Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7037c3d2-08ea-3ddf-87a0-918d790d6f0a.roa
File: 7037c3d2-08ea-3ddf-87a0-918d790d6f0a.roa (raw, json)
Hash identifier: 39Lg6g0Ev/W+6rmvxvDipkb8OvFTWOdtgzq8XIwRFj8=
Subject key identifier: 72:69:AE:CB:AD:0D:32:F4:A5:E7:F2:FF:3D:C7:61:0B:94:50:75:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D8116E447040CAD666408D1A8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7037c3d2-08ea-3ddf-87a0-918d790d6f0a.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:16:e4:47:04:0c:ad:66:64:08:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=f56349c1-49e5-4a96-a12e-1181e487d182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:68:43:eb:c1:ee:ea:c3:21:b4:70:13:bf:dd:
e4:63:8f:54:02:a1:84:67:5f:41:b2:02:2e:c6:d0:
d0:a6:67:ff:8a:d9:e3:18:bb:5f:62:d1:91:6c:95:
a1:fe:e0:9f:39:8e:9b:7d:25:ac:7e:96:d2:71:cd:
1d:be:cb:9a:f6:26:cc:92:82:32:2b:39:a4:fc:f8:
6a:c6:b7:11:10:66:0d:dd:75:56:34:10:6f:0e:10:
ff:17:e5:d9:ff:43:e5:a8:44:2b:d4:37:29:93:a2:
6f:c7:9d:d6:3c:93:56:67:c0:6b:be:6c:c2:7c:2e:
84:41:c3:08:9f:2a:17:68:f9:b3:f8:2c:84:f5:0d:
05:97:34:e0:77:62:d3:d4:28:f3:50:08:88:16:23:
01:62:a4:1a:3a:fe:ef:24:dd:a2:2f:fc:55:b6:05:
76:07:b6:77:27:40:9f:65:77:08:b1:f5:f6:f4:36:
50:76:f9:02:08:27:29:8f:28:83:e6:25:5e:f4:4b:
32:45:6f:20:79:86:27:5f:a9:e5:42:1a:93:59:cd:
b9:53:32:08:cf:34:6f:67:ff:93:07:48:03:82:e4:
72:9e:a8:09:74:7f:c1:dd:ce:51:2f:c5:e7:14:d9:
48:6b:ea:03:f9:a4:ab:84:65:0d:1f:dc:4f:32:e7:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:AE:CB:AD:0D:32:F4:A5:E7:F2:FF:3D:C7:61:0B:94:50:75:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7037c3d2-08ea-3ddf-87a0-918d790d6f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:23:88:35:85:c6:d7:65:b2:65:ce:19:a2:14:ce:39:c5:e0:
14:8f:9f:0d:a5:9c:07:57:cd:9c:d8:b5:30:3b:0e:e5:6b:69:
1f:e9:0e:11:5d:a0:4f:af:2b:ee:ff:e2:64:ec:18:d6:40:d7:
1f:da:8b:77:1b:a7:d7:d4:1a:5b:8a:2a:e9:68:98:d0:aa:97:
f9:6d:25:55:7a:57:5b:2c:ea:ce:9d:6a:d3:43:99:e6:e5:d6:
9d:65:b9:0a:68:96:0f:bd:e9:62:59:3a:ad:61:97:2d:b1:b6:
9b:5b:cc:55:24:29:20:d9:b0:ce:8e:6c:10:a2:5e:0a:7c:38:
54:c6:da:a2:b3:c0:db:e0:ee:34:4d:94:b8:f1:74:3f:49:7a:
a0:e2:0c:2e:59:7d:48:df:bc:6d:fe:ad:48:ef:7a:e5:93:f0:
96:c7:2c:77:ab:fe:cf:58:dc:6f:30:cc:6b:45:d9:b1:35:44:
19:2d:98:1c:8d:e1:77:9f:48:fa:3a:c8:bf:d0:81:5a:09:1f:
67:f7:ad:f4:aa:62:d1:a8:25:48:47:57:e5:f7:72:93:a4:fc:
27:b9:8d:6d:9a:f0:22:39:9a:74:7a:d4:16:bf:98:6e:eb:a1:
95:8b:99:f3:27:75:b5:b3:b3:af:53:ad:6b:03:59:ef:8f:15:
66:d5:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:34 2025 by rpki-client