Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e22e81b-f862-3d59-aada-570b2db1d979.roa
File: 7e22e81b-f862-3d59-aada-570b2db1d979.roa (raw, json)
Hash identifier: SDA76KQeQF1uwwJOUNQ97lVUrJDJC7WnhnDqIXTnr4U=
Subject key identifier: DC:DA:3E:5B:C4:78:83:CB:A7:69:BC:07:10:7D:BB:99:70:36:B2:90
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F2685B934A4421C9366B02A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e22e81b-f862-3d59-aada-570b2db1d979.roa
Signing time: Mon 05 Sep 2022 12:00:00 +0000
ROA not before: Mon 05 Sep 2022 12:00:00 +0000
ROA not after: Tue 11 Oct 2022 04:00:00 +0000
asID: 7224
IP address blocks: 52.46.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:26:85:b9:34:a4:42:1c:93:66:b0:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 5 12:00:00 2022 GMT
Not After : Oct 11 04:00:00 2022 GMT
Subject: CN=7325c47a-2e15-4f7d-b174-3195388b9886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:18:0c:06:4c:a6:9d:bb:22:34:d8:fd:96:
9c:4b:2d:bf:9b:93:f5:bf:d3:a8:51:53:6c:fb:89:
a1:83:17:e6:55:37:9d:ba:b2:dd:1c:aa:a5:82:ad:
7d:b8:5f:78:b0:00:76:ff:23:fc:3b:27:47:5e:1a:
30:b3:d3:83:ec:dd:b8:cc:9b:6f:b3:5d:fb:1e:fe:
bf:6b:31:77:73:71:99:46:ae:fd:8d:a0:78:e8:24:
0e:b7:d2:9d:a3:70:60:51:b5:53:b4:da:93:6e:a7:
c8:ef:d7:2e:80:f7:e8:d5:d8:fc:53:44:79:20:dc:
99:14:22:20:ed:18:25:c8:13:71:6a:86:4f:71:46:
6c:0d:4d:ba:03:83:d3:9d:fe:a6:b3:ba:44:d0:30:
c0:bd:27:3e:6d:89:91:e1:81:d6:0f:b2:3d:91:86:
9e:ae:61:bc:be:c5:cb:8e:fc:6c:3e:0f:4f:a0:be:
a3:49:22:56:e4:61:5e:9c:22:f3:7b:83:fa:e1:25:
6d:e5:b0:e8:ea:49:dc:ec:fe:ad:1e:88:8e:48:61:
8f:92:66:bc:10:d7:a4:29:54:58:57:11:94:ac:ac:
8e:10:24:3f:53:ea:3c:6f:f4:2d:95:20:de:0e:06:
e2:1f:f0:9c:53:91:fb:bb:39:4c:0e:9a:ab:9a:30:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DA:3E:5B:C4:78:83:CB:A7:69:BC:07:10:7D:BB:99:70:36:B2:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7e22e81b-f862-3d59-aada-570b2db1d979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.46.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a1:47:d4:ef:f7:b3:7e:54:ab:5d:8e:2a:f4:e1:12:b8:bf:
f3:b7:8e:23:bf:70:70:17:0c:a3:95:de:9b:4f:c1:40:3b:31:
8a:06:08:c0:4d:09:8f:cb:6d:0a:0d:1b:c2:3b:4a:4a:0e:73:
41:e4:f3:7b:42:14:5b:22:1d:8b:66:76:48:6e:0b:c1:02:96:
6c:cb:07:68:c5:19:34:0a:6d:8a:a5:8c:bc:db:cf:d8:af:36:
42:9f:72:8a:cc:48:c5:5c:ee:70:19:7c:1c:d7:1f:f0:07:a4:
70:92:d2:6c:d1:84:04:b1:d2:28:87:ba:11:91:17:1d:98:4d:
e5:12:24:b7:91:f1:4f:28:76:cb:af:37:a0:e3:0e:56:43:68:
36:2f:d5:bf:22:44:fc:1e:bc:1b:04:81:78:a3:6c:28:cb:63:
e4:da:37:75:b6:fa:1e:af:80:95:da:ce:87:a2:0b:e2:bf:83:
27:ed:a8:4c:43:1e:31:18:61:52:3f:9b:db:88:a5:c8:49:87:
be:e8:b9:34:59:8d:fa:26:74:f4:e2:db:98:db:77:f6:6f:d8:
8b:04:5a:f1:e3:a7:41:22:89:2a:cd:2b:66:27:c0:a8:6a:0b:
9e:1f:f8:7b:c5:af:8d:8f:3f:81:f8:bd:3f:ee:2c:02:ea:f1:
9d:d7:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:12 2025 by rpki-client