Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6eadcae3-ae81-39d3-a051-43465a3df090.roa
File: 6eadcae3-ae81-39d3-a051-43465a3df090.roa (raw, json)
Hash identifier: hJYATAu6npk65xiy3UNCf4AuooVZEm2akWzNHZrzjl8=
Subject key identifier: 92:9C:F8:CB:77:63:58:A8:9B:58:A2:F7:93:2D:DB:F9:43:99:7E:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E95FDFE917E62D1DD7BC13C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6eadcae3-ae81-39d3-a051-43465a3df090.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:95:fd:fe:91:7e:62:d1:dd:7b:c1:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=0d0a5618-4a83-45ba-afb1-4253bff16481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:d2:7e:9f:77:31:c2:f1:bd:d5:f6:f7:67:
eb:db:99:f9:29:3e:48:7e:5b:ce:fc:89:04:e3:94:
7d:77:eb:fe:e4:29:b1:4b:0e:4c:61:42:15:36:d9:
51:14:e4:80:84:d5:e4:a1:d7:1c:39:8c:20:e0:65:
1a:b2:f4:3d:52:19:95:b7:33:73:b9:94:41:8c:93:
cb:39:d5:12:62:49:2f:ea:32:b5:1e:7f:06:8a:1b:
e8:45:bb:22:88:b1:2f:b2:6e:a1:7b:7d:8d:31:a8:
0e:cc:63:f5:db:72:a4:41:28:fc:91:19:d5:9f:f9:
e5:92:e9:83:6b:0a:aa:3e:6e:4e:c2:51:78:51:52:
a0:47:a9:0d:86:9b:97:a5:29:59:1d:39:ef:16:ff:
0d:45:73:cb:a0:7f:ed:ab:be:9e:e9:41:b4:de:42:
ef:8d:3d:be:68:a5:63:e6:c9:70:8b:12:2a:af:d2:
11:2f:7a:4b:70:20:6c:17:ad:2c:dc:73:18:94:96:
ab:17:74:1d:32:54:e5:93:5d:74:78:e7:44:45:b9:
0a:bf:7a:80:07:95:74:eb:00:53:d9:83:78:ee:d5:
8f:3a:d9:5b:d3:6a:5d:6e:30:33:4c:f6:ed:fb:53:
1e:b1:fb:03:26:2a:9f:74:06:80:b6:45:73:25:a6:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:F8:CB:77:63:58:A8:9B:58:A2:F7:93:2D:DB:F9:43:99:7E:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6eadcae3-ae81-39d3-a051-43465a3df090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:5e:94:c3:dd:92:b8:3c:6c:8a:97:6b:11:b1:bf:7d:a9:89:
5f:a9:f2:a4:b9:02:ca:1e:46:43:d0:73:d7:a8:5a:fd:3a:a2:
94:8c:12:e6:74:5b:04:f1:12:70:13:6d:6d:35:12:43:a1:b8:
46:bc:9c:ed:f7:fb:cc:d8:49:88:0c:4a:54:2b:a2:e4:82:40:
ca:3c:2e:12:e2:9d:eb:32:42:04:4d:06:94:d3:0a:79:87:5b:
67:10:59:ae:f1:f8:b0:07:13:dc:c4:ad:56:32:34:e2:ca:d7:
83:d4:a4:13:d9:70:dd:30:6f:47:98:8a:01:46:7a:df:25:0e:
cf:de:8c:82:16:76:c0:59:d9:5f:2a:0c:9d:2f:38:c4:0e:c1:
44:9e:10:b4:2b:13:51:73:f2:32:da:e6:3d:82:57:b5:dd:22:
82:f6:55:5e:ff:81:5f:37:db:6e:a1:cf:c4:10:f0:04:84:3e:
08:dd:3a:2c:45:12:74:44:13:22:9e:42:ea:88:e9:3c:73:30:
00:e9:15:47:38:c5:6b:1a:51:8e:67:08:14:dc:79:44:ed:49:
e4:f0:b9:4e:94:67:58:a7:aa:b2:ad:d7:13:99:2b:b9:24:d4:
1a:ca:3d:f0:c8:32:81:e9:81:a7:ae:e4:08:c7:07:ec:60:2c:
67:a4:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:42 2025 by rpki-client