Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/767241a8-a4a9-3f72-984b-a1aa5d848d8b.roa
File: 767241a8-a4a9-3f72-984b-a1aa5d848d8b.roa (raw, json)
Hash identifier: IQiMOeiT9B8qMXGxBAwbcwO/ESa+Z8Z0Wdp9RoVibkU=
Subject key identifier: 81:BD:BC:A5:CA:13:8A:23:1D:D8:8C:61:61:A5:5F:41:83:CA:12:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6BB57B0BB444BEB3337FDD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/767241a8-a4a9-3f72-984b-a1aa5d848d8b.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.124.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:b5:7b:0b:b4:44:be:b3:33:7f:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=cfff683c-5f38-4f32-8e50-5c87098b0e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:17:d2:7e:e6:1f:ba:4a:5c:7f:3f:26:a2:
2e:84:58:48:2c:98:6e:43:32:26:47:88:74:c4:9e:
c0:de:31:87:d4:44:a0:d0:3b:80:64:1a:eb:fd:10:
3c:87:a8:a5:3e:4f:5c:56:4b:99:23:2b:cd:66:ea:
bb:c3:6a:ca:6c:02:60:f2:69:1c:08:2e:7e:82:94:
6d:c9:0c:b8:cb:b2:47:ee:fe:99:39:87:b2:15:23:
0a:59:2d:a2:af:5e:3d:e0:71:89:74:34:03:ca:67:
38:9d:cc:9b:ec:ef:13:a4:fc:d9:b7:39:01:fb:fa:
90:12:d4:6e:05:38:03:d6:cc:40:fd:9c:71:f1:6e:
fd:26:1f:22:54:2d:2c:98:01:e9:d3:cf:f1:e9:ee:
be:54:dc:a0:e0:f2:41:67:0a:6a:77:6f:9f:0a:65:
4c:4b:f4:df:d9:b4:8d:a4:c0:4c:fa:c8:ec:dd:b4:
69:80:30:92:bc:42:31:9c:9c:48:f0:80:36:aa:2b:
91:10:04:a9:19:74:b7:04:f2:d0:95:fd:99:0d:d6:
a4:f5:db:f5:48:59:3f:27:a3:c7:91:c7:dd:65:68:
8f:b3:e1:d8:99:54:4b:60:ad:e5:c9:67:0b:ea:32:
45:bb:ab:c1:e2:61:0a:3e:19:07:71:e1:93:03:6d:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:BC:A5:CA:13:8A:23:1D:D8:8C:61:61:A5:5F:41:83:CA:12:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/767241a8-a4a9-3f72-984b-a1aa5d848d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:77:a5:ad:df:ea:7e:6e:83:0c:77:09:ea:3d:e1:f4:a7:b2:
5a:71:66:8a:73:74:3c:af:33:c3:d1:d8:89:df:d7:51:fa:33:
ed:a5:09:75:78:87:0b:e6:c7:51:c1:49:0f:65:0c:2a:4b:a1:
cf:f6:48:cf:ec:65:8d:e5:43:34:ca:bd:e0:23:32:ed:3c:ec:
28:ee:1b:2f:a9:75:cd:ec:8e:58:42:83:64:ba:88:8d:a9:1d:
30:53:74:29:95:f2:42:89:76:38:ea:29:20:0f:0e:5b:5e:49:
6a:0e:b6:54:7a:f8:ea:ef:5b:82:a0:20:8f:fb:ec:68:7d:3b:
34:37:6e:00:3a:06:fd:cd:17:cb:be:2e:0a:91:6f:98:0a:ee:
29:ff:1c:1d:d9:57:a9:21:ac:41:9b:6c:6e:cc:5d:21:10:7a:
f6:89:4f:3b:a7:ff:2b:66:48:f2:8b:ab:e0:2c:ba:6b:f1:b5:
53:6e:7c:d5:4e:78:89:d7:91:7e:68:03:b0:66:07:8f:0e:aa:
b5:ca:24:47:12:04:33:0f:eb:f2:4c:83:34:ab:d9:9f:92:bc:
2a:38:40:c7:48:0b:ed:26:15:1e:db:70:f3:fd:42:ad:60:4b:
a1:ab:75:56:36:50:b7:28:18:07:b8:5e:b6:3c:a1:c1:cd:e6:
2c:ef:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:11:19 2025 by rpki-client