Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cd9c11a-7a61-3013-863a-47b9901c21b8.roa
File: 7cd9c11a-7a61-3013-863a-47b9901c21b8.roa (raw, json)
Hash identifier: t3wcUwCz5WVF13gO0IMIX6xhmI3Gy5c89/qWgM/J6BE=
Subject key identifier: F7:8B:D4:5A:E2:F7:64:7B:B2:06:BC:58:C3:16:2D:E8:85:D8:75:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3279B00750F2288656C93500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cd9c11a-7a61-3013-863a-47b9901c21b8.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 52.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:79:b0:07:50:f2:28:86:56:c9:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=015efdca-1c2b-4e35-ad54-8154ac10c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:d8:1a:1d:43:e1:b5:87:69:38:20:b7:a4:
3c:8e:2c:d6:68:fe:52:57:30:28:dd:17:51:3c:68:
63:ee:d1:ce:87:49:1d:25:c7:3d:83:4a:a6:78:26:
94:d9:1e:a1:f3:04:f3:b2:fb:a0:15:1b:40:82:8f:
d3:af:66:51:c4:10:f6:d0:d1:b8:75:b4:f8:56:23:
c1:0e:13:4d:b9:a8:68:ce:b4:dc:a7:fc:7d:7a:b6:
e7:11:69:31:aa:05:c9:35:19:db:75:6f:81:02:e5:
25:83:eb:9a:c8:54:a4:e8:8f:15:67:6a:d7:cd:ac:
30:7b:94:1e:19:de:c2:31:e2:55:fe:dd:77:f0:b6:
a6:e6:9c:5c:e5:a9:dd:3b:be:4c:b3:97:38:25:c4:
a5:18:9e:b7:60:4b:db:f4:25:71:56:1f:a6:2b:a1:
01:c4:b8:76:c0:bc:86:5d:12:04:38:14:2f:5a:5c:
fe:a4:ec:25:97:9a:7a:72:da:29:60:af:13:85:6d:
e2:79:14:c2:8e:8f:75:c3:2c:2b:ab:cd:ee:e8:3b:
fd:2f:b9:da:dc:cb:22:74:c7:12:3d:3c:8f:ed:ef:
80:12:78:ce:0b:88:57:a4:ce:d1:d6:fa:c3:ed:cb:
a5:4c:60:c1:83:46:c0:10:cc:c3:29:cc:fa:4e:67:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:D4:5A:E2:F7:64:7B:B2:06:BC:58:C3:16:2D:E8:85:D8:75:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cd9c11a-7a61-3013-863a-47b9901c21b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:03:36:94:00:a3:d0:03:42:03:5f:f9:01:b8:df:d8:b3:22:
6b:71:c8:09:30:42:f3:37:bf:c3:5a:1f:a3:55:d3:be:76:5c:
01:17:fe:2d:df:e3:92:bd:97:68:1d:72:1c:ea:b6:9d:0c:55:
80:d4:51:1c:f6:e4:29:2d:3b:05:a3:0a:de:d2:3f:95:d7:4e:
dd:04:e0:2d:9e:33:64:24:d1:71:09:fd:61:3c:d9:6b:14:8b:
cf:00:c2:c1:54:12:71:e8:01:66:ca:de:4e:37:1a:9c:75:37:
db:3b:ed:66:64:c1:ec:d2:a5:db:b5:25:19:52:6f:78:f6:be:
e6:c9:6a:0f:09:75:c7:e8:a7:2e:0c:33:81:ea:54:b8:11:61:
57:5a:19:9d:5c:9d:25:78:fe:61:19:59:a5:bd:62:1e:87:c9:
1d:06:8e:27:ed:0f:63:9a:53:ba:8b:72:12:d8:9f:ba:c5:36:
75:3f:06:78:a6:f8:00:5d:c4:51:28:2a:54:8d:6e:e8:ff:a4:
76:4c:2c:12:e2:c6:4f:4f:ee:dc:18:d5:c0:4a:56:34:e2:0e:
4c:ed:da:ad:e0:9b:41:88:5f:d7:cd:d8:7f:9f:6a:c2:b6:e5:
15:c3:cc:aa:df:96:66:91:da:f4:b8:62:e1:0f:fe:9c:25:f6:
09:85:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:59 2025 by rpki-client