:89:65:
33:83:4a:b6:9e:44:f6:f5:77:a2:40:28:4d:31:d8:fa:89:c2:
75:61:12:fe:43:d1:50:72:19:c2:3f:c6:99:49:4d:f7:81:68:
8b:85:10:f8:27:37:c0:28:79:56:56:5d:ea:de:c0:f8:2c:da:
15:a5:c7:a9:9e:ae:1a:00:e6:8d:5e:b1:a9:62:6c:53:68:d0:
b6:05:da:60:af:2b:9b:88:cf:c4:d3:48:ae:5f:a2:5b:37:11:
d4:8b:e6:f8:3a:76:a8:aa:44:62:82:3a:74:7e:26:dc:08:99:
a0:ab:f7:5a:37:21:20:50:57:48:9b:e3:73:f2:55:7b:cb:cd:
4c:e9:cf:e3:b7:c6:01:1d:d4:4e:ad:2d:d2:05:7d:4f:51:1d:
3c:a1:ce:6c:8c:d4:bc:0b:a2:02:19:22:1a:b9:12:0e:ee:5f:
56:f8:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:11 2025 by rpki-client