Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6fe7690c-b3de-3a6f-9f00-c0b8096da82b.roa
File: 6fe7690c-b3de-3a6f-9f00-c0b8096da82b.roa (raw, json)
Hash identifier: SBiid0Yxw2E0ySNTt+Y/8ouJjTSQZqEUWV2b+u86W6s=
Subject key identifier: F3:8A:37:D1:E5:63:AD:EC:FB:56:32:E4:C2:5E:E1:A8:17:5F:E4:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B5D3EB28279D387F1B8C0B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6fe7690c-b3de-3a6f-9f00-c0b8096da82b.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 52.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b5:d3:eb:28:27:9d:38:7f:1b:8c:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=29c22af0-6940-4e37-934a-244a08835474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:e6:3b:4f:f8:fa:00:a8:6c:08:1e:51:5f:
ae:c4:8d:76:93:59:58:03:c3:54:bf:10:de:b4:91:
a5:0a:ed:8f:6b:98:8d:72:3c:c9:6e:47:8f:55:38:
61:41:e3:21:34:94:58:06:fb:a8:9b:f1:c7:a1:af:
66:29:4a:64:bf:4a:e6:bb:36:99:a0:10:20:b7:13:
4e:5b:16:79:4c:5f:f2:12:c7:9a:27:5f:ff:25:8e:
f9:45:5c:a6:f7:45:98:b0:98:fa:44:e6:a0:60:30:
8f:5a:e1:db:1a:ac:3c:6a:7e:d1:8b:16:e0:1f:f7:
0c:08:4a:37:b0:75:be:11:14:97:b1:19:20:bf:2a:
9a:7a:21:8c:77:cb:4b:5a:b8:b9:f0:af:42:a9:c0:
60:f2:12:3a:8e:a5:aa:ef:42:c6:36:eb:32:1f:5c:
b7:0c:07:bb:6c:41:90:5f:0b:4a:73:94:e2:4d:87:
7b:ee:d9:d1:f1:e9:a6:98:13:e0:a2:90:49:53:9e:
a2:be:0b:80:d8:39:58:ba:2a:78:f8:6a:31:17:c9:
1e:eb:66:73:98:d1:94:36:83:5d:93:b0:03:6b:cf:
0c:65:97:4b:85:b8:f2:b8:83:cb:e6:e7:e6:7c:79:
d9:36:a2:d2:45:ef:1f:92:a1:43:26:a5:4a:ae:0a:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:37:D1:E5:63:AD:EC:FB:56:32:E4:C2:5E:E1:A8:17:5F:E4:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6fe7690c-b3de-3a6f-9f00-c0b8096da82b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e2:0e:fc:bf:a1:e4:ca:90:99:ce:f6:f6:36:10:5b:ac:bd:
67:88:b7:9c:b8:53:c3:45:9a:f7:6b:98:b8:e4:73:07:6b:1b:
d1:45:9a:23:8e:50:09:9f:94:16:e0:81:e1:de:50:c5:9f:d5:
39:9d:cf:b9:ff:2c:b6:fd:15:80:18:39:71:dc:18:90:8c:01:
9f:7f:ec:76:68:c1:10:42:d1:1f:ef:cd:09:f1:d0:a3:b7:1f:
01:1f:10:7e:39:77:23:a3:69:1b:6a:bf:e0:19:ab:29:f7:86:
3a:c2:23:8a:f7:07:8f:a8:c9:66:ae:b7:92:d4:1c:f4:db:9d:
ff:e4:dc:c1:f1:e5:92:f0:17:b2:ea:0b:df:1a:45:ae:ba:5f:
65:ab:f6:01:48:7d:e9:bd:9f:4f:0a:ac:b1:bb:6a:28:14:76:
ea:9f:91:17:b1:42:59:af:5e:a8:b1:4f:6a:33:2b:58:97:93:
e4:24:34:cc:5b:8e:58:ef:02:35:08:06:e9:bc:d3:9a:b8:51:
37:24:89:c6:8e:43:f4:56:14:46:25:06:e4:a6:fe:09:81:f0:
18:7e:30:d2:02:88:1f:03:36:71:50:9b:c5:b4:b3:4e:f6:70:
cd:e6:b9:0c:3e:1a:7c:64:4b:ef:cc:a7:f1:f1:eb:af:2e:3b:
59:18:a5:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC10+soJ504fxuMC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNjEyMDAwMFoXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
MjljMjJhZjAtNjk0MC00ZTM3LTkzNGEtMjQ0YTA4ODM1NDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy33mO0/4+gCobAgeUV+uxI12k1lYA8NUvxDe
tJGlCu2Pa5iNcjzJbkePVThhQeMhNJRYBvuom/HHoa9mKUpkv0rmuzaZoBAgtxNO
WxZ5TF/yEseaJ1//JY75RVym90WYsJj6ROagYDCPWuHbGqw8an7RixbgH/cMCEo3
sHW+ERSXsRkgvyqaeiGMd8tLWri58K9CqcBg8hI6jqWq70LGNusyH1y3DAe7bEGQ
XwtKc5TiTYd77tnR8emmmBPgopBJU56ivguA2DlYuip4+GoxF8ke62ZzmNGUNoNd
k7ADa88MZZdLhbjyuIPL5ufmfHnZNqLSRe8fkqFDJqVKrgrtmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPOKN9HlY63s+1Yy5MJe4agXX+QwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmZlNzY5MGMtYjNkZS0z
YTZmLTlmMDAtYzBiODA5NmRhODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANN4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXOIO/L+h5MqQmc729jYQW6y9Z4i3nLhTw0Wa92uYuORzB2sb0UWaI45Q
CZ+UFuCB4d5QxZ/VOZ3Puf8stv0VgBg5cdwYkIwBn3/sdmjBEELRH+/NCfHQo7cf
AR8Qfjl3I6NpG2q/4BmrKfeGOsIjivcHj6jJZq63ktQc9Nud/+TcwfHlkvAXsuoL
3xpFrrpfZav2AUh96b2fTwqssbtqKBR26p+RF7FCWa9eqLFPajMrWJeT5CQ0zFuO
WO8CNQgG6bzTmrhRNySJxo5D9FYURiUG5Kb+CYHwGH4w0gKIHwM2cVCbxbSzTvZw
zea5DD4afGRL78yn8fHrry47WRil1A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:06:45 2025 by rpki-client