Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72a80a6b-3824-3bfe-9b62-75afb9fbd633.roa
File: 72a80a6b-3824-3bfe-9b62-75afb9fbd633.roa (raw, json)
Hash identifier: oYzCYEbvmDNsbh3OazV97P5EK7BRJY8/4soPEwLs+HQ=
Subject key identifier: 3B:42:35:EE:D5:53:84:68:5E:F0:B2:27:02:CA:34:10:47:42:D5:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF64D92AB2108B9BF03691240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72a80a6b-3824-3bfe-9b62-75afb9fbd633.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 52.208.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:4d:92:ab:21:08:b9:bf:03:69:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=ed629081-eb0d-4f0c-ab76-ca62afce86a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:62:77:b4:ca:45:60:70:37:b9:ed:8f:db:
89:fd:18:be:09:25:af:b9:b8:c3:e2:11:b6:63:51:
04:76:c8:01:ca:eb:1f:fe:8a:a2:8c:f4:20:fd:e8:
81:af:2e:e8:8c:9f:aa:f8:05:30:09:f0:92:65:86:
f2:79:13:97:bf:48:b9:15:e7:84:f7:8c:be:27:d3:
c9:eb:dc:3d:72:18:f0:19:f2:ef:f0:ad:16:53:96:
2b:b5:15:73:ef:ba:71:98:5d:96:72:50:1d:03:b5:
6c:96:03:87:47:b9:c2:ec:9f:4e:f3:5b:b8:99:0d:
6b:a3:79:18:04:06:ab:e3:b1:5a:ef:c3:6c:09:a5:
7e:ef:86:d0:b0:fa:b4:38:57:88:b5:9e:54:66:90:
4b:ff:77:b4:2f:15:b7:77:9a:22:f9:8e:91:2d:f5:
cd:39:b7:fe:9c:0e:08:e3:8e:16:0c:67:8b:4d:f7:
66:bb:7e:6e:76:e1:59:a9:d8:45:be:a3:11:85:1e:
ac:a6:79:72:53:9b:f2:dd:82:01:4e:6e:ec:29:4f:
6c:0e:00:41:c7:17:c6:1b:fe:3f:47:61:4b:41:5d:
1f:23:85:00:28:b6:7d:2f:63:f6:62:67:65:16:9c:
84:ac:a6:3b:22:05:44:14:00:59:d5:b7:32:78:98:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:35:EE:D5:53:84:68:5E:F0:B2:27:02:CA:34:10:47:42:D5:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72a80a6b-3824-3bfe-9b62-75afb9fbd633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.208.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:61:3b:2a:1d:72:59:75:d0:1b:8d:ba:9f:aa:54:e0:f7:5d:
4f:03:e4:7f:06:3e:9d:f4:9d:3e:d6:bb:7d:6c:da:d9:5f:98:
03:00:40:05:c9:75:7d:54:cc:51:7d:38:47:40:47:51:fe:5f:
c2:95:62:a3:e2:83:05:83:84:ac:ce:d4:38:80:13:ac:04:8f:
b1:04:18:e3:be:22:4f:62:37:e4:4c:6b:b6:dd:ed:e3:a3:8c:
de:c4:4d:df:b1:e0:80:ca:ed:3f:15:7b:76:67:5a:75:75:4c:
ee:da:de:f4:5a:c3:cd:f3:d2:d4:90:34:ad:57:17:b5:c7:5a:
77:0d:65:4c:6f:38:27:08:13:69:dd:9d:e5:98:85:81:8c:50:
a5:01:db:b5:f5:11:b8:db:e4:4a:3f:6b:2d:e1:26:43:ea:f1:
7f:fa:a0:fc:0b:5f:c6:91:4f:8d:18:e0:66:c4:3b:b9:18:ac:
9d:91:55:a9:7e:01:a7:05:9c:63:9e:f3:66:9e:99:65:aa:bb:
3f:ac:6d:fd:8a:83:3c:7c:80:ac:bb:69:e0:48:15:b7:5e:5d:
a2:2f:7a:07:f1:01:56:37:6c:88:1b:75:77:43:79:ba:71:4b:
d3:63:dd:87:1c:2f:4e:a5:b0:9f:cb:b1:31:8c:b1:6d:62:8a:
73:da:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:28 2025 by rpki-client