Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e04ad76-f281-3f3c-a173-17f872352bd3.roa
File: 6e04ad76-f281-3f3c-a173-17f872352bd3.roa (raw, json)
Hash identifier: LtCVxA+IoHWbfmhyQYx3QlonFixNSNxEV0isc8pln9E=
Subject key identifier: E6:BD:C8:BA:77:1B:16:F5:05:DC:6B:37:92:7B:00:9E:AC:6E:1A:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F2BA7B555186D9AC93AA880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e04ad76-f281-3f3c-a173-17f872352bd3.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.64.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:2b:a7:b5:55:18:6d:9a:c9:3a:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=86a75438-9cab-45e8-afba-ffaf3c9a274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:d8:c0:22:45:13:b7:44:95:d8:0b:c3:b3:
48:90:1d:1b:32:f4:15:4f:fd:85:f8:e7:97:a0:93:
6c:63:58:5d:ba:ee:16:8a:22:c1:8a:60:ca:80:41:
d4:20:27:57:b4:ca:3c:a7:bb:5c:23:2c:82:ec:74:
15:8d:c9:82:14:1a:2b:5d:aa:d9:14:60:8b:71:9b:
38:db:65:cb:0e:3a:08:12:2b:80:31:fb:18:05:ba:
a3:cb:52:8a:fb:82:55:2d:fc:05:c7:62:24:8d:c3:
86:6a:13:9e:6a:3a:c8:56:c3:01:bf:08:db:c0:70:
62:a2:c4:d8:a9:fd:aa:e1:aa:00:16:e7:bb:05:57:
b5:00:86:78:18:77:58:18:17:82:61:33:03:d4:6d:
3e:53:e1:2f:6f:1b:1c:0f:64:06:b8:7f:ca:5c:da:
14:de:33:23:c1:a4:e9:d3:bf:11:cb:0a:f3:b8:9e:
08:de:b9:59:60:f6:48:8b:81:bd:c9:86:a1:70:af:
8a:a9:ec:2d:74:7e:22:e3:42:e3:36:77:bc:c6:ac:
a4:5d:96:d6:82:88:ab:2c:e0:be:f5:2e:77:d9:43:
2e:6e:c8:fd:70:d0:b1:4d:db:f7:d3:95:d3:32:bf:
9f:8a:dd:56:12:04:86:8e:42:36:64:76:fc:87:e7:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:C8:BA:77:1B:16:F5:05:DC:6B:37:92:7B:00:9E:AC:6E:1A:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6e04ad76-f281-3f3c-a173-17f872352bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.64.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:83:75:f1:6d:25:28:64:03:b0:7c:17:50:99:94:20:3e:74:
81:93:4f:cd:07:06:f5:25:b3:3b:0f:bb:09:a7:36:85:e0:75:
5f:f2:16:02:cb:25:91:9a:10:78:6d:76:f3:bc:15:e4:81:a9:
a4:ea:68:34:53:85:9e:8f:d1:ba:66:cc:d6:7c:a8:8f:d6:77:
c7:6c:78:b8:9c:0c:26:1a:e3:e8:27:75:39:88:34:4c:15:d4:
b8:6f:3e:0d:af:7c:87:c6:26:1b:37:3f:6c:e6:7a:16:6c:5c:
67:bd:2a:92:5a:05:4b:48:c2:1e:5e:d8:0e:c8:4e:2d:6c:87:
b8:19:78:6b:4a:d1:5d:a1:94:13:10:42:9a:68:63:92:c3:de:
90:64:7c:42:00:5f:9d:33:13:92:79:e2:8b:e1:e5:a4:44:2e:
a3:ee:4f:fd:b3:20:42:c6:23:d2:45:89:25:df:23:6a:32:06:
5b:60:ac:fd:04:c6:d7:6a:2d:f3:ef:93:e9:06:9a:14:37:6f:
85:3a:83:c7:01:e5:c6:58:01:12:68:f6:c5:c2:47:41:24:67:
36:6a:7b:5b:4d:4f:f8:e7:b6:0c:38:f1:de:92:84:cf:a6:54:
79:1f:92:8e:a4:0f:f7:67:a3:a0:91:56:4b:03:6b:92:fd:4a:
15:93:8a:eb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5vK6e1VRhtmsk6qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ODZhNzU0MzgtOWNhYi00NWU4LWFmYmEtZmZhZjNjOWEyNzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGPYwCJFE7dEldgLw7NIkB0bMvQVT/2F+OeX
oJNsY1hduu4WiiLBimDKgEHUICdXtMo8p7tcIyyC7HQVjcmCFBorXarZFGCLcZs4
22XLDjoIEiuAMfsYBbqjy1KK+4JVLfwFx2IkjcOGahOeajrIVsMBvwjbwHBiosTY
qf2q4aoAFue7BVe1AIZ4GHdYGBeCYTMD1G0+U+EvbxscD2QGuH/KXNoU3jMjwaTp
078RywrzuJ4I3rlZYPZIi4G9yYahcK+KqewtdH4i40LjNne8xqykXZbWgoirLOC+
9S532UMubsj9cNCxTdv305XTMr+fit1WEgSGjkI2ZHb8h+dDuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOa9yLp3Gxb1BdxrN5J7AJ6sbho6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmUwNGFkNzYtZjI4MS0z
ZjNjLWExNzMtMTdmODcyMzUyYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENEAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAs4N18W0lKGQDsHwXUJmUID50gZNPzQcG9SWzOw+7Cac2heB1X/IWAssl
kZoQeG1287wV5IGppOpoNFOFno/RumbM1nyoj9Z3x2x4uJwMJhrj6Cd1OYg0TBXU
uG8+Da98h8YmGzc/bOZ6FmxcZ70qkloFS0jCHl7YDshOLWyHuBl4a0rRXaGUExBC
mmhjksPekGR8QgBfnTMTknnii+HlpEQuo+5P/bMgQsYj0kWJJd8jajIGW2Cs/QTG
12ot8++T6QaaFDdvhTqDxwHlxlgBEmj2xcJHQSRnNmp7W01P+Oe2DDjx3pKEz6ZU
eR+SjqQP92ejoJFWSwNrkv1KFZOK6w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:34 2025 by rpki-client